Legal · Privacy
Privacy Policy
Short, because there is little to describe. Your photographs are never uploaded, the one cookie keeps you signed in, and no third-party tracker runs on this site.
Last updated 22 October 2026
01 Who is responsible
Matthieu Audo, sole proprietor, Québec, Canada is responsible for the personal information described here.
Québec's Law 25 requires a business to name the person in charge of protecting personal information. For Rawnd that is Matthieu Audo, reachable at the address below.
privacy@rawnd.app02 Your photographs
They are not uploaded. Not to us, not to anyone.
When you open a RAW file it is read by a decoder running inside the page and drawn by your own graphics hardware. Nothing about the image is transmitted.
You do not have to take our word for it: open your browser's network panel, develop a photo, and watch that nothing is sent. We hold no photographs, and we could not produce yours if somebody asked us to.
03 What stays on your device
Rawnd keeps the following in your browser's own storage:
- your edits: the adjustments for each photo, stored as numbers, never as an image;
- your ratings and rejections;
- what Rawnd measures on your photos (sharpness and bursts for assisted culling, capture time, each camera body's tone curve), as numbers, never as an image;
- a reference to the last folder you opened, so it reopens in one click;
- the address of the account signed in on this browser, and your choice about news, so the app asks our server nothing when it starts;
- your interface preferences.
04 Your account
Opening your photos in the app asks for a free account. For it we keep your email address, the date the account was created and of your last sign-in, how you first signed in (an emailed link or Google), your interface language, and your country, derived at the network edge. No password, no name, no picture: there is nothing else to keep.
Signing in by email sends you a message carrying a link and a six-digit code. We keep them only as a one-way scramble, for ten minutes, and each works once.
Signing in with Google takes you to Google's own page: no Google script runs on this site. We ask Google for your email address and nothing else (not your name, your picture or your contacts), and it tells us whether it has verified that address.
The address signs you in, and lets Pro and a trial follow you rather than one device. Signing in subscribes you to nothing: news is a separate box, unticked until you tick it.
Ask us to delete it: privacy@rawnd.app05 Usage measurement
We count a small number of events, to know whether the product is being used at all. Each one is a single row holding:
- the event: a page view, a folder opened, a photo developed, an export;
- the interface language;
- the country the request came from, derived at the network edge;
- whether Rawnd was running as an installed app or in a tab;
- for an export, how many photos it covered;
- when you leave a folder, how far you went in it: looked, culled, developed or exported, and how many seconds it stayed open;
- for a feedback rating, the score you gave, from one to five;
- for a page of this website, which page it was;
- for a page of this website, which site linked to it: as one of a short list of names such as “a search engine” or “Reddit”, never a full address, and never the words you searched for.
06 Why that cannot identify you
The events carry no identifier and are never linked to your account, nor to its cookie. Two visits by you are indistinguishable from two visits by two people.
That holds for the two entries added most recently. The page is the address you were already reading, and the referring site is reduced to one of fifteen names inside your browser before anything is sent, so nothing here is remembered between two pages, and your path through the site cannot be reassembled.
We cannot build a profile from this by construction rather than by policy: the columns that would allow it do not exist. The rows are written to Cloudflare Analytics Engine, through this site's own domain rather than a third party's.
07 The ChatGPT and Claude plugins
Rawnd also installs in ChatGPT and in Claude. The plugin shows a panel in the conversation where you drop a RAW file, and offers looks that open in the editor.
Your RAW file does not leave your device, not even for the assistant. It is read in the panel, by the same code as this site's “Open a RAW file” page, then forgotten. Neither we nor the assistant receive the file, its name, its location or its shooting data.
Our server receives only what the assistant sends it to call a tool: the name of a look and, if you ask for it to be adjusted, a few slider values. It returns those values and a link. For each call it writes one row: the tool called and the assistant that called it. Not the values, not a word of your conversation, not an IP address.
“Show to the assistant” is the only button that sends anything of your photo, and only when you press it: the JPEG the camera tucked into the RAW, stripped of its metadata (camera, date, location, serial number), goes into your conversation, to OpenAI or to Anthropic. Never to us. In ChatGPT, the image reaches the model without showing up as a message in the conversation.
The button that opens Rawnd from the plugin adds the assistant's name to the address, and the look if there is one, in the part of the address the browser sends to no one. Your visit is counted like any other, with the assistant as the referring site.
What you write to the assistant, and what it keeps of the conversation, falls under OpenAI's or Anthropic's privacy policy, not this one.
08 The mailing list
If you ask for news (the box when you sign in, the one in Settings → Account, or a form on this site), we store the address, the date, where in the product you gave it, your interface language, and your country.
