Privacy

Short version: our software runs on your machine and doesn't send us your data. This page covers the little we do see — mostly when you visit this site or buy something.

The apps

Our apps (LockMark, cmmnt and the others on this site) do their work on your computer. Your documents, images, marks and licences stay there. They don't upload your files to us, don't create accounts, and don't include analytics or tracking. LockMark Lite's App Store listing says "Data Not Collected" because that's true; the same is true of cmmnt.

Our apps don't check for updates over the network. App Store builds update through the App Store; for software bought directly from us, we email you when there's a new version — that's the whole mechanism.

This website

lightsca.pe is a static site served through Cloudflare. We don't run ad trackers or third-party analytics. Cloudflare keeps standard server logs (your IP address, browser type, the pages requested) for a short period to run and protect the service, under Cloudflare's own privacy terms. The site sets no cookies of its own and runs no analytics.

When you buy something

Purchases outside the App Store are handled by our payment partner, which acts as merchant of record. They collect what a payment needs — your name, email, billing country and card details — under their privacy policy; your card number never reaches us. We receive your name, email and what you bought, so we can send your licence and honour refunds. We keep that record for as long as your licence is valid plus what tax law requires. Purchases through the Mac App Store are governed by Apple's privacy policy; we receive no personal information from Apple.

When you email us

If you write to [email protected], we keep the conversation so we can help you. We don't add you to any list; the only email you'll get from us unasked is a licence, a receipt, or a new-version notice for something you bought.

Annex and custom work

Annex is end-to-end encrypted: the server stores and relays ciphertext it cannot read. What it does know is who was read in to a room, which devices were approved, and an access log. For custom deployments the data stays on the client's own infrastructure and their policy governs it; we don't hold it.

Your rights

Ask us what we hold about you, ask us to correct or delete it, or ask us to stop emailing you — [email protected], and we'll do it within 30 days. If you're in the EU/UK/California, those laws give you the same rights with teeth; we honour them for everyone.

Changes

If this page changes in a way that matters, the date below changes with it, and significant changes get a line on the home page for 30 days.

Lightscape Creative, Philadelphia · [email protected] · Last updated 2026-10-02.