Last updated 25 October 2026

Privacy Policy

The privacy of your data is a big deal to us. It is your data, not ours. This policy sets out what we collect and why, where it goes and how long we keep it, and your rights. We have never sold personal data and never will.

Who is responsible

When we say “Milklamp”, “we”, “our” or “us”, we mean Milklamp, the trading name of an independent developer who makes HAZE. You can reach us at [contact email to come].

Milklamp collects and is responsible for the personal data described here. This policy covers the HAZE website, HAZE accounts, the interactive examples and the HAZE desktop app. We give everyone the same rights, wherever they live.

What the website collects and why

Your account

When you make an account we store your email address, a one-way hash of your password (never the password itself), when the account was made, and a count of recent failed sign-ins so we can lock out guessing. We use them to let you sign in, to keep the account secure and to tell you about your account and your licence. Without an account you can’t buy or download HAZE.

Each time you sign in we record the session: when it began, when it expires and the browser description your browser sends, so you can see your sessions on your dashboard and sign them out.

Email delivery is not connected yet. Before we send any email, we will name the provider that sends it here.

The sign-in cookie

We set one cookie, __Host-haze_session, when you sign in. It holds a random token that keeps you signed in for up to 30 days, and is removed when you sign out. It is strictly necessary for the account to work, so we don’t ask for consent to it. We store only a hash of the token, not the token itself. We use no other cookies.

Purchases

Paddle.com sells HAZE on our behalf as merchant of record. When you buy, Paddle collects your name, payment details, billing country and postcode, and anything else it needs for payment, tax and fraud prevention, under Paddle’s privacy notice. We never receive your card or bank details.

Paddle tells us what we need to give you your licence: your Paddle customer and transaction numbers, what you bought, the amount and currency, the state of a monthly plan and when it next bills, and a link where you can update your payment method. We keep these with your account so the dashboard can show your payments and your progress toward ownership.

Licences and devices

Your licence has a key. When HAZE activates on a computer it sends us the key, the name of the computer and a machine identifier. We store only a hash of the identifier, with the name and when the computer was activated and last checked in, to apply the three-device limit and to list your devices on your dashboard.

Visiting the site

Like every website, ours is served by a host that receives the technical details of each request: your IP address, your browser and its version, the page you asked for and when. Our host is OpenAI’s website hosting service. It uses those details to deliver the site and protect it from abuse, under its own privacy policy. We don’t use them to build a profile of you.

We count public page requests by day and page, including repeat visits. These aggregate counts contain no visitor identifiers, IP addresses or browsing profiles. We use no advertising or third-party tracking. The fonts are served from our own site, so loading a page doesn’t contact a font service. Paddle’s checkout script loads only on your dashboard, when you choose to pay.

The interactive examples

The examples run on a separate address, and what you make in them stays in your browser’s storage for that address. They are blocked from contacting model providers or other outside services, and they send us nothing you type. Clearing your browser’s site data for that address removes it.

When you write to us

If you email us, we keep the correspondence, including your address, so we have the history if you write again. We delete it when you ask, unless we need to keep it for a legal reason.

The HAZE desktop app

HAZE is local-first. Your notes, tables, boards, documents, conversations, journal and settings are stored on your computer. They do not sync to your HAZE account. The app sends us no telemetry, usage statistics or crash reports. If you start or join a live Canvas or Notes session, the work you share travels to the other participants as described below.

Some features connect to outside services, but only when you turn them on or ask for them. Then data travels directly from your computer to that service, under its own terms and privacy policy:

• The AI provider you choose, with the messages, files and context you send to a companion. Your provider keys stay on your device and are never part of a backup.
• Open-Meteo, for weather, after you name a city. HAZE never asks for your device’s location.
• The page reader (r.jina.ai) and YouTube, when you send a link or ask for one.
• Web search, when you or a companion search.
• Google (Gmail), Spotify and Telegram, after you connect an account. Sign-in tokens stay in Windows’ encrypted credential store.
• MCP connections, workflows, Agentic mode and computer use: the programs, folders, sites and services you point them at.
• Live Canvas and Notes, only when you start, join or reconnect a session: the bundled Cloudflare room service handles room codes, access capabilities and connection messages. Cloudflare receives connection metadata, including IP addresses. Shared content travels over encrypted WebRTC connections between participants; Cloudflare TURN relays encrypted traffic when a direct connection is unavailable. Participants receive the shared content and may keep local copies. Custom room and signaling servers can be configured in Multiplayer settings instead.

Exported backups contain your journal and conversations, so keep them somewhere private. You can see what can go online, and switch it off, in Settings.

When we share data

• Never for sale. We don’t sell, rent or trade personal data, and we don’t use it for advertising.
• With our hosting provider, which stores accounts and serves the site for us.
• With Paddle, which handles every purchase. We pass it your email address and account number when you start a checkout, so the order reaches your account.
• When the law requires it. We disclose data only when the law or a binding order from a competent authority requires it, and we tell you first unless we are not allowed to.
• If HAZE changes hands. If Milklamp’s business is ever transferred, we will tell you before your data moves or becomes subject to a different policy.

Where data is kept

Our hosting provider’s and Paddle’s servers may be in other countries, including the United States and the United Kingdom, so your account data may be stored and processed outside the country where you live. We use providers that protect it with standard security measures, and we share only what each needs.

How long we keep it

• Your account, licence, payments and devices: until you delete the account. A device is removed sooner when you deactivate it.
• Sessions: until you sign out, sign them out from your dashboard or change your password, or until they expire after 30 days.
• Paddle’s records: Paddle keeps the records of your orders that tax and accounting law require it to, under its own policy, even after you delete your account.
• Correspondence: until you ask us to delete it, unless the law requires us to keep it.
• Request logs: for as long as our hosting provider keeps them under its policy.

Your rights

Wherever you live, you can ask us to:

• tell you what we hold about you and let you see it;
• give you a copy of it;
• correct or complete it;
• stop collecting, processing or using it;
• delete it.

You can do two of these yourself at any time: your dashboard downloads a copy of your account data, and deletes the account and everything we hold with it.

If you are in the European Union or the United Kingdom, you can also object to processing, ask for your data in a portable form, withdraw consent at any time without affecting what happened before, and complain to your data protection authority.

To use any of these rights, write to us at [contact email to come]. We may need to confirm that the account is yours before we act. We will answer an inquiry, a request to see your data or a request for a copy within 15 days, and a request to correct, stop or delete within 30 days. If we need longer, we will tell you why, and the extension will be no more than the law allows. Using your rights never costs you anything.

Children

The site is not aimed at children, and we don’t knowingly collect data from anyone under 13. If you are under 18, please ask a parent or guardian before you make an account. If you believe a child has given us their data, tell us and we will delete it.

Security

The site is served only over encrypted connections (HTTPS). Passwords are stored as salted PBKDF2 hashes, and sign-in tokens and machine identifiers only as hashes, so a copy of our database would not reveal them. Repeated failed sign-ins lock an account for a short time. We keep the least data we can. If a breach ever affects your data, we will tell you and the relevant authorities as the law requires.

Changes and questions

We will update this policy when what we collect changes, for example before email delivery is connected. When we make a significant change, we will refresh the date at the top of the page and tell account holders by email.

Questions, comments or concerns about this policy or your data? Write to us at [contact email to come].

Adapted from the 37signals policies, used under CC BY 4.0 and changed to fit HAZE. This text is offered under the same licence.