Privacy

Who is responsible

Oleksandr Maistrenko, trading as OcrIdentify e.U., is the controller responsible for the processing described here. The business address is listed in the Impressum.

For privacy requests, email contact@emulsiongrid.com.

Website visits

Serving a web page requires technical connection data, including an IP address and the requested resource. Hosting and security services may also process request time, browser information, response status and security events to deliver the site and prevent misuse.

Purpose and legal basis: delivery and security of the website, based on the legitimate interest in operating a reliable service and protecting it against abuse (Article 6(1)(f) GDPR). These connection data are necessary for your browser to receive the page.

Cloudflare provides hosting, DNS and network protection. We do not keep application request logs or export visitor logs. The operator can access Cloudflare’s built-in traffic and security dashboards; authorised Cloudflare personnel and subprocessors can process these data to provide and protect the service.

Hosting retention: Cloudflare provides up to 31 days of history in its sampled HTTP, security-event and domain DNS views. Aggregate Worker metrics are available for up to three months. These dashboard windows are not a deletion deadline for every provider-held record. Cloudflare separately retains network-security data according to the investigation or prevention of abuse, the data’s sensitivity, available less-identifying alternatives and legal obligations. See Cloudflare’s privacy policy.

Email & Pilot enquiries

The Contact and Pilot links open your email application. The website does not submit a form. If you send an email, we receive your address, any sender name, the message, technical email headers and any attachments you choose to include.

The Pilot prompts ask for your Mac model, memory and macOS version, film format and scanning setup, and the obstacle you would like to solve. This helps assess whether the current Pilot fits your setup and respond to your enquiry. No image attachment is needed to enquire. Please leave out sensitive personal information.

Purpose and legal basis: answering enquiries and assessing Pilot applications is based on our legitimate interest in responding to requests and selecting suitable testers (Article 6(1)(f) GDPR). Where a message requests steps towards a contract or relates to an existing contract, Article 6(1)(b) applies to the processing necessary for that request or contract.

Providing an enquiry is voluntary. We need a return address to reply and enough setup information to assess a Pilot request. Email is handled through Porkbun’s hosted mailbox and its infrastructure providers. Incoming messages are also forwarded to the operator’s Proton Mail inbox, with a copy retained at Porkbun. Replies are sent through Porkbun. This second copy lets the operator receive enquiries in their usual inbox; the private forwarding address is not published. We do not use enquiries to subscribe you to marketing emails.

Email retention: we keep correspondence while an enquiry, Pilot application, evaluation or support matter is active. We close an enquiry when it is resolved, declined or withdrawn, or after 90 days without a substantive reply if no agreed activity or unresolved matter remains. Routine closed correspondence is normally retained for 12 months after closure, with deletion reviewed monthly. This schedule applies to both the Porkbun and Proton copies and to our replies. We use Porkbun webmail and Proton Mail, without additional local mail archives or separate operator-managed backups.

Provider backups and logs: Porkbun keeps security-related system and access logs for 14 days and makes daily service-continuity backups. A message removed from the mailbox may remain in an existing backup. Porkbun does not publish a backup expiry period. Its addendum limits retention to what we deem necessary to provide the service or what applicable law requires. Proton Mail keeps encrypted offline backups for up to 30 days.

We retain selected agreements, commitments and evidence needed to establish, exercise or defend specific legal claims separately from routine correspondence. We review these records three years after the relationship ends or the matter is resolved; continued retention requires a documented claim or other applicable obligation. Records needed for an ongoing dispute are excluded from routine deletion and reviewed until that need ends. Tax and accounting records are kept for the applicable statutory period, normally seven years from the end of the relevant calendar year, or longer where required for proceedings.

Legal bases for continued retention: compliance with legal obligations (Article 6(1)(c) GDPR) and our legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f) GDPR). We retain only the records needed for those purposes. Junk and Trash are reviewed monthly for removal of items older than 30 days, after rescuing any legitimate correspondence or evidence.

Downloads through Proton Drive

The app and third-party source links take you to Proton Drive, operated by Proton AG in Switzerland. No Proton content is embedded in this page: your browser visits that service when you follow a download link. The download links suppress the referring page address.

Proton processes connection data to provide its service. Its Drive policy describes shared-link metadata, including when the link was created and last accessed, its creator and its access count. Proton publishes a period of up to 30 days for encrypted offline backups. It does not specify an expiry period for shared-link metadata. See the Proton Drive privacy policy and Proton Privacy Policy.

You do not send a Pilot application to us by downloading. Downloading does not start a licence period. The website has no image-upload form; your scans are not uploaded through it.

Proton Drive makes a per-file download count visible to us. This count includes both actual downloads and file previews, so it is not a count of unique users or completed installations.

Disabling a public link revokes access immediately. The website does not receive individual download records from Proton.

Cookies & analytics

Your choice: optional audience measurement uses PostHog EU only after you select “Accept analytics”. Rejecting it leaves the website fully usable. We do not load the analytics software or send analytics events before acceptance, and do not send earlier activity afterwards. Use “Analytics settings” in the footer to change your choice or withdraw consent at any time.

What we measure: page views and daily visitor estimates; clicks on Download for Mac, Apply for Pilot and the application/contact email buttons; and starts and completions of the demo video. Completion means the video reaches its end after at least 95% has played while analytics was accepted. We record when each event happened, a one-time event identifier, and fixed labels for the page, button position and whether this is the preview or live site. A click does not prove a completed download or an email being sent. Applications actually received are counted separately in our mailbox.

How visitors are counted: PostHog uses your IP address, browser user-agent information and this website’s identity to derive an identifier that changes daily. PostHog processes your IP address and browser user agent during ingestion to create the daily identifier. It removes the raw values before writing the event to its analytics database. Event records contain pseudonymous daily and session identifiers; this is not a claim that all processing is anonymous. Counts cover consenting traffic and are estimates: they cannot reliably recognise the same person across days, devices or changing connections.

We do not send names, email addresses, message contents, full referring addresses, URL queries or fragments, or precise location to analytics. We do not use session recordings, automatic capture of other clicks, advertising, identified profiles or AI training of this analytics data. The analytics library is served with the website; only the approved events are sent to PostHog’s EU endpoint.

Legal basis and retention: your consent under Article 6(1)(a) GDPR and §165(3) TKG 2021. Your choice is valid for 180 days and, if your browser allows it, is saved in its local storage without an analytics visitor identifier. PostHog’s cookieless mode uses no persistent browser identifier. The selected free service keeps events for one year; expired events are removed through asynchronous cleanup rather than at an exact promised instant. Withdrawing consent stops further collection; it does not undo processing that was lawful before withdrawal. Contact us about existing records and your rights. We do not collect extra identifying information solely to identify you in analytics. See PostHog event retention.

Images and video are served with the website, and fonts come from your device. There are no social-media or external video embeds.

Cloudflare Web Analytics and Bot Fight Mode are not enabled. Cloudflare may present a security challenge when protecting the service against suspicious traffic. Passing a challenge can set a cf_clearance cookie to avoid repeated challenges; our configured period is 30 minutes, with Cloudflare’s documented clock-skew allowance. This is used for security, not audience tracking. See Challenge Passage. External services reached by a link have their own policies.

Providers & international transfers

Optional analytics: PostHog, Inc. processes the analytics described above. Its EU Cloud stores event data in Frankfurt, Germany. EU hosting does not mean that every operation is restricted to the EU: authorised support, subprocessors and network delivery may involve other countries, including the United Kingdom and United States. PostHog’s data processing agreement provides EU standard contractual clauses for restricted transfers, and it participates in the EU–US Data Privacy Framework for covered transfers. See its subprocessor list for the current providers and locations. Access to our analytics is restricted to the operator and authorised provider personnel; the dashboard is not public.

Email: Porkbun LLC processes our hosted email and forwarding in the United States using Amazon Web Services infrastructure there. The service terms incorporate Porkbun’s data processing addendum, including EU standard contractual clauses for the transfer of email data to the United States.

Website hosting and DNS: Cloudflare, Inc. is based in the United States and operates a global network. Processing can occur outside the EEA, including in the United States. Its service agreement incorporates the data processing addendum, which provides EU standard contractual clauses for restricted transfers. Cloudflare also relies on the EU–US Data Privacy Framework for transfers covered by its certification.

Forwarded email: Proton AG in Switzerland receives a copy of incoming messages, including sender details, message text, technical headers and any attachments. Proton scans incoming external mail for spam and viruses before encrypting it for storage. The Proton Mail privacy policy lists servers in Switzerland, Germany and Norway. Proton’s service terms apply its data processing agreement to personal data processed on our behalf under the GDPR.

External downloads: Proton’s Drive policy describes servers in Switzerland, Germany and Norway. For transfers from the EEA to Switzerland, the European Commission has issued an adequacy decision.

You can request a copy of the applicable transfer safeguards at contact@emulsiongrid.com.

Your rights

Under the GDPR, you can request access to your personal data, correction of inaccurate data, erasure or restriction of processing. Data portability applies where its legal conditions are met. Contact contact@emulsiongrid.com to exercise these rights.

The website does not make automated decisions with legal or similarly significant effects, and does not use advertising profiling.

You may complain to a supervisory authority, including in the EU/EEA country where you live or work, or where an alleged infringement occurred. The Austrian authority is:

Before Pilot issuance or sales

Pilot licences are not being issued yet, and this website has no checkout or customer account. This notice covers the website, email enquiries and download links. We will provide further privacy information before requesting licence-registration files, support exports or payment details.