Privacy Policy

Last updated: October 5, 2026

This policy explains what personal data Screen Loft handles, why, and what you can do about it. Short version: your recordings never leave your Mac, and we only collect what's needed to sign you in and check your subscription.

Who is responsible

The controller is Ivan Diachenko, Pezinská 53, Senec, Slovakia. Contact: [email protected].

What stays on your Mac

Screen recordings, audio, camera footage, projects and exported videos are processed locally and never sent to us. The app has no analytics, advertising or tracking.

What we collect, why, and for how long

• Email address — to send sign-in codes and link you to your subscription. We pass it to Paddle when you sign in, to find or create your customer record. Sign-in codes expire after 10 minutes. Basis: contract.
• Device ID and device name — a random ID the app creates (not derived from your hardware) and your Mac's name, which often includes your own name. Used to enforce the device limit and show you your devices. Deleted when you sign out or remove the device, or after 60 days without use. Basis: contract.
• Subscription status — your Paddle customer ID, plan status and renewal date, cached so the app keeps working if Paddle is briefly unavailable. Kept while you have an account. Basis: contract.
• IP address and request logs — to rate-limit sign-in attempts and protect the service. Rate-limit records last up to 2 hours; server logs a few days. Basis: legitimate interest in keeping the service secure.
• Update checks — the app downloads an update file from our server. The request carries standard connection data such as your IP address and is not linked to your account. Basis: legitimate interest in delivering security and bug fixes.

You don't have to give us your email, but without it we can't sell you a subscription. We don't sell your data, use it for advertising, or make automated decisions about you.

Payments

Paddle is the Merchant of Record for all purchases. It collects your payment and billing details as an independent controller under its own privacy policy. We never see your card details.

Website

This site uses no analytics, advertising or tracking cookies. Our host, Cloudflare, may set strictly necessary security cookies.

Who processes data for us

• Cloudflare — website, sign-in service, database and downloads.
• Postmark — sending sign-in emails; keeps delivery logs for a limited period.
• Paddle — payments, tax and billing (independent controller, see above).

Some of these providers are in the United States. Transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

Your rights

Under the GDPR you can ask us to access, correct, delete or export your data, restrict its use, or object to processing based on legitimate interest. Email [email protected] from the address you sign in with; we reply within one month. Deleting your account removes your devices and cached subscription data. Paddle keeps the transaction records it is legally required to keep.

You can also complain to a data protection authority — in Slovakia, the Office for Personal Data Protection, or the authority where you live.

Children

Screen Loft is not intended for children under 16, and we don't knowingly collect their data.

Changes

We'll update this page and the date above when this policy changes, and email subscribers about material changes.