1 The principle
Safelight Studio runs entirely on the customer's machine. The text
entered, the images produced, the trained characters and the settings
all stay on their disk. They are never sent to the publisher, who
operates no server capable of receiving them.
This is not a commercial promise, it is a property of the
architecture: the software contains no content upload code.
The data controller is the sole trader identified at the foot of this
page. For any question about this policy:
contact@safelightstudio.com.
2 What is collected, and why
| Data | Why | Legal basis | Kept for |
| Customer name or identifier, means of contact |
Issuing the licence and providing support |
Performance of the contract |
Duration of the relationship, then 3 years |
| Hardware fingerprint of the machine |
Tying the licence to the authorised computer |
Performance of the contract |
Duration of the relationship, then 3 years |
| Licence start and end dates, edition purchased |
Tracking validity and renewals |
Performance of the contract |
Duration of the relationship, then 3 years |
| Telegram conversation identifier |
Receiving the request and returning the licence file |
Performance of the contract |
Duration of the relationship, then 3 years |
| Invoices and accounting records |
Accounting and tax obligations |
Legal obligation |
10 years |
The hardware fingerprint consists of irreversible cryptographic
digests. It allows neither reading the hardware details in the clear,
nor tracing back to the owner, nor following a user elsewhere.
3 What is never collected
- The images produced, their thumbnails and their variants.
- The descriptions, keywords and settings entered.
- Trained characters and the photographs supplied to train them.
- Usage statistics: number of images, frequency, time spent.
- Disk contents, installed software, geographic location.
The software contains no spyware, no telemetry and no automatic crash
reporting. The technical logs it writes stay in its own folder, on the
customer's machine, and the customer can delete them.
4 Payment
Payment is handled by Paddle.com Market Ltd, acting as reseller
and becoming controller for billing data. The publisher neither sees nor
keeps any card number: those details are entered directly with Paddle
and never pass through the site or the software.
Paddle's own privacy policy is available on its website. The publisher
receives from Paddle only the information needed to issue the licence
and keep accounts.
5 The website
This site is a set of static pages. It sets no cookie, uses no
analytics tool, and carries no social network button that would follow
you.
Two technical processes remain, with no personal data:
- the host records incoming requests, including the IP address, in
security logs it keeps for its own purposes;
- the page stores in your browser, for the life of the tab, a marker
noting that the opening animation has already played, so it is not
repeated. That marker contains no identifier and disappears when the
tab closes.
Fonts are served from this site, not from a third party: nothing about
your visit reaches anyone else.
6 Licence delivery
When the customer asks for a licence from within the software, the
software sends the hardware fingerprint of the machine and, if given,
the email address used for payment, to a letterbox hosted on this site.
Nothing else is sent. The publisher collects it from their own computer,
signs the licence there, and returns it the same way.
Requests are deleted from the letterbox thirty days after being
deposited.
7 Updates
The software may check for an update by contacting the publisher's
site. That request carries only the installed version number. It carries
no identifier, no licence and no hardware fingerprint, and the publisher
keeps no record of it beyond the host's logs.
This check can be disabled in the software's settings, with no effect
on how it works.
8 Recipients and transfers
Data is neither sold, rented nor exchanged. It is disclosed to no one
beyond the providers needed for the service:
- Paddle.com Market Ltd (United Kingdom), payment and billing;
- Netlify, Inc. (United States), website and letterbox hosting;
- Telegram Messenger, backup channel for licence requests.
Transfers outside the European Union rely on the European Commission's
standard contractual clauses. The licence records themselves never leave
the publisher's own computer.
9 Your rights
You have rights of access, rectification, erasure, restriction,
objection and portability over your data. Write to
contact@safelightstudio.com: you will receive an answer within one
month.
Erasing licence data ends the possibility of re-issuing a licence if
your hardware changes, and accounting records cannot be erased before the
statutory period ends.
You may lodge a complaint with the Commission nationale de
l'informatique et des libertés, 3 place de Fontenoy, TSA 80715,
75334 Paris Cedex 07, France.
10 Changes
This policy may change. The version that applies is the one published
on this page. Version 1.0 of 1 September 2026.