Privacy Policy

WaterFall Labs is built to give pool owners and pool professionals practical water-testing guidance without unnecessary product pushing. This Privacy Policy explains what information WaterFall Labs collects, why it is collected, how it is used, and what is intentionally not stored by this site.

1. Information WaterFall Labs Collects

WaterFall Labs collects only the information needed to operate the site, provide saved pool features, process account access, and improve the service.

• Account information: name, email address, password hash, account creation date, subscription tier, trial status, and related account status fields.
• Saved pool information: pool name, estimated volume, sanitizer type, surface type, and priority/active-pool selections.
• Water test history: submitted test readings, calculated recommendations, test dates, and saved pool references when a logged-in paid or trial user saves results.
• Feedback messages: messages submitted through the feedback form, along with diagnostic details such as page URL, browser/device information, screen size, and timestamp if those fields are submitted with the form.
• Basic technical logs: server logs, QR scan logs, device/browser details, timestamps, and similar technical information used for debugging, security, abuse prevention, and site improvement.

2. Information WaterFall Labs Does Not Store

WaterFall Labs intentionally avoids storing sensitive payment and bot-verification data that is better handled by specialized providers.

• WaterFall Labs does not store credit card numbers.
• WaterFall Labs does not store PayPal passwords, PayPal login information, or full payment credentials.
• WaterFall Labs does not store Cloudflare Turnstile secret verification data beyond what is necessary to confirm that a form submission passed bot protection.
• WaterFall Labs does not sell user data.
• WaterFall Labs does not use saved pool or water-test data for advertising targeting.

3. How Information Is Used

Information collected by WaterFall Labs is used to:

• Create and manage user accounts.
• Save pools and water test history for eligible users.
• Generate water treatment recommendations.
• Control access to Free, Standard, Pro, trial, cancelled, or downgraded account features.
• Respond to feedback and identify issues with pages, layouts, devices, or browsers.
• Prevent spam, bots, abuse, fraud, and unauthorized access.
• Maintain site security, troubleshoot errors, and improve reliability.

4. Payments and Subscriptions

WaterFall Labs uses PayPal to process subscriptions and payments. Payment details are handled by PayPal, not stored directly in the WaterFall Labs database. WaterFall Labs may store a PayPal subscription ID, account tier, paid-through date, cancellation status, and related subscription status information so the site can grant or remove access correctly.

PayPal’s own policies govern how PayPal collects, uses, stores, and protects payment information. Users should review PayPal’s privacy information for details about PayPal’s handling of payment data.

5. Bot Protection and Security Checks

WaterFall Labs uses Cloudflare Turnstile to help protect forms from bots, spam, and automated abuse. Turnstile may evaluate browser, request, and challenge information to determine whether a visitor appears to be human. WaterFall Labs uses the verification result to decide whether to accept or reject form submissions such as login, registration, and feedback.

Cloudflare’s own policies govern how Cloudflare processes information through Turnstile.

6. Feedback Submissions

Feedback submissions are sent to the owner/operator of WaterFall Labs for review. Because WaterFall Labs is currently operated by one person, feedback is reviewed periodically and should not be treated as emergency support.

Users should avoid submitting sensitive personal information, payment details, passwords, or private account credentials through the feedback form.

7. QR Scan and Technical Logs

WaterFall Labs may use QR redirects or technical logs to understand whether printed materials, links, or pages are being used. These logs may include timestamps, partial or masked IP information, browser/device information, and similar diagnostic details. These logs are used for basic measurement, troubleshooting, and abuse prevention, not for selling user information.

8. Cookies and Sessions

WaterFall Labs may use cookies or server-side sessions to keep users logged in, maintain language preferences, remember account state, process forms, and operate site features. Disabling cookies may prevent login and account features from working correctly.

9. Sharing of Information

WaterFall Labs does not sell user information. Information may be shared only in limited situations, such as:

• With payment processors such as PayPal when needed to process subscriptions or maintain account access.
• With security and infrastructure providers such as Cloudflare or the site hosting provider when needed to operate, protect, or troubleshoot the site.
• When required by law, legal process, fraud prevention, security investigation, or protection of the site and its users.
• With the user’s direction or consent.

10. Data Retention

WaterFall Labs keeps account, pool, and test history information for as long as needed to provide the service, maintain user access, troubleshoot issues, and satisfy reasonable business, legal, accounting, security, or dispute-related needs.

Users may request deletion of their account, saved pools, or saved test history. Some limited records may be retained if needed for payment disputes, fraud prevention, security, legal compliance, accounting, or system integrity.

11. User Choices and Requests

Users may request:

• Account deletion.
• Deletion of saved pools or water test history.
• Correction of account information.
• Cancellation of subscription renewal through available account tools or PayPal controls.

Requests can be submitted through the site’s feedback/contact method. WaterFall Labs may need enough information to verify the request belongs to the account owner.

12. Security

WaterFall Labs uses reasonable security practices for a small web service, including password hashing, server-side validation, bot protection, and limited collection of sensitive data. No website can guarantee perfect security, but WaterFall Labs is built with the intent to collect only what is needed and avoid storing sensitive payment details directly.

13. Children’s Privacy

WaterFall Labs is intended for pool owners, pool professionals, and other users capable of managing pool-care decisions. It is not intended for children under 13, and WaterFall Labs does not knowingly collect personal information from children under 13.

14. Changes to This Policy

This Privacy Policy may be updated as WaterFall Labs develops new features, changes service providers, adjusts data practices, or responds to legal requirements. The “Last updated” date will be revised when meaningful changes are made.

15. Contact

Questions, privacy requests, or account-related requests can be submitted through the WaterFall Labs feedback/contact method provided on the site. Because WaterFall Labs is currently operated by one person, responses may not be immediate.