# Privacy > What serin-labs.com collects, what the cart and flash tool keep in your browser, how contact and waitlist messages are handled, and where firmware comes from. Source: https://serin-labs.com/privacy.html Last updated: 2026-10-27 Serin Labs designs its products and website to minimize data collection. This site uses no cookies or advertising trackers, does not sell personal data, and uses self-hosted analytics. A few features save a small record in your browser, on your own device, and it stays there. The personal information we hold is limited to messages sent through the contact form, including waitlist requests, and the information required to fulfill orders. Last updated October 26, 2026. ## Analytics We run a self-hosted instance of [Umami](https://umami.is/), an open-source analytics tool, on our own server. It does not set cookies, store full IP addresses, fingerprint visitors, or track visitors across other sites. It provides aggregate information such as page views, referring sites, and link selections. We do not send analytics data to Google Analytics or another third-party analytics service. ## Server logs Our web server does not keep an access log for this site or for the firmware mirror at serin-labs.com/firmware/, so ordinary page views and downloads are not written down one request at a time. The server does record errors and operational messages, and an entry of that kind can include the address a failed request came from. We use those records to keep the site working and to look into problems, and they are rotated out as new ones are written. The site is served through Cloudflare, which sits in front of our server and handles the connection under its own privacy policy. ## Cookies and browser storage This site sets no cookies. It does use your browser's local storage, which holds a record on your own device that only pages on serin-labs.com can read. None of it is sent to Serin Labs, and none of it is used for advertising or to follow you between sites. - **The cart.** The cart keeps the items and quantities you add, so they are still there if you close the tab and come back. It holds nothing else: no name, no address, no payment details. It is never sent to Serin Labs. A cart left alone for 14 days is dropped the next time you load a page. When you go to checkout, the items are handed to Shopify in the checkout link and your copy moves to a saved list the cart offers to bring back, which expires the same way. To clear it now, remove the items in the cart drawer. - **The flash tool.** After you flash a board, the [flash tool](https://serin-labs.com/flash.html) saves a record of it so the page recognizes the board next time and the quick start can show the right steps. The record holds the board's MAC address, its recovery hotspot name, the address of its web interface, the pairing code and QR data if the firmware you installed has one, which firmware that was, and the date. Select Forget on the saved card to delete it. - **The setup guides.** The [quick start](https://serin-labs.com/setup.html) reads the flash tool's saved record to offer a link to the matching setup guide. That guide uses the record to show your controller's connection and pairing details. To delete the record, open the [flash tool](https://serin-labs.com/flash.html) and select **Forget** on the saved card. Clearing site data for serin-labs.com in your browser removes all of it at once. If your browser blocks site data, these features simply start fresh on every visit. ## Contact form Submitting the [contact form](https://serin-labs.com/contact.html) sends us your email address, an optional model number, and your message. [Resend](https://resend.com/), our email delivery provider, delivers the submission to our mailbox, where it is retained as ordinary correspondence. We do not share or sell it. To request deletion of a previous message, contact us through the same form. The same form is how you join the waitlist for a product we have announced but not yet released. If you send us a message like that, we keep your email address so we can send you the notice when ordering opens and the development updates you asked for. That is the only mailing we do. There is no newsletter, and writing to us about anything else does not put you on a list. Every launch or development email includes a way to be removed, and you can also ask us to remove you through the contact form. ## Purchases Orders placed directly on this site are processed by Shopify under [Shopify's privacy policy](https://www.shopify.com/legal/privacy). Orders placed through our Etsy shop are processed by Etsy under [Etsy's privacy policy](https://www.etsy.com/legal/privacy/). In both cases, Serin Labs receives the name, shipping address, and order contents required to fulfill the order. We do not receive payment card details. This site does not set cookies. Shopify checkout runs on Shopify's domain and uses cookies required to process an order. Those cookies are governed by Shopify's privacy policy. ## The browser flash tool The [browser flash tool](https://serin-labs.com/flash.html) communicates with your controller locally, through the browser's Web Serial connection. Information about your controller, your network, or your HVAC system is not sent to Serin Labs. The firmware itself has to be downloaded. Your browser fetches the manifest and the firmware images from our own mirror at serin-labs.com/firmware/ first, then from GitHub, then from the jsDelivr CDN, taking the first host that answers. Whichever host serves the files sees the IP address the request came from, as any web server does. GitHub and jsDelivr handle those requests under their own privacy policies. What our server records is described under Server logs above. ## The product The controller has no Serin Labs account and does not report to us. Once firmware is installed, it communicates with your Mitsubishi indoor unit and the smart home platform selected during setup, and day-to-day control stays on your local network. Nothing about your home, your network, or your HVAC system is sent to Serin Labs. Firmware updates are the exception, because the files have to come from somewhere. The controller does not download them itself. The phone or computer that shows its web interface gets them from GitHub and sends them to the controller over your local network. This occurs only when you open Versions in the Firmware section, which gets the list of releases, and when you select a version to install. GitHub sees the IP address of the request, which on a home connection is your router's public address, and handles it under its own privacy policy. The Serin Link updates the same way: it asks a controller it is paired with for Wi-Fi credentials over their encrypted connection, joins the network long enough to download and verify a signed image, installs it, and disconnects. Neither device sends us anything about your system, and neither identifies itself to us beyond what an ordinary download request shows. ## Your rights Subject to applicable privacy law, including the GDPR and CCPA, you may request access to or deletion of personal information held by Serin Labs. This information is generally limited to contact-form correspondence and order records. Submit a request through the [contact form](https://serin-labs.com/contact.html). ## Changes If our privacy practices change, we will update this page and its revision date.