Who we are
Shirimlabs (“we”, “us”) makes software that tells websites whether a session is a person or an AI agent. This policy covers shirimlabs.com, our console, and the Shirimlabs script that our customers add to their own sites.
If you visit shirimlabs.com
We don’t use analytics or advertising trackers on shirimlabs.com. The one exception is the playground, which runs Shirimlabs itself, as described below. Our hosting providers keep standard server logs (such as IP address and browser type) to run and secure the site. If you joined our earlier waitlist, we keep that email address only to tell you about Shirimlabs, and we don’t sell it or share it for marketing.
If you visit a site that uses Shirimlabs
Our customers add the Shirimlabs script to their sites to tell people and agents apart. On those sites, the script collects:
- Interaction signals: mouse and touch movement, scrolling, clicks, and the timing of keystrokes. We do not collect what you type.
- Device and browser details: browser type, screen size, and similar settings, combined into a device fingerprint.
- A random session ID, kept in a first-party cookie and local storage, so that one visit can be recognised across pages.
- Network information, such as IP address, which our servers receive with every request.
We use this only to decide whether a session is a person or an agent, to apply the rules the site owner has set, and to keep the service working and secure. The site owner controls this data and decides how it is used; if you have questions about a particular site, contact that site.
If you have a console account
We keep your email address, the projects and settings you create, and how much of your plan you’ve used, so that you can sign in and use the product. If you send us a message from the upgrade box in the console, we keep that message too, so we can reply.
Who we share data with
We use a small number of service providers to run Shirimlabs, including Amazon Web Services (hosting, storage, and sign-in) and Cloudflare (network and security). They process data on our behalf only. We don’t sell personal data.
How long we keep it
Session data is kept only as long as needed to detect agents and show site owners their history, and then deleted. Account data is kept until you ask us to delete it or close your account.
Your rights
You can ask us for a copy of your data, or ask us to correct or delete it, by writing to [email protected]. Depending on where you live, you may have further rights under laws such as the GDPR or CCPA.
Changes
If we change this policy, we’ll update the date above. For significant changes, we’ll tell account holders by email.
Contact
Questions about privacy: [email protected].