The date and the context are kept because Canada's anti-spam legislation requires consent to be provable. We do not store your IP address or your browser.
We use it to write to you about Rawnd: a launch, a significant release. Nothing else, and never passed to a third party. Every message carries an unsubscribe link, the box in Settings → Account can be unticked too, and either one deletes the row rather than flagging it.
Or ask us to remove it: privacy@rawnd.app09 What you write to us
Rawnd occasionally asks what you make of it, and its settings hold a form that asks the same thing whenever you feel like answering. This is the only place in the app where something you wrote is transmitted anywhere.
If you send it, we keep what you typed, the rating if you gave one, which moment in the product asked, your interface language, your country, whether Rawnd was running installed or in a tab, and which version you were on. Your email address too, but only if you chose to give one. It is optional, and its only purpose is to let us reply to you.
That address is not the mailing list and is never added to it. Answering your message is the only thing it is ever used for.
So that the form cannot become a way to flood our database, we count how many messages come from one internet address each day. We do not keep the address. What is kept is a one-way scrambling of it, mixed with that day's date and a secret, in a table of its own that is never joined to anything you wrote. Yesterday's rows are thrown away, and an address scrambled on one day cannot be matched to the same address on another.
Or ask us to delete it: privacy@rawnd.app10 Payment
Purchases are processed by our payment provider, acting as merchant of record. Card details are entered on their systems and never reach ours. We receive confirmation that an order was paid, with the email address and country needed to issue a licence and support it.
11 Trying Pro
A Pro trial belongs to an email address: your account's, or one you confirm with a code we send to it. We keep that address with the date the trial started and ended, your interface language and your country, so that each address has one trial.
We write to it once, three days before the trial ends, to say so. It is not added to the mailing list, and nothing else is sent to it unless you buy.
12 Activating a licence
Activating Rawnd on a device sends us an installation number, with what proves the licence is yours: your account's session, or a code. It is sent at activation, then when the licence renews itself, about once a month, and once more when you sign out of that device, to free its place. Without a licence, the app never sends it: signing in to an account that has none does not send it either.
It is a random value the app makes up the first time it runs. It is not derived from your device, your browser or you: two installations on the same computer produce two different numbers, and it tells us nothing whatsoever about the machine. It is not a fingerprint, and it is never attached to any of the events described above.
Its only job is to count how many devices a licence is active on, so that the limit of 3 means something. Without it, one licence could be copied to any number of machines.
It is stored with your licence record and nowhere else. It is deleted when you sign out on that device, when you release your other devices from Settings → Account, and a device that has not connected for 60 days has its number deleted the next time your licence is activated.
14 Who else is involved
The complete list:
- Cloudflare: serves the site, stores the accounts, the events and the mailing list, and routes mail sent to our addresses.
- Resend: sends the messages Rawnd sends: sign-in links and codes, licence and trial codes, the trial reminder, and news if you asked for it. It receives the recipient's address and the message.
- Google, only if you choose “Continue with Google”: it confirms your email address to us.
- Our payment provider: takes payments, as described above.
- OpenAI and Anthropic, only if you use the plugin, for what their assistant exchanges with our server and for the image you choose to show it.
15 Where it is held
Cloudflare serves from a global network, so your request is handled near you. The accounts, the mailing list and the events sit in Cloudflare's storage, and the messages we send pass through Resend. Both may be outside Canada.
Given what those records contain (an address, a date, a country) we consider that proportionate. We would rather state it than leave you to infer it.
16 How long we keep it
- Account: until you ask us to delete it.
- Sessions: a year, or until you sign out.
- Sign-in links and codes: ten minutes.
- Mailing list: until you unsubscribe or ask us to delete it.
- Events, plugin calls included: for as long as Cloudflare retains them, currently around three months.
- Feedback you sent us: until you ask us to delete it.
- The counters that rate-limit the feedback form, the emailed codes and licence activation: one day at most. They hold a salted hash of your connection's address that changes every day, never the address itself.
- Licence records: while the licence is valid, plus the period Canadian tax law requires records to be kept, which is six years.
- Trial records: for as long as Rawnd offers a trial, since the record is what makes it one per address. Ask us and we delete yours; that address can then start another.
17 Your rights
You may ask what we hold about you, have it corrected, or have it deleted. We answer within 30 days.
Depending on where you live these rights come from Québec's Law 25, Canada's PIPEDA, the GDPR, or the UK GDPR. In practice our answer is the same wherever you are.
If our answer does not satisfy you, you may complain to the Commission d'accès à l'information du Québec, or to the supervisory authority where you live.
privacy@rawnd.app18 Children
Rawnd is not directed at children under 13, and we do not knowingly collect their personal information.
19 Changes
The date at the top of this page changes whenever the text does.