Privacy Policy

We collect and store:

Your email address — it’s how you sign in. We use one-time sign-in links instead of passwords, so we never store a password for you. We use the address to send those links and, rarely, important service notices.

Your content and settings — the images you upload and the way you configure your displays.

Billing status — if you subscribe to Pro, payment is handled entirely by Stripe. We never see or store your card number; we keep only your Stripe customer reference and whether your subscription is active.

The display is served from our servers onto that site, so like any web request, our servers briefly process your IP address and browser type in routine logs used for security, abuse prevention, and keeping the service running. We don’t build profiles of you, and we serve no advertising.

If the site owner enabled remixing, your tweaks are stored only in your own browser (local storage) and are never sent to us. If you choose to share your version, we store the snapshot image that makes your share link’s preview work.

Signed-in merchants get one essential session cookie — that’s what keeps you logged in. The displays we serve onto other sites set no cookies at all. We use privacy-respecting, aggregate page analytics (Vercel Analytics) on our own site to understand overall usage; it does not track you across other websites.

We run on a small set of infrastructure providers, each processing data only to provide their service to us: Vercel (hosting, file storage, analytics), Neon (database), Stripe (payments), Resend (sending sign-in emails), and Shopify (when you install our Shopify app). We do not sell personal data, and we don’t share it with advertisers.

Our Shopify app places your Lidascope display in your theme. It does not read or receive your store’s customer data. We honor Shopify’s privacy requests: if you or Shopify ask us to provide or erase data connected to a store, we comply.

Account data and content stay while your account is active. Delete an image or a display and it’s removed from serving right away; delete your account (email support@lidascope.com) and we remove your content and personal data, with residual copies aging out of logs and backups shortly after. Routine server logs are short-lived.

You can ask us to access, correct, export, or delete your personal data by emailing support@lidascope.com. If you’re in the EU, UK, or a jurisdiction with similar laws: we process merchant data to perform our contract with you, and technical logs under our legitimate interest in running a secure service; you also have the right to complain to your local data authority. California residents: we don’t sell or share personal information as those terms are defined in the CCPA.

Everything is served over TLS, content lives on established cloud infrastructure, and sign-in links replace stored passwords — there’s no Lidascope password to steal. No system is perfectly secure, but we keep the surface small.

The service isn’t directed at children under 13 (or 16 where that’s the threshold), and we don’t knowingly collect their data.

We’re a US-based service; data is processed in the United States by the providers listed above.

If we make material changes to this policy, we’ll post the update here and note the new effective date; for significant changes affecting merchants we’ll email you. Questions, requests, complaints: support@lidascope.com. Our Terms of Service cover the rest of the relationship.