Controller
Alexander Zotz, trading as Lorivelle
c/o POSTFLEX PFX-375-297
Emsdettener Straße 10
48268 Greven
Deutschland
Contact: support@lorivelle.com.
Your account & downloads
When you sign in with Google or GitHub, we receive your account identifier, email address, and basic profile information. Supabase hosts our account database and authentication in Frankfurt. We use this data to provide your account, licenses, and support under Article 6(1)(b) GDPR. Essential session cookies keep you signed in.
Payments & licenses
Stripe Managed Payments handles checkout, payment details, receipts, subscriptions, and payment support as merchant of record. We receive payment identifiers, amounts, payment status, and license entitlements to fulfil your purchase. Card details are handled by Stripe.
Monthly licenses occasionally connect to Lorivelle to check the paid period. These requests contain a license refresh credential; they do not contain recordings. Your signed license is stored locally on your Mac. The refresh credential is included in that license and also stored in your Mac's Keychain. A signed license permits offline use during the paid period.
Device-bound licenses also send a public device key, device name, signed device proofs, and activation identifiers to manage your one activated Mac and renew its seven-day offline access. The private device key stays in your Mac’s Secure Enclave. We keep minimal activation, transfer, and support-exception records. These requests contain no recordings or hardware serial numbers. Existing licenses keep their previous offline rights.
Your recordings
Screen, camera, and audio recordings are stored and edited locally on your Mac. Lorivelle does not upload them as part of recording, editing, export, or license refresh.
Website operation & diagnostics
Vercel hosts the website and processes request data such as IP addresses and technical connection information. Sentry receives technical error reports to help us diagnose problems. We do not enable session replay or intentionally include payment details or recordings in error reports. These services support reliable operation and security under Article 6(1)(f) GDPR.
When you choose email sign-in, Cloudflare Turnstile processes technical browser and connection information to help prevent automated abuse. This security check supports reliable authentication under Article 6(1)(f) GDPR. See Cloudflare’s privacy policy.
Optional YouTube demo
The full demo uses YouTube's privacy-enhanced player. It connects to YouTube only after you choose Watch the full demo. YouTube then receives technical connection and playback information. Closing the demo removes the player. You can also open the video directly on YouTube. See Google’s privacy policy.
Analytics choices
With your consent, Google Analytics 4 uses analytics cookies to measure website visits, sign-ins, registrations, started app downloads, and completed checkouts. We send categories such as the selected plan and free or paid access, never your name, email address, account identifier, or login tokens. Purchase measurement includes a transaction reference and amount. Advertising storage and personalization remain disabled. If you decline analytics cookies, Google Consent Mode can send limited cookieless measurement signals without setting analytics cookies. Google can use those signals for aggregate reporting and modelling. Vercel Web Analytics also provides aggregate website usage statistics without analytics cookies.
Cookie-based analytics uses your consent under Article 6(1)(a) GDPR. Limited measurement supports our legitimate interest in understanding website usage under Article 6(1)(f). You can change your cookie choice using Privacy settings in the website footer.
Retention & service providers
We retain account and license information while needed to provide your account and purchases. Payment records are kept for the applicable statutory retention periods. Technical logs are retained for operational and security purposes. Service providers may process data outside the European Economic Area using their applicable data-transfer safeguards.
See the privacy information from Supabase, Vercel, Stripe, Sentry, and Google.
Your rights
You may request access, correction, erasure, restriction, or portability of your personal data, object to processing based on legitimate interests, and withdraw consent for future processing. Contact support@lorivelle.com. You may also lodge a complaint with a data protection supervisory authority.
Optional product analytics (PostHog)
Only with your separate choice in the Lorivelle app, we measure selected recording, import, playback, saving and export steps using PostHog Cloud EU (Frankfurt). We use random analytics, session and attempt identifiers and limited categories such as app version, license status and success or failure. This usage funnel does not link to your website account, sign-in or purchase. Website Google Analytics preferences do not authorize app analytics.
No recordings, screen text, file names, paths, free-form error messages, email addresses, account identifiers, license identifiers, payment identifiers or device identifiers are sent to PostHog. Autocapture, session replay and location enrichment are disabled.
The app keeps unsent events locally for at most 30 days, 10,000 events or 10 MiB. Our server delivery queue expires after seven days. Provider event access follows the PostHog plan retention (one year on Free; seven years on paid plans); this is not a guaranteed physical deletion deadline. We do not claim automatic deletion after 90 days. See PostHog retention.
This optional processing relies on your consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. You can withdraw in Lorivelle Settings → Privacy. Withdrawal stops new collection, removes unsent local events and asks our server to suppress queued delivery; an offline withdrawal reaches the server after reconnection. Requests already in flight may complete. Minimal revocation records prevent later retries from restoring collection. Previously transmitted events are not automatically deleted by switching analytics off. Contact support@lorivelle.com for access or deletion; the random analytics reference on your device is needed to locate events because we do not identify you by email in PostHog.