Privacy Policy for ReinShots Studio

Last updated: November 12, 2026

This Privacy Policy explains how personal data is processed when you use the ReinShots Studio web application (the "App") and the website reinshots.com, in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing is:

ReinLogic (Sedat Serttas)
Hefnerstr. 11
81541 München
Germany

Email: [email protected]
Phone: +49 176 5790 1370

2. Overview

ReinShots is a local-first application. You do not need an account. Your screenshots, projects and settings are processed in your browser and are not uploaded to us. We do not use cookies, advertising or cross-site tracking. Personal data is only processed in the cases described below: when our hosting provider delivers the website to you, when we collect cookieless visitor statistics with Cloudflare Web Analytics, when you buy or activate a Pro license through Lemon Squeezy, and when you contact us by email.

3. Data Stored Locally on Your Device

All screenshot images, project drafts, device frames, layout settings and your license key are stored only on your device, in your browser's storage (IndexedDB, LocalStorage and the Cache API used by the offline service worker). We do not upload, transmit or store your screenshots or design files on our servers or any third-party cloud servers. We have no access to this data.

Purpose: to provide the App's features, save your work and make the App available offline.
Legal basis: storing this information on your device is strictly necessary to provide the service you request (§ 25(2) no. 2 TDDDG); any related processing is based on Art. 6(1)(b) GDPR.
Retention: the data stays on your device until you delete it, for example by deleting projects in the App or clearing the site data for reinshots.com in your browser settings.

4. Hosting (Cloudflare)

The website and App are hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit reinshots.com, your browser automatically transmits technical information that Cloudflare processes in server logs to deliver the website and protect it against attacks and abuse. This includes your IP address, the date and time of the request, the requested URL, the referring URL and your browser's user agent.

Purpose: secure, reliable and fast delivery of the website and App.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is operating a secure and stable website.
Third-country transfer: Cloudflare is based in the USA and is certified under the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR).
Retention: log data is kept only as long as needed for these purposes and is then deleted by Cloudflare.

5. Purchases and License Activation (Lemon Squeezy)

Pro licenses are sold through Lemon Squeezy, LLC (USA), which acts as the merchant of record. When you buy a license, you complete the purchase on Lemon Squeezy's checkout page, and Lemon Squeezy processes your payment and billing details as the seller. We do not receive or store your credit card or other payment details. Lemon Squeezy's own privacy policy applies to the checkout.

Lemon Squeezy gives us access to the order details of each purchase: your name, email address and billing country, the product, price, order number and date, and your license key with its activations. We use this data to provide your license, to answer support and refund requests, and to send you important notices about your purchase, such as a discontinuation of the product or a change that affects your license. We do not use it for advertising or newsletters.

When you activate a license key in the App, when the App checks that a stored key is still valid, and when an activation is released, your browser sends a request directly to the Lemon Squeezy license API (api.lemonsqueezy.com). These requests contain:

your license key,
an instance name generated from your browser's user agent (for example "reinshots-web-Mozilla/5.0 …") when activating, or the activation ID that Lemon Squeezy assigned to it when checking or releasing an activation, and
your IP address, which is transmitted automatically with every internet request.

The license key, the activation ID and the result of the last check are stored locally in your browser.

Purpose: selling the license, activating and validating it, customer support, and service notices about your purchase.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract).
Third-country transfer: Lemon Squeezy processes data in the USA. Transfers are based on the EU-U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Retention: purchase records are kept for as long as statutory retention obligations under commercial and tax law require.

Providing this data is neither legally nor contractually required. However, without license activation the Pro features cannot be unlocked. The free features of the App work without it.

6. Website Statistics (Cloudflare Web Analytics)

To understand how many people visit our website and which pages they view, we use Cloudflare Web Analytics, a service of Cloudflare, Inc. (see Section 4). When a page loads, a small script from static.cloudflareinsights.com reads performance information from your browser and sends it to Cloudflare:

the URL of the page you viewed and the referring URL,
a random ID for the page view, which is not stored on your device,
performance measurements of the page load (load and paint timings, Core Web Vitals and memory usage), and
your browser's user agent and your IP address, which are transmitted automatically with the request. According to Cloudflare, the IP address is discarded at the nearest Cloudflare data center and is not stored.

Cloudflare Web Analytics does not set cookies, does not use your browser's local storage and does not use fingerprinting to recognise you across visits or websites. We only see aggregated statistics, such as the number of visits per page, referring websites, countries and browsers. We cannot identify individual visitors. Cloudflare processes this data on our behalf as a processor under its data processing agreement.

Purpose: aggregated statistics about the use of our website, so we can improve the website and App.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is understanding how our website is used, in a privacy-friendly way without cookies or individual profiles.
Third-country transfer: Cloudflare is based in the USA and is certified under the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR).
Objection: you can object at any time (Art. 21 GDPR, see Section 8). You can also prevent the collection by blocking scripts from static.cloudflareinsights.com, for example with a content blocker; the website and App work normally without it.

7. No Cookies, Advertising or Automated Decisions

We do not set cookies and do not use advertising, session-replay or cross-site tracking tools. Apart from the aggregated statistics described in Section 6, we do not analyse how you use the website or App. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

8. Your Rights

Under the GDPR, you have the right to:

access the personal data we process about you (Art. 15 GDPR),
rectification of inaccurate data (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR), and
object at any time to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR).

To exercise these rights, contact us at [email protected]. Because your project data is stored only on your device, you can view, export or delete it yourself at any time.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work, or where the alleged infringement took place. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. Third-Party Websites and Links

Our website and App contain links to external sites (such as the Google Play Store or Apple and Google developer documentation). Their operators are responsible for their own privacy practices.

10. Contacting Us by Email

If you write to us by email, we process your email address and the content of your message in order to answer you. Email sent to our address is received through Cloudflare Email Routing (Cloudflare, Inc., see Section 4), which forwards it to our mailbox at Gmail, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Both providers process your message on their servers in order to deliver and store it.

Legal basis: Art. 6(1)(b) GDPR where your message concerns a license or purchase, otherwise Art. 6(1)(f) GDPR. Our legitimate interest is answering enquiries.
Retention: we delete the correspondence once your request is settled and it is no longer needed, unless statutory retention obligations apply.
Third-country transfer: Cloudflare and Google may process data in the USA. Both are certified under the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR).

11. Changes to This Privacy Policy

We may update this Privacy Policy when the App changes or when legal requirements change. The current version is always available on this page, with the date of the last update shown above.