Privacy notice
Applies to: the public-draft website at fdebenchmark.org (formerly benchmark.lockedinlabs.ai, which now redirects there) and the synthetic assessment preview at assessment-preview.lockedinlabs.ai
Effective: September 2, 2026
Status: v0.1 Public Draft; no participant, candidate, or customer data is collected by these sites
1. What these sites are
Both sites are static, unindexed previews of a proposed benchmark. They publish methodology, synthetic fixtures, and source documents for review. They do not offer accounts, evidence upload, assessment, scoring, credentials, or any service that evaluates an identifiable person. The one thing the benchmark site collects is what you choose to type into its contact form, described in section 3.
2. What the sites collect
Apart from the contact form, the sites collect nothing. They set no cookies, run no analytics or tracking scripts, and embed no third-party widgets. The content security policy served with every page restricts network connections to the site's own origin, so the page cannot send data elsewhere.
The synthetic assessment preview keeps its demonstration state in your browser's memory only. It is discarded when you close or reload the page and is never transmitted.
3. The contact form
The form at /contact asks for a name, an email address so we can reply, an optional organization, a message, and the reason you are writing. Submitting it does three things. The hosting provider, Netlify, stores the submission in its form service for this site. Netlify sends a copy by email to a monitored LockedIn Labs mailbox. Nothing else happens: the message does not enter the benchmark, does not become evidence about anyone, and is not shared with a sales, staffing, or training team.
We keep submissions only as long as needed to act on them and delete them from the hosting provider's store afterwards. To have a submission deleted sooner, or to ask what we hold, send a second message through the same form. Netlify's handling of form data is described in its own privacy notice. A hidden field in the form exists only to discard automated submissions and is never shown to a person.
Do not send evidence, résumés, code, credentials, or information about a third party through the form. Anything of that kind is deleted unread.
4. Hosting logs
The sites are served by Netlify. Like any web host, Netlify's edge network receives the technical information a browser sends with each request, including the requesting IP address, requested URL, referrer, user-agent string, and timestamp, and may retain it for a limited period for security and operations. LockedIn Labs does not enrich, resell, or combine this data with any other record. Netlify's own privacy practices are described at https://www.netlify.com/privacy/.
5. What we do not do
- We do not build profiles of visitors.
- We do not use advertising or cross-site tracking.
- We do not sell or share visitor information.
- We do not accept evidence, résumés, code, or candidate material through these sites. The contact form is for messages to the project; any interface that appears to accept assessment material is a synthetic demonstration.
6. Future services
If a future release introduces participant accounts, evidence intake, or assessment, it will be governed by a separate, specific privacy notice, consent process, and the controls in DATA_GOVERNANCE.md, and it will not activate until the gates recorded in LIVE_VS_PLANNED.md are met. This notice makes no commitment about those future services.
7. Contact and changes
Questions about this notice can be raised through the contact form at /contact. Material changes to this notice are recorded in the changelog with the effective date.
