Privacy

This covers the lutgallery.com website, the beta signup form, buying LUT Gallery, and the information the app sends to our licence and update servers.

Who we are

Formal Imaging Ltd is the data controller. Reach us at hello@lutgallery.com.

Beta signup

If you request beta access we store your email address, which editor you use, roughly how many LUTs you own, and what you tell us about how you would use and test LUT Gallery. We read these answers to choose testers. We also record the IP address and browser your request came from, and when you signed up and confirmed, as our record that you asked to join.

The lawful basis is consent, given by submitting the form and clicking the link in the confirmation email. Until you click it we send you nothing further. After that we email you to welcome you, when there is a build to try, and to ask for your feedback as a tester. No newsletter, and nothing else.

Buying LUT Gallery

Purchases are handled by Creem, our merchant of record. Creem collects your payment details under its own privacy policy; we never see your card number. Creem tells us your email address, name and order details so we can issue your licence, answer support questions and process refunds. The lawful basis is performance of a contract, plus our legal duty to keep sales records.

Trial, licence and updates

LUT Gallery runs on your Mac. Your images and LUT files are read from where they already are, are never copied to us, and never leave your machine.

To start the trial or activate a licence, the app sends our licence server the email address you enter and details of the Mac: an anonymous hardware identifier, the computer’s specification (model, chip, memory, macOS version), the app version, and the IP address it connected from. We use them to enforce the trial and the two-Mac limit, to show you your activated Macs, and to help with support. When the app checks for updates, or you download it, our update server records the IP address, app version and browser. The lawful basis is performance of a contract (your licence) and our legitimate interest in preventing misuse of trials and licences.

Who else sees it

• Creem processes payments and refunds.
• SendGrid (Twilio) delivers our email.
• Opalstack hosts the mailbox that receives your replies.
• DigitalOcean hosts our website, signup and licence servers.
• Cloudflare stores and delivers the app download.
• Affonso runs our affiliate programme (see below).

That is the entire list. We do not sell, rent or share your information with anyone else, and we do not use it for advertising.

Analytics

We use Umami, self-hosted on our own server. It sets no cookies, stores no identifiers, and cannot follow you to other sites. It counts page views and that a signup happened, never which address signed up. On some visits it also records where the page is clicked and how far it is scrolled, so we can see which parts of the page are used. Anything typed into a form is masked and never recorded.

Affiliate referrals

If you arrive through a partner’s referral link, Affonso, our affiliate platform, sets two cookies, affonso_referral and affonso_data, that last 30 days. They identify the referral so the right partner is credited; they hold nothing about you. If you then buy LUT Gallery, that ID is passed with the order so the partner who sent you is paid their commission. If you did not come through a referral link, neither is set. You can clear them at any time in your browser; the only effect is that the partner is not credited.

Server logs

Our web server records each request it serves: the page asked for, the time, the response, your IP address and browser. These logs are kept for 30 days and then deleted automatically. They are never used to build a profile of you and are never shared.

How long we keep it

• Beta signup: until you unsubscribe, or the beta programme ends and we no longer need it. Unsubscribing keeps your address on a suppression list, the only way to guarantee we never email you again.
• Licence and activation records: for as long as your licence exists, so you can restore it on a new Mac. Deactivating a Mac removes its record.
• Sales records: as long as UK tax law requires.

Your rights

You can ask for a copy of what we hold, ask us to correct or delete it, object to how we use it, or withdraw consent at any time. Every email has a one-click unsubscribe link. For anything else, email hello@lutgallery.com and we will deal with it within 30 days.

If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner’s Office.