Last updated 2026-08-08
Privacy Policy
How CensorFlow handles account, licence and website data while keeping video processing local.
CensorFlow is operated by LEVEL HIGHER in the United Kingdom. Contact: [email protected].
The video you process
CensorFlow processes source video inside the installed Windows application on your own computer. The website and account service do not receive your source footage, and internet access is not used for video rendering.
Information we handle
- Account details, including your sign-in email and optional profile information
- Purchase, subscription, licence status and billing references
- Device activation identifiers stored as hashes, app version and activation dates
- Installer download and security events; download records do not store your IP address
- Support messages and information you choose to include
Why we use it
We use account, purchase and licence data to perform our contract with you: to take payment, provision access, validate an active licence, provide downloads and support your account. We use proportionate security and service-usage records for our legitimate interests in preventing abuse, maintaining reliability and understanding which CensorFlow resources are useful.
Licence validation
The desktop application contacts the licence service when you activate a device and periodically afterwards. Validation checks the licence status, expiry and authorised device; it does not transmit your footage. An expired, cancelled, revoked or otherwise inactive licence is denied automatically.
Service providers
We use specialist providers to operate the service, including Stripe for payments, Supabase for authentication and account data, Cloudflare for secure delivery, and Google Analytics when you consent. These providers process only the information needed for their role and may use protected international transfer mechanisms where required.
Website measurement
CensorFlow records limited first-party events across the customer journey, such as a pricing view, checkout start, confirmed purchase, installer download, licence activation and first-use milestone. Lifecycle identifiers are stored only as non-reversible HMAC values used to prevent duplicate counting. These records can include the page path, plan, app version, referring website host and campaign parameters, but not page contents, account email, licence key, device identifier, footage or IP address. Separately, Google Analytics 4 is loaded only after you select Allow analytics. Advertising storage, advertising personalisation and Google Signals remain disabled.
Retention and security
We retain personal data only while needed to operate your account and licence, meet tax or legal obligations, resolve disputes and protect the service. Access is restricted by account authentication, row-level database policies and role controls. Licence keys are masked by default and are returned only to the signed-in owner of an active licence.
Your rights
- Ask for access to, correction of, or deletion of your personal data
- Object to or request restriction of relevant processing
- Request portable account data where the right applies
- Withdraw analytics consent at any time through Privacy choices
- Complain to the UK Information Commissioner