Privacy Policy
Last updated: 2026-10-18
Summary
- Your video footage, reference images, project files and DaVinci Resolve projects are never uploaded. All plug-ins process images on your computer.
- The plug-ins contact our server only to activate and to check the license. That request contains your license key, an anonymous device identifier, the plug-in name and version.
- The website stores your account, licenses, orders and download history. It uses no advertising cookies and no third-party trackers.
What we collect and why
| Data | Why | Where |
|---|---|---|
| Email address, name (optional), password (stored only as an Argon2id hash) | To create and secure your account and to contact you about your licenses | Our database |
| License keys, license status, trial dates, activations (device identifier, generic device label, plug-in and version, last validation time) | To provide and enforce your license, show your devices and let you deactivate them | Our database |
| Orders (product, amount, status, dates) | To deliver what you bought, handle refunds and meet accounting duties | Our database. Your bank login, PIN and card details are handled by your bank and ABA PayWay and never reach us. |
| Download log (which version you downloaded, when) | To provide secure downloads and know which versions are in use | Our database |
| Messages you send through the contact form | To answer you | Our database |
| Aggregate page-view counts and a daily rotating visitor hash | To understand which pages are useful. No IP address and no cookie of its own is stored | Our database |
| Visit log for the site owner: the page opened, device type, browser and operating system, country (from the hosting platform), the site that linked here and, if you are signed in, your account. Visitors who are not signed in are told apart only by a code that changes every day and cannot be traced to an address. Deleted after 90 days. Visible to administrators only. Not collected if your browser sends Do Not Track | To see how many people visit and keep the service healthy, and to help customers who are signed in | Our database |
| Security data: hashed sessions, rate-limit counters, an audit log of administrative actions | To protect accounts and the service | Our database |
The device identifier
The plug-in derives a device identifier by hashing your computer's machine GUID with a fixed salt (SHA-256). We receive only the hash. It cannot be reversed to your machine GUID, and we do not receive your computer name, user name, IP-derived location or hardware serial numbers. The device label shown in your dashboard is generic (for example "Windows PC").
What is stored on your computer
- A small encrypted license file in your Windows user profile (%LOCALAPPDATA%\LASTFX). It is encrypted with the Windows Data Protection API for your account and contains a signed license token and the time of the last check. It contains no password and no payment data.
- LUMERIX stores, inside your project, a compact description of the reference frame: a few dozen statistics (brightness, contrast, colour) and a very small colour map of it, a grid of 64 by 36 average colours. In effect that map is a tiny blurry thumbnail; it does not contain the picture's detail, and the full image is never stored. None of it leaves your computer.
What the plug-ins send
On Activate: your license key, the device identifier, the plug-in name, the plug-in version and a generic device label. About once a day (and when you press Retry): the signed token, the device identifier, the plug-in name and version. On Deactivate: the token, the device identifier and the plug-in name. All over HTTPS. Rendering never contacts the server.
The plug-ins never send footage, frames, reference images, file names, project data or DaVinci Resolve project information. If a cloud feature is ever added it will be off by default and require your explicit choice.
Service providers
- Payment: ABA PayWay and your bank process KHQR payments. We receive the order status, amount and a payment reference. We never see your bank login, PIN or card details.
- Email: transactional messages (verification, password reset, receipts) are sent through our email provider.
- Hosting and storage: the website, database and installer storage are run by hosting providers acting on our instructions.
Retention and your rights
We keep account and license data while your account exists and order records as long as the law requires. You can ask us to access, correct, export or delete your personal data through the contact form; where the law requires us to keep order records we will tell you which. Sessions expire after 14 days without use.
Security
Passwords are hashed with Argon2id. Sessions use random tokens stored hashed. License tokens are signed with a private key that stays on our server; the plug-in contains only the public key. Connections use HTTPS. License keys are stored encrypted.
Contact
Questions about privacy: use the contact form and choose the topic that fits.