Privacy Policy

Who is responsible for your data?

The data controller is:

What data we process

Image and generation data

• Source images and crop settings - processed locally in your browser to generate previews and exports.
• Project settings - stored on your device (browser storage or local files when you export/import settings).

Website analytics (opt-in)

• Vercel Analytics and Speed Insights - only loaded after you explicitly allow analytics consent.

Server and security logs

• Our hosting provider (Vercel) may process IP addresses, request timestamps, and basic request metadata for security, abuse prevention, and reliability.

Lawful basis and purposes

We process data under the following UK GDPR lawful bases:

• Contract - local processing is required to provide the lithophane generation service you request.
• Legitimate interests - security logging and reliability monitoring help protect and maintain the service.
• Consent - optional analytics are enabled only after explicit consent.

Who we share data with

We use third-party processors who handle limited data on our behalf:

International transfers

Our hosting and analytics provider may process data outside the UK/EEA. Where required, transfers rely on adequacy decisions or contractual safeguards.

How long we keep data

• Image and generation data - processed in memory and not retained by our servers.
• Analytics data - retention is managed by Vercel according to their policies.
• Server logs - typically retained for short periods by our hosting provider.

How we protect data

• HTTPS/TLS encryption for browser-to-server traffic.
• Restricted operational access for production environments.
• Local-first processing for uploaded images to reduce data exposure.

Your rights under UK GDPR

You may have rights to access, rectify, erase, restrict, or object to processing of personal data we control.

To exercise your rights, email me@paddybuilds.com.

Right to complain to the ICO

If you believe we handled your data incorrectly, you can complain to the Information Commissioner's Office (ICO).

Website: ico.org.uk

Cookies

We do not rely on first-party cookies for core maker functionality. Optional analytics technologies are enabled only after consent.

Children

Our service is not directed at children under 13. If you believe a child has provided personal data to us, contact us and we will investigate.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will post the new version here and update the "Last updated" date.

Contact

For privacy-related requests or questions:

Email: me@paddybuilds.com