Privacy Policy

1. Controller and contact

Rogelio Silio is the controller for the processing described in this Policy. Swiss data protection law applies. The EU or UK GDPR may also apply where its territorial requirements are met.

2. Scope

This Policy covers macunfilm.com and its protected areas, license.macunfilm.com, macunfilm purchase and subscription administration, transactional email, support communication and licence validation by the macunfilm plugin for DaVinci Resolve.

Third-party services such as Stripe Checkout and the Stripe customer portal also process data under their own privacy notices. DaVinci Resolve and the operating system are provided by third parties and are not controlled by macunfilm.

3. Data we process

3.1 Website and network data

When you access the website, account, download or licence API, Cloudflare may process the IP address, date and time, requested address, referrer where supplied, browser or client information, security signals and request or response metadata. These data are required to deliver and protect the services.

3.2 Purchase and subscription data

Stripe processes payment details. macunfilm receives and stores the data required to issue and administer access, including Stripe customer, checkout, price and subscription identifiers, plan, currency and subscription status, current billing-period end, billing email association and relevant event timestamps. macunfilm does not receive or store full card numbers or card security codes.

3.3 Licence and activation data

The plugin sends the product identifier, licence key, plugin version, platform and a pseudonymous device identifier to the licence API over HTTPS. The identifier is derived locally from a stable operating-system device value and the macunfilm product identifier. The raw hardware or operating-system value is not sent to the licence server. The server stores a hash and an encrypted form of the licence key, licence status, device binding and activation timestamps.

The complete licence key is stored locally in Apple Keychain or Windows Credential Manager after explicit activation. It is transmitted only for plugin validation and is not accepted as a website-account or billing credential. The temporary Resolve entry field is cleared after activation and is not stored in the project by current releases.

3.4 Customer account and security data

The customer account uses one-time codes sent to the Stripe billing email. macunfilm stores only a purpose-specific hash of each code, its expiry, attempt and use status, encrypted and hashed email associations, account identifiers, hashed session tokens, session timestamps, security events and pseudonymous rate-limit fingerprints. A fresh code is required before billing access or a device change. Licence keys are not website login credentials and are not stored in browser local storage.

3.5 Email, support and product feedback

macunfilm processes the billing email received from Stripe to send purchase, licence, cancellation and payment-status messages through Resend. Support requests submitted through the website or sent to [email protected] may include your name, email address, selected category, message, attachments and technical information you choose to provide. Website support requests are delivered through Resend to the support mailbox, with a ticket reference and a copy sent to your submitted email address.

3.6 Image and project data

Color transforms, film profiles, grain, halation, bloom and other image effects run locally in DaVinci Resolve. macunfilm does not upload, store or inspect your footage, project timeline or rendered frames. Files voluntarily sent to support are processed only for the requested assistance.

3.7 Data not requested

Do not send special-category data, confidential client footage, passwords, complete licence keys or unrelated personal data in support messages. macunfilm does not knowingly request data from children and does not sell personal data.

4. Sources of data

• directly from you during checkout, account access, support or product feedback;
• automatically from your browser or plugin when delivering, securing or validating the service;
• from Stripe in the form of limited customer, payment-status and subscription metadata;
• from service providers acting on macunfilm's instructions.

5. Purposes and legal grounds

Data is processed to provide the website, complete purchases, issue and validate licences, bind one device, operate the customer account, deliver downloads and updates, send essential service messages, respond to support, secure the service, prevent abuse, comply with legal duties and establish or defend legal claims.

Under the GDPR, where applicable, the principal bases are performance of a contract, steps requested before entering a contract, legitimate interests in secure and reliable operation, compliance with legal obligations and consent where a genuinely optional use is offered. Optional marketing or publication of tester material requires a separate choice. Refusing data necessary for payment, licensing or security may make those functions unavailable.

6. Recipients and service providers

Professional advisers, courts or authorities may receive data where legally required or reasonably necessary to protect rights. Providers may act as processors, sub-processors or independent controllers depending on the activity. macunfilm does not disclose personal data to data brokers or third parties for their own advertising.

