Privacy

Your photos

Your photos are never uploaded, transmitted or seen by us. Raw decoding, editing, cropping and export all run inside your browser, on your own device, using WebAssembly and WebGL. No copy of a photo is ever sent to our servers, so there is nothing there to keep.

What we keep, and where

• Your account, if you create one. Any export needs an account. The record is your email address, when the account was created (the start of your trial), a count of your exports, which products you own and any licence keys attached to it. It is stored with Upstash, our database provider, until you ask us to delete it.
• Sign-in emails. When you ask for a sign-in link, we send it through Amazon SES. To stop the form being used to spam an inbox, we count requests per email address and per IP address. Those counters last an hour, expire on their own and are not stored on your account.
• A trial export check. When you export during a trial, your browser asks our server first. That request carries only your signed sign-in token. It carries no image data, filename, dimensions or edit settings.
• Purchase records. Stripe takes the payment. We keep the licence key, your email and the purchase date so the licence can be restored and, where it applies, refunded.
• A pack download, if you own one. The C-41 and Grainhouse colour tables are delivered from our server once your licence is confirmed, then cached in your browser. That request carries your entitlement token and the name of the stock you selected, and nothing about your photo.
• Anonymous page counts. We use Vercel Web Analytics on every page of this site, including the editor at /app, and in the Mac and iPhone apps once they are released. It is cookieless and does not identify you. It records which page was opened, a referrer, a coarse country and a device type. It has no link to your account and nothing about your photos, your filenames or your edits.
• Page and button counts on our own server. The same pages also load Umami, an open-source analytics tool we host ourselves at stats.ayrescapital.ca. It sets no cookies and does not store your IP address. It records which page was opened and its title, a referrer, a coarse location, the browser language, the device and screen size, and three counts: a sign-in link sent, a Buy button pressed with the product it names, and an export with its format, JPEG or PNG. To count a returning visitor once, it combines your IP address and browser with a value that changes every month and keeps only the scrambled result. It has no link to your account and never receives your email, your photos, your filenames or your edits.
• The earlier sign-up list. The older sign-in page at /login also adds the email you enter to a separate list. We use that list for nothing else and delete an address on request.

The site and its server functions are hosted by Vercel.

What we don't do

• No cookies for tracking, no fingerprinting, no advertising pixels.
• We do not sell or share any email address with anyone.
• No passwords. Signing in is a one-time email link. Browsing and editing need no account; any export does.

Stored on your device

The app keeps these small items in your browser's local storage:

• your theme and your sign-in session
• your licence tokens, if you activated a key
• the email you signed in with, as a local backup
• your export settings: format, quality, size, and the artist and copyright lines
• the rendering profile you last chose, and whether new photos are developed automatically when they open
• a random number created on this device that ties an activated licence key to this browser, sent only when you activate a key

The app also remembers your edits, in a small database inside the browser. For each photo you have adjusted it keeps the slider settings and the file's name, size in bytes and last-changed date, so reopening the same photo can offer to put your work back. No image data is stored. None of it is sent anywhere, and restoring an edit is always your choice. The most recent 40 photos are kept and older entries are dropped. Reset a photo to untouched and its entry is deleted.

If you own a film pack, the app also caches that pack's colour tables in your browser's cache storage so it works offline. Clearing your browser data removes all of it, saved edits included. Sign in again or re-activate your key to restore your purchases.

Questions and requests

RawRoom is a Player Piano AI product run by Ayres Capital Enterprises LTD., Toronto, Ontario. To see what we hold about you, correct it or delete it, email hello@rawroom.app.