Draft updated October 1, 2026. Effective date: pending adoption. This draft describes the publicly visible LabThrift services. Account processing, provider arrangements and retention details require confirmation before adoption; this draft does not replace existing privacy commitments.
Scope and operator
Digifender LLC ("we," "us") operates the guides at labthrift.com, Lab plan at plan.labthrift.com, and ByteRush at app.labthrift.com. Their information handling differs. Reading a guide does not itself create a planner or learning account. The company website notice covers digifender.com and company correspondence.
Reading the guides
The main site publishes guides without requiring an account. Delivering pages still involves technical information such as your IP address, requested URL, request time, browser details and security signals. The site is delivered through Cloudflare and loads Cloudflare's performance-measurement beacon and security features. Performance information can include page-load measurements, referring pages and details of the page and browser environment.
Cloudflare explains the beacon's operation in its RUM documentation and its broader processing in its privacy policy. Performance measurement is distinct from advertising tracking. No marketing pixels were identified in the public pages reviewed for this draft; the site should not be described as collecting no technical information.
Your selected appearance can be saved in the browser. See the Cookies and Browser Storage Notice for the distinction between local preferences, security storage and performance measurement.
Lab plan information
The planner asks for a username and uses passkeys. It does not request an email address or password in the public registration interface. Passkey authentication involves credential identifiers, public-key verification material and account or session records. Your device or passkey provider manages the private credential and any device-unlock step; a passkey is not a promise that the rest of your notebook is end-to-end encrypted.
Information you choose to put in the notebook can include equipment details, service allocations, project progress, rack and switch-port labels, hostnames, network addresses, purchase ideas and free-text notes. Save and import features submit notebook information to the service. A nickname does not make those contents or associated network metadata anonymous.
Additional passkeys and short-lived enrollment codes support access from other devices. The public interface offers JSON export, import and account deletion. Those controls describe the actions available to you; they do not establish a verified deletion timetable for provider logs or backups.
ByteRush information
ByteRush stores learning state in your browser. This can include followed topics, lesson completion, quiz responses, streaks, points, achievements, inventory entries, preferences and synchronization status. Its passkey account features can associate progress with an account and send it to the service for synchronization. Device-only progress and synchronized account information are different copies.
The app provides backup export and restore controls. A restored file can contain account identifiers or other information saved in browser storage, so treat your backups as private. A sync status of saved on this device does not establish that a server copy is current. Clearing browser storage can remove local progress without deleting a server account or server-held information.
Purposes and access
The proposed purposes for this information are to deliver guides and lessons, authenticate access, save and synchronize information you choose to submit, maintain preferences, investigate faults, protect the services, respond to requests and meet legal obligations.
Cloudflare processes delivery, performance and security traffic. Other hosting or storage providers used for account records must be confirmed before this draft is adopted. Authorized operators and service providers may access information as needed for service operation, support and security. Advisers or authorities may receive relevant records when required by law or necessary to protect rights. A business transfer would remain subject to applicable protections and existing commitments.
This draft does not authorize selling your notebook, disclosing it for advertising, combining it with Whumpo prompts, or using it to train a general-purpose AI model. Links to third-party stores, documentation or passkey providers take you to services with their own practices.
Retention, deletion and security
Browser-held preferences and progress remain until cleared, replaced or otherwise removed by the browser or app. Server records and technical logs are separate. No universal retention period, provider-backup deletion deadline or data-residency commitment has been verified for these services, and none is promised in this draft.
Use the planner's available export and deletion controls and ByteRush's backup controls when appropriate. Contact us for assistance with access or deletion requests, including any server-held ByteRush information. Removing an app, clearing a browser or losing a passkey is not the same as completing a server deletion request. We may need proportionate proof of control before handling an account request; a missing recovery email can limit verification or recovery options.
The sites use HTTPS for transport. No service is completely secure. Do not store secrets or unnecessary information about other people in a plan or inventory. Processing can involve the United States and other countries where providers operate; the public site review did not establish a particular storage region.
Your choices and privacy requests
You can read the main guides without a planner account, choose what information to enter, manage passkeys through your device or provider, use available exports and browser controls, and contact us about personal information.
Depending on your location and applicable law, rights may include access, correction, deletion, portability, objection, restriction, or an appeal. We will consider requests under the law that applies and explain relevant verification needs or exceptions. Where an appeal is available, reply to the decision or use the subject "Privacy appeal." You may also contact the appropriate privacy regulator. This draft does not claim that a cookie banner or automated rights-request portal is available on the product sites.
The public interfaces do not establish a verified age-check or parental-consent process. If you believe information from a child has been collected improperly, contact us so we can investigate and take the appropriate action. Do not send unnecessary identity documents or a child's records with your initial message.
Updates and contact
We will date the adopted notice and subsequent changes and provide additional notice or consent where required. Publication in the legal hub does not retroactively broaden the use of information collected under earlier promises.
- Email: legal@digifender.com.
- Telephone: (833) 633-9838.
- Mail: Digifender LLC, 9169 W State St #884, Garden City, ID 83714, United States.