Who this policy covers
This policy applies to theatticlab.net and to data recovery, media digitization, and related services provided by The Attic Lab ("The Attic Lab," "we," "us," or "our"), based in Pittsburgh, Pennsylvania. It explains what information we collect, why we use it, when we share it, and the choices available to you.
Information we collect
Depending on how you contact us and the service you request, we may collect:
- Contact information, such as your name, email address, phone number, and mailing or return address.
- Case information, such as the device or tape type, the problem you describe, urgency, shipping method, referral source, requested files, and case communications.
- Device and media contents. A drive, computer, memory card, tape, or other item you submit may contain personal, confidential, financial, health, employment, or other sensitive information. We may encounter that information while evaluating the item and performing the work you authorize.
- Transaction and shipping information, such as your quote, approvals, payment status, carrier, tracking number, and delivery records. Payments made through PayPal, Venmo, Zelle, or another payment service are also subject to that provider's privacy practices. We do not ask you to provide a full payment-card number through this website.
- Website usage information. We use Plausible Analytics and Google Analytics to understand traffic, such as page views, referral sources, approximate location, browser, device type, and site interactions. Plausible does not use cookies or persistent identifiers. Google Analytics uses first-party cookies, described under “Cookies and analytics” below. Google Signals and advertising personalization are disabled in our site configuration.
- Information you provide in other communications, including email, telephone, voicemail, or in-person conversations.
How we collect information
We collect information directly from you when you submit a form, email or call us, approve a quote, ship or drop off property, make a payment, or otherwise communicate with us. We also receive limited information from service providers involved in a case, such as a shipping carrier or payment provider.
Website intake forms are processed by Formspree. Formspree receives the information you enter and technical information associated with the submission so it can process and deliver the form.
How we use information
We use information to:
- respond to inquiries and provide preliminary assessments;
- prepare quotes and obtain authorization for work;
- evaluate, recover, digitize, verify, and deliver customer data or media;
- coordinate drop-off, shipping, payment, and return of property;
- provide service updates and customer support;
- protect customers, our systems, and our legal rights; and
- maintain tax, accounting, transaction, and other records required for legitimate business or legal purposes.
We do not sell personal information. We do not use customer files, recovered data, or recordings for advertising, profiling, artificial-intelligence training, or unrelated purposes. We do not add inquiry information to a marketing list without separate consent.
Customer devices, files, and recordings
Access to submitted media is limited to what is reasonably necessary to diagnose the problem, perform the authorized service, verify results, and deliver the requested output. Because the work may require reviewing folder structures, filenames, file previews, or portions of recordings, we cannot promise that no human will ever see customer content. We treat that content as confidential and do not disclose it except as described in this policy.
Recovery images, extracted files, and digitized working copies may be held temporarily for quality control, delivery, or a reasonable opportunity to resolve a delivery problem. They are not an archival backup service. You may ask about the retention schedule for your case or request earlier deletion after confirming successful delivery, subject to technical, legal, and recordkeeping limitations.
When we share information
We may share limited information:
- with vendors that help operate the website or complete a case, including Formspree, Plausible Analytics, Google Analytics, email and file-delivery providers, payment providers, and shipping carriers;
- with a specialist or referral partner when you ask us to arrange or authorize that transfer;
- when reasonably necessary to comply with law, legal process, or a valid government request; protect a person's safety; investigate fraud or unlawful activity; or establish, exercise, or defend legal claims;
- in connection with a sale, merger, financing, reorganization, or transfer of the business, subject to appropriate confidentiality protections; or
- with your direction or consent.
Service providers may use information only under their own agreements and privacy obligations.
Cookies and analytics
Plausible Analytics measures aggregate site traffic without cookies or persistent identifiers.
Google Analytics sets first-party cookies (named _ga and _ga_*)
so it can tell new visits from returning ones and measure how pages are used. We use it
only to understand site traffic. Google Signals and advertising personalization are turned
off, and we do not use analytics data for advertising. Learn
how Google uses information from sites that use its services.
You can block or delete cookies in your browser settings, or install the
Google Analytics opt-out browser add-on.
The site does not use advertising cookies. Third-party sites linked from this website may use their own cookies and are governed by their own policies. Because there is no common standard for responding to browser “Do Not Track” signals, the site does not change its behavior when it receives one. If our use of cookies or analytics changes materially, we will update this policy and provide any notice or choice required by law.
Retention
We keep contact, case, transaction, and shipping records only as long as reasonably necessary to provide the service, support the customer, maintain required business and tax records, resolve disputes, and meet legal obligations. Retention periods vary by the type of record and the needs of a particular case. Customer working copies are handled as described in “Customer devices, files, and recordings” above. Backup systems and service providers may retain residual copies for a limited period before deletion is complete.
Security
We use reasonable physical, technical, and administrative safeguards appropriate to the sensitivity of the information and the nature of the service. No storage, transmission, or recovery system is completely secure, however, so we cannot guarantee absolute security. Please do not place passwords, Social Security numbers, full financial account numbers, or other unnecessary sensitive information in the website intake form. If a password or recovery key is needed, arrange a separate method of delivery with us.
Your choices and requests
You may ask us to provide, correct, or delete personal information we maintain about you, or to explain how it has been used or shared. Some information may need to be retained to complete a service, keep required records, protect security, or comply with law. We may take reasonable steps to verify your identity before acting on a request.
To make a privacy request, email josh@theatticlab.net or call (412) 228-0236.
Children's privacy
The website and services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information online from a child under 13. If you believe a child has submitted personal information, contact us so we can review and delete it where appropriate.
Changes to this policy
We may update this policy as our services, vendors, or legal obligations change. The effective date at the top identifies the current version. Material changes will be presented on this page and, when appropriate, communicated directly to affected customers.
Contact
The Attic Lab
Pittsburgh, Pennsylvania, United States
josh@theatticlab.net
(412) 228-0236