Privacy

Asana Lab is published by Lisa Volkova. Its pages under /asana-lab are open to people who follow @lisainyoga on Instagram. This page says what the site keeps to check that, and how to have it deleted.

What we keep

When you send your code to @lisainyoga in a direct message, the site keeps:

• the Instagram user ID that Meta gives the site for your account, and your Instagram username;
• whether that account follows @lisainyoga;
• when you first confirmed, and when the site last checked;
• which pages of the lab you open, and when.

While you wait for your message to arrive, the site also keeps the code it showed you and a random identifier for your browser. Both are deleted when the code is used, or after 15 minutes.

The site reads your message only to find the code in it, and does not store the message. It answers you in the same conversation with one line, to say whether it worked. It does not store your name, your photos or your posts.

Cookies

• al_browser: the random identifier for your browser while you confirm (30 minutes).
• al_session: a signed cookie that holds your Instagram user ID, so that the lab opens for you without a new code (30 days).

There are no advertising or analytics cookies.

Why, and how often we check

To open the lab to followers, and to know which of its pages are read. While you use it, the site asks Instagram again whether you follow @lisainyoga, and for your current username, when its last check is more than 12 hours old. If you no longer follow, the lab closes for you until you follow again and send a new code.

To stop abuse, the site counts how many codes each browser and each IP address asks for in a minute. It keeps the address only in a scrambled form that cannot be read back, and only for that minute.

How long we keep it

• The pages you opened: 12 months from each visit.
• Your user ID, username and follow status: until you have them deleted, or until 12 months after the site last checked your account.
• Your code and the identifier for your browser: 15 minutes at most.

Who else sees it

Nobody else. The site runs on Cloudflare, which stores the data for it, and asks Meta’s Instagram API whether an account follows @lisainyoga. Nothing is sold or shared.

Deleting your data

Press the button below in the browser you use for the lab. It deletes everything the site holds about your Instagram account and this browser, the pages you opened included, and both cookies. From another device, email lisavolkova.fr@gmail.com with your Instagram username, and it will be deleted by hand.

A deletion request that Meta passes on for Asana Lab’s Instagram app is carried out at once, and Meta gives you a confirmation code for it.

Contact

Questions about this policy: an email to lisavolkova.fr@gmail.com, or a direct message to @lisainyoga on Instagram.