Grainloom legal
Privacy Policy
A short explanation of what stays on your device and what is processed to deliver the website.
Effective date: [PUBLICATION DATE]
Controller and project operator: [FULL NAME]
Contact: [CONTACT EMAIL]
1. The short version
Grainloom is a local-first photo editor. Your imported photos, adjustments, previews, presets and exports are processed in your browser and are not uploaded to us. We do not currently offer accounts, accept payments, run advertising or use analytics.
2. Information stored on your device
Grainloom uses IndexedDB and localStorage to keep imported photos, edits, presets, tutorial progress, interface preferences and JPG quality on your device. This information is necessary to provide the editor features you request. We cannot access or recover it. You can remove it with Grainloom’s clear action or your browser settings. Browser storage is not a backup and may be removed by your browser or operating system.
3. Website delivery and technical logs
When you visit the website, our hosting provider may process your IP address, request time, requested URL, response status, user agent and similar security or diagnostic information. We use this information only to deliver and secure Grainloom, diagnose failures and prevent abuse. The legal basis is our legitimate interest in operating a secure and reliable service. Logs are kept only for the period made available by the hosting service or as needed to investigate a security incident.
4. Recipients and international transfers
Render Services, Inc. hosts the application and may process the technical data described above. Render is based in the United States and provides a data processing addendum incorporating relevant transfer safeguards, including Standard Contractual Clauses where applicable. See our subprocessor page for current details. Photos opened in the editor are not sent to Render.
5. Your rights
Where applicable, you may request access to, correction, deletion or restriction of your personal data, object to processing based on legitimate interests, or request data portability. You may also complain to the President of the Polish Personal Data Protection Office (UODO) or your local EEA supervisory authority. Contact us at [CONTACT EMAIL]. Because editor data stays on your device, we cannot identify, access or delete it for you.
6. Security, children and changes
We use proportionate technical measures and minimize server-side data, but no internet service can guarantee absolute security. Grainloom is not directed to children under 16. We will update this notice before introducing accounts, payments, analytics, cloud photo processing or another materially different use of personal data. Material changes will be identified by a new effective date.