Privacy policy
Last updated: 27 October 2026
This policy explains what personal data Maniac Lab collects, why, and what your rights are. We collect as little as we can.
Who we are
Maniac Lab is run by Georgios Charilaou, Limassol, Cyprus (“we”, “us”). We are the controller of the personal data described here. Contact: support@maniaclab.app.
This website
The website has no advertising, no tracking cookies and no analytics that identify you. It is hosted by Cloudflare, which processes technical data (such as your IP address and browser type) to deliver and protect the site, and keeps it for a short time. Your language choice is saved in your browser only. On the app pages your browser also loads Lemon Squeezy’s checkout script from app.lemonsqueezy.com, so the checkout can open over the page. Details are in the cookie policy.
Maniac OS
Maniac OS does not need an account. Your files stay on your PC. When it is online, the system contacts the internet for the clock (time servers), the Store catalogue, and to install apps you choose (our servers and, for Linux apps, Flathub). These requests carry the usual technical data such as your IP address.
Maniac ID and purchases
When you create a Maniac ID or buy an app, we process:
- Your e-mail address — to sign you in with a one-time code and to match your purchases;
- Your purchases — which apps you bought, when, and the order reference;
- Your authorised PCs — a random PC identifier (it reveals nothing about your PC) and the name you gave it, to issue app licences for that PC;
- Sign-in sessions — to keep you signed in until you sign out.
The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR). We keep this data while your account is active and afterwards for as long as the law requires for tax and accounting records.
Our licence server (https://store.maniaclab.app) runs on Cloudflare (Cloudflare Workers, with its D1 database and R2 storage). Sign-in codes and account e-mails are sent through our e-mail provider, Resend.
Payments
Payments are processed by Lemon Squeezy (Lemon Squeezy, LLC), which acts as merchant of record: it sells the app to you, takes the payment, issues the invoice and handles VAT and refunds. Lemon Squeezy is a separate controller for the data you give at checkout; see its privacy policy. We never see your card details. Lemon Squeezy tells us your e-mail address, name, country and what you bought.
Clinic
Patient data entered in the Clinic app is stored, encrypted, on the practice’s own PC. It is not sent to us, and we cannot see it. The practice is the controller of that data.
Transfers outside the EU
Cloudflare, Resend and Lemon Squeezy may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses.
Your rights
You can ask to access, correct, delete or receive a copy of your data, to restrict or object to its processing, by writing to support@maniaclab.app. You may also complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).
Children
Purchases are for adults. We do not knowingly collect data from children under 14.
Changes
If we change this policy we will update the date above, and tell Maniac ID holders about important changes by e-mail.