• Cloudflare Privacy Policy and Data Processing Addendum
• Stripe Privacy Policy
• Resend Privacy Policy and Data Processing Addendum
• Google Privacy Policy

7. International data transfers

Providers may process data in Switzerland, the European Economic Area, the United Kingdom, the United States and other countries identified in their current sub-processor documentation. Cloud infrastructure may route requests through a global network. macunfilm's current D1 configuration is not advertised as restricted to one national storage location.

Where a destination is not recognised as providing adequate protection, transfers are based, as applicable, on recognised standard contractual clauses adapted for Switzerland, provider data-processing terms and supplementary technical and organisational safeguards. Information about the safeguards relevant to a specific processing operation may be requested at [email protected].

8. Retention

• Active account and licence data: for the subscription and as needed to operate the licence.
• Contract, subscription and legally relevant records: normally up to ten years after the relevant transaction or relationship where required for Swiss accounting, evidence or legal claims.
• Account sessions: usable for no more than seven days unless signed out or revoked earlier; expired records are no longer accepted and are removed during housekeeping.
• One-time login challenges: valid for ten minutes, single-use, and removed after expiry through scheduled housekeeping.
• Rate-limit and security data: for the active security window and, where needed, for investigation and abuse prevention.
• Webhook, email-delivery and administration audit records: while needed to demonstrate correct delivery, status handling, security or claims.
• Support correspondence and voluntarily provided files: for the request and normally up to 24 months after closure, unless earlier deletion is appropriate or longer retention is required.
• Provider logs and backups: according to the providers' documented security and rotation cycles.

Data is deleted or anonymised when the purpose and mandatory retention grounds no longer apply. A deletion request does not override records that must be retained by law or for the establishment, exercise or defence of legal claims.

9. Cookies and local storage

Necessary customer-account session

After successful email-code verification, license.macunfilm.com sets the secure, HttpOnly, SameSite=Strict cookie __Host-mf_account. It contains a random session token, is required for protected account requests and has a maximum life of seven days. Signing out clears it. The corresponding token is stored only as a hash on the server. Billing access and device changes require recent email-code verification.

Theme preference

The website stores macunfilm-theme in browser local storage so the selected dark or light appearance persists. It stays on your device until changed or removed through browser controls.

Third-party pages

Stripe may set its own cookies or similar technologies after you enter Stripe Checkout or the customer portal. Stripe controls those technologies under its own policy. macunfilm currently deploys no advertising pixels, cross-site behavioural tracking or optional analytics cookies on macunfilm.com.

10. Security

Measures include HTTPS, encrypted and hashed licence and email associations, Apple Keychain or Windows Credential Manager storage, single-use email codes, purpose-specific token hashes, short expiries, attempt limits, Secure and HttpOnly cookies, strict origin controls, recent reauthentication for sensitive actions, restricted administration with time-based one-time passwords, audit events and access controls. No internet service can promise absolute security. Suspected licence compromise or security incidents should be reported promptly to [email protected].

11. Automated licence checks

The licence API automatically compares the licence status, Stripe subscription state, product ID and one-device binding. An inactive, unpaid, cancelled, invalid or differently bound licence, or an unsuccessful required online check, can prevent activation and cause the plugin's protective watermark and brighter image treatment. Disabling or removing the plugin node removes both the plugin effects and that protection from the image.

If you believe a decision is wrong, contact [email protected] with a masked licence key and request human review. Do not send the complete key in ordinary support messages unless specifically requested through a secure process.

12. Your rights

Subject to applicable law, you may request information about your data, correction, deletion, restriction or cessation of particular processing, data portability where applicable, withdrawal of consent and human review of a relevant automated decision. Legitimate legal, security and record-keeping grounds may limit a request.

Send requests to [email protected]. Reasonable identity or licence verification may be required. Requests are normally answered within 30 days. You may also contact the Swiss Federal Data Protection and Information Commissioner or, where applicable, your local supervisory authority.

13. Children

macunfilm is a professional creative tool and is not directed to children under 16. macunfilm does not knowingly collect children's data. A parent or guardian who believes such data has been provided may request deletion.

14. Changes to this Policy

This Policy may be updated when the product, providers or law changes. The edition date identifies the applicable text. Material changes affecting active customers will be communicated by reasonable means, such as email, the account or a website notice.