Privacy

This page describes what data is actually processed when you use Loclavis. It separates local file processing strictly from payment and licensing communication.

File processing: entirely local

Encryption and decryption happen only in your browser. Your files are not uploaded for processing. File passwords and encryption keys are never sent to a server and never stored.

• File contents never leave your device.
• Passwords are never transmitted and never logged.
• Encryption keys are created locally and stay local.
• Filenames are stored encrypted in the container, not in its public header.

Local browser storage

Loclavis stores in your browser's local storage: your theme choice, a counter of this calendar month's protect operations, and, if you have one, your Plus key together with the result of the last licence check. This data stays on your device and is not transmitted to us.

No analytics, no tracking

Loclavis embeds no analytics, tracking or marketing services and sets no cookies for those purposes.

Payment and licensing

We use Stripe for Loclavis Plus purchases. At checkout you are redirected to Stripe; you enter your payment details there and we never see them. We do not keep a customer database of our own.

• At checkout: you are redirected to Stripe and enter your payment details there.
• During a licence check: only your Plus key is sent to our verification function. It contains a Stripe subscription identifier and nothing else.
• Never transmitted: files, file contents, filenames, file passwords, encryption keys or .safe containers.
• Subscription management and invoices run through the Stripe customer portal.

Services we use

• Stripe: Payment processing, subscription management and subscription status checks. https://stripe.com/privacy

Hosting and server logs

Delivering the website requires technical communication with our host. Technically necessary access data may be recorded server-side (for example IP address, timestamp, requested resource). This processing is required to operate the website.

What these statements cover

“100% local” refers to file processing. It does not mean that operating the website involves no data processing at all: hosting, payment and licence checks happen online.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. Please use the address given in the legal notice.

Controller