Privacy Policy

Meanshot is built to keep your data on your device. No account, no telemetry, no tracking. This policy explains the limited data involved in the trial, licensing, support, and any future sale of the app under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Controller: Bent Eisheuer, Freisinger Landstraße 47a, 85748 Garching, Germany — legetdev@gmail.com.

2. The short version

• The app runs on-device; we never receive your screenshots, recordings, or files.
• The app has no telemetry, no advertising, and no profiling.
• No account is required to use the app.
• This website uses no analytics, advertising, tracking pixels, or non-essential cookies.

3. What we process, and why

a. Free-trial verification

To keep the free trial fair (and prevent it being reset by reinstalling), the app sends a salted hash derived from a device identifier to our trial server (a Cloudflare Worker) when the trial starts. Until the first successful verification, the app retries at launch and then hourly; if it cannot verify within 48 hours, the trial is locked. After the first successful verification, no further trial-server checks are made. This is a pseudonymous anti-fraud identifier — no name, no account, no files, and the underlying hardware id never leaves your Mac; the server only records the trial start date for that hash. Legal basis: our legitimate interest in preventing abuse of the trial (Art. 6(1)(f) GDPR). Paid licensed copies do not send this trial identifier.

b. License validation

Once paid sales are enabled, when you activate or validate a license the app sends your license key and a device name/identifier to our licensing provider, Lemon Squeezy, to verify the license and manage activations. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

c. Purchases

Paid sales are not currently enabled. Once enabled, checkout will be handled by Lemon Squeezy (Lemon Squeezy, LLC) as merchant of record. It will collect the data needed for payment, invoicing, and tax and act as controller for that transaction. We will receive the order and license information needed to provide the product and support.

d. Optional uploads

If you configure an upload destination (your own Amazon S3, Cloudflare R2, SCP, or custom endpoint), captures you choose to upload go directly to that destination under your control. We neither receive nor store them.

e. Support

If you email us, we process your message and contact details to respond. Legal basis: our legitimate interest in handling your request (Art. 6(1)(f) GDPR).

f. Website hosting

This site is hosted by Vercel. Their servers may log technical request data (such as IP address, request time, requested resource, referrer, and user agent) to deliver and secure the site, as our processor. The website itself sets no cookies or other identifiers and runs no analytics or tracking. Legal basis for hosting and security logs: our legitimate interest in providing a secure, reliable website (Art. 6(1)(f) GDPR).

4. Recipients & processors

Vercel (website hosting) and Cloudflare (trial verification) process data on our behalf. Once paid sales are enabled, Lemon Squeezy will act as an independent controller for transaction data as merchant of record. We do not sell or share personal data for advertising.

5. International transfers

These providers may process data outside the EU/EEA, including in the United States. Where GDPR transfer restrictions apply, the transfer must use a valid mechanism such as an adequacy decision (including an applicable EU–US Data Privacy Framework certification) or Standard Contractual Clauses.

6. Retention

The pseudonymous trial fingerprint and its start date are automatically deleted no later than 12 months after the first successful verification. Vercel retains infrastructure security logs under the applicable account settings; we do not run a separate website analytics or tracking log. Once sales are enabled, we keep order and license records for as long as needed to provide your license and to meet legal retention duties — in Germany, invoices and accounting vouchers are retained for 8 years (§ 147 AO, § 257 HGB, reduced from 10 by the 2025 Bürokratieentlastungsgesetz IV), and books and annual financial statements for 10 years. Support correspondence is kept only as long as needed.

7. Your rights

Under the GDPR you may have rights of access, rectification, erasure, restriction, data portability, and objection, and to withdraw consent where processing relies on consent. You also have the right to lodge a complaint with a supervisory authority. The authority competent for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach, Germany; you may also contact the authority of your habitual residence.

8. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Children

The Software and this site are not directed to children under 16.

10. Changes

We may update this policy; the current version is always posted here with its date.