Privacy Policy

01 Who is responsible

Matthieu Audo, sole proprietor, Québec, Canada is responsible for the personal information described here.

Québec's Law 25 requires a business to name the person in charge of protecting personal information. For Rawnd that is Matthieu Audo, reachable at the address below.

02 Your photographs

They are not uploaded. Not to us, not to anyone.

When you open a RAW file it is read by a decoder running inside the page and drawn by your own graphics hardware. Nothing about the image is transmitted.

You do not have to take our word for it: open your browser's network panel, develop a photo, and watch that nothing is sent. We hold no photographs, and we could not produce yours if somebody asked us to.

03 What stays on your device

Rawnd keeps the following in your browser's own storage:

• your edits — the adjustments for each photo, stored as numbers, never as an image;
• your ratings and rejections;
• a reference to the last folder you opened, so it reopens in one click;
• your interface preferences.

04 Usage measurement

We count a small number of events, to know whether the product is being used at all. Each one is a single row holding:

• the event — a page view, a folder opened, a photo developed, an export;
• the interface language;
• the country the request came from, derived at the network edge;
• whether Rawnd was running as an installed app or in a tab;
• for an export, how many photos it covered;
• for a feedback rating, the score you gave, from one to five;
• for a page of this website, which page it was;
• for a page of this website, which site linked to it — as one of a short list of names such as “a search engine” or “Reddit”, never a full address, and never the words you searched for.

05 Why that cannot identify you

There is no identifier, no cookie and no session. Two visits by you are indistinguishable from two visits by two people.

That holds for the two entries added most recently. The page is the address you were already reading, and the referring site is reduced to one of thirteen names inside your browser before anything is sent — so nothing here is remembered between two pages, and your path through the site cannot be reassembled.

We cannot build a profile from this by construction rather than by policy — the columns that would allow it do not exist. The rows are written to Cloudflare Analytics Engine, through this site's own domain rather than a third party's.

06 The mailing list

If you give us your email address we store the address, the date, where in the product you gave it, your interface language, and your country.

The date and the context are kept because Canada's anti-spam legislation requires consent to be provable. We do not store your IP address or your browser.

We use it to write to you about Rawnd — a launch, a significant release. Nothing else, and never passed to a third party. Every message carries an unsubscribe link, and unsubscribing deletes the row rather than flagging it.

07 What you write to us

Rawnd occasionally asks what you make of it, and its settings hold a form that asks the same thing whenever you feel like answering. This is the only place in the app where something you wrote is transmitted anywhere.

If you send it, we keep what you typed, the rating if you gave one, which moment in the product asked, your interface language, your country, whether Rawnd was running installed or in a tab, and which version you were on. Your email address too — but only if you chose to give one. It is optional, and its only purpose is to let us reply to you.

That address is not the mailing list and is never added to it. Answering your message is the only thing it is ever used for.

So that the form cannot become a way to flood our database, we count how many messages come from one internet address each day. We do not keep the address. What is kept is a one-way scrambling of it, mixed with that day's date and a secret, in a table of its own that is never joined to anything you wrote. Yesterday's rows are thrown away, and an address scrambled on one day cannot be matched to the same address on another.

08 Payment

Purchases are processed by our payment provider, acting as merchant of record. Card details are entered on their systems and never reach ours. We receive confirmation that an order was paid, with the email address and country needed to issue a licence and support it.

09 Activating a licence

Activating Rawnd on a device sends us one thing that is sent at no other time: an installation number.

It is a random value the app makes up the first time it runs. It is not derived from your device, your browser or you — two installations on the same computer produce two different numbers, and it tells us nothing whatsoever about the machine. It is not a fingerprint, and it is never attached to any of the events described above.

Its only job is to count how many devices a licence is active on, so that the limit of 3 means something. Without it, one licence could be copied to any number of machines.

It is stored with your licence record and nowhere else, and it is deleted when you deactivate that device from your account.

10 Cookies

Rawnd sets none. There is no consent banner on this site because there is nothing to consent to.

One thing is remembered in your browser's local storage: which language you chose to read this site in. It never leaves your device and is not sent to us.

11 Who else is involved

The complete list:

• Cloudflare — serves the site, stores the events and the mailing list, and routes mail sent to our addresses.
• Our payment provider — takes payments, as described above.

12 Where it is held

Cloudflare serves from a global network, so your request is handled near you. The mailing list and the events sit in Cloudflare's storage, which may be outside Canada.

Given what those records contain — an address, a date, a country — we consider that proportionate. We would rather state it than leave you to infer it.

13 How long we keep it

• Mailing list — until you unsubscribe or ask us to delete it.
• Events — for as long as Cloudflare retains them, currently around three months.
• Feedback you sent us — until you ask us to delete it.
• The counters that rate-limit the feedback form — one day.
• Licence records — while the licence is valid, plus the period Canadian tax law requires records to be kept, which is six years.

14 Your rights

You may ask what we hold about you, have it corrected, or have it deleted. We answer within 30 days.

Depending on where you live these rights come from Québec's Law 25, Canada's PIPEDA, the GDPR, or the UK GDPR. In practice our answer is the same wherever you are.

If our answer does not satisfy you, you may complain to the Commission d'accès à l'information du Québec, or to the supervisory authority where you live.

15 Children

Rawnd is not directed at children under 13, and we do not knowingly collect their personal information.

16 Changes

The date at the top of this page changes whenever the text does.