Privacy Policy
Last updated 1 September 2026
The short version
Your footage never leaves your computer. Cuecraft does all of its analysis locally and has no upload path — there is no server that could receive a video file, because none was built. What we hold is the email address you gave us and the payment record Paddle keeps.
Since 28 August 2026 the app can make exactly one network request, and only when you click Check for Updates. It asks our download server which version is current. That request shows the server the IP address it came from, the way every request to every server does. It carries nothing else about you, and nothing about your footage.
Who we are
Cuecraft is operated by Jeremy Lecocq, Flat 8 Browning Court, Kipling Close, Malvern, Worcestershire, WR14 2UH. For anything in this policy, including a request to see or delete your data, write to [email protected]. We are the data controller for that information.
What we collect
- Your email address, when you join the waitlist, ask for the download, or buy a licence. Used to send you the download link, your licence key, and the mail about your subscription and about new builds. Legal basis: performing our contract with you, and consent for the waitlist and the download list.
- Payment information, handled entirely by Paddle. We never see or store your card number. We can see the last four digits, the country, and the status of your subscription.
- The update check. Clicking Check for Updates asks downloads.cuecraft.net for a small file that names the current version. The app compares it with its own version on your machine. The request unavoidably shows our download server the IP address it came from, plus the name Cuecraft, which the app sends to identify itself. It sends no licence key, no email address, no device or installation identifier, and no version number, so the request cannot be tied to you or to a particular copy of the app, and it tells us nothing about your footage or your projects. It happens only when you click the menu item: nothing on launch, nothing in the background. Legal basis: our legitimate interest in letting you find out that a newer build exists, and in keeping the server that answers you up and unabused.
- The checkout. Buying a licence opens a payment form supplied by Paddle. To make the buy buttons work, clicking Buy loads Paddle's checkout code from cdn.paddle.com, a stylesheet that goes with it, and a second small script from public.profitwell.com, which is Paddle's subscription retention component. We have not switched that component on. We read its code on 3 September 2026: it stores nothing on your device and sends nothing back. Until you click, nothing on this site contacts Paddle at all. Nothing is sent about you, about what you read here, or about your footage. When you click Buy, the form that opens is a page of Paddle's shown inside ours. Everything you type into it goes to Paddle and not to us, and Paddle's page loads its typefaces from Google, so at that point your browser does contact Google. Legal basis: performing our contract with you, and our legitimate interest in being able to sell you a licence at all. The other pages on this site, including this one, load none of it.
- Server logs at Cloudflare, who host this site and the download server the update check talks to. A log line is an IP address, the browser or app name, and what was requested. Cloudflare handles them at its edge for security and abuse prevention, under its own retention policy, and deletes them. We have not switched on any log export, so no per-request record reaches us: we do not hold a list of who visited, who downloaded, or who checked for updates. Legal basis: our legitimate interest in keeping the site and the download server up and unabused. Cloudflare may also set a strictly necessary security cookie to tell visitors from bots; it does no advertising and no tracking.
What we do not collect
- Your footage, audio, project files, exports, or anything derived from them. None of it is transmitted anywhere.
- Usage analytics or behavioural telemetry from the app. The update check is not this. It is a lookup you start, it reports nothing about you or about how you use Cuecraft, and the app does not tell the server which version it is running. If we ever add analytics inside the app, they will be off unless you switch them on, and this policy will say so before they ship.
- Analytics on this website. There is no page counter, no visitor measurement and no script watching what you read here. If that ever changes, this page will say what is measured and how to refuse it, and it will say so before the change goes live rather than after.
- Advertising or tracking cookies. There are none of either, and nothing here follows you to another website. The site still sets no cookies of its own. Paddle's servers set one of their own when your browser fetches the checkout files: a half-hour cookie their host Cloudflare uses to tell people apart from bots. It does no advertising and no tracking, and it is gone half an hour later.
- Anything loaded from a third party, apart from the checkout described above. The typefaces on these pages are served from this site. Nothing on this page, or on the Terms or Refunds pages, asks your browser to contact Google or anybody else in order to read it.
Who we share it with
Only the providers that make the product work. Resend (email delivery) and Cloudflare (hosting) act as our processors and hold the minimum needed for the job. Paddle handles payments as the merchant of record and an independent data controller under its own privacy policy, because as the seller it decides for itself what it must do for fraud prevention, tax and financial regulation. When you buy, you give Paddle your name, email address, billing address and card details directly. What Paddle does with those is set out in its own privacy notice at paddle.com/legal/privacy, and a request to see or delete what Paddle holds has to go to Paddle rather than to us.
We do not sell your data, and we do not swap or rent mailing lists.
Where your data goes
Paddle, Resend and Cloudflare process data outside the UK and EEA. Each is engaged under contract terms incorporating the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, which are the safeguards UK and EU law require for transfers of this kind. Copies are available on request.
Your footage is not part of any of this. It never leaves your computer, so it is never transferred anywhere.
How long we keep it
Waitlist and download-list addresses until you unsubscribe or we close the list. Customer records for as long as you have a subscription and then for as long as tax and accounting law requires us to keep the invoice: in the UK, six years. Of update checks we keep nothing, because we never receive a record of them.
Your rights
Under the UK GDPR and the EU GDPR you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to processing, ask for your data in a portable format, and withdraw consent at any time. Email [email protected] and we will respond within one month, free of charge. If a request is unusually complex we may extend that by up to two further months, and we will tell you inside the first month if we do. If you are not satisfied you can complain to the ICO at ico.org.uk, or to your local supervisory authority in the EU.
We do not make any automated decisions about you that produce legal or similarly significant effects. The editorial decisions Cuecraft makes are about camera angles, and they happen entirely on your machine.
Every email we send includes a one-click unsubscribe link, and you can also email [email protected] to be removed.
Changes
If this policy changes materially we will email everyone on the list before the change takes effect, not merely update the date at the top.
This version adds the update check. The menu item shipped in the app on 28 August 2026, four days before this policy described it, so the email about it goes out after the fact rather than before. That is the wrong order and we are saying so here rather than letting the date at the top do the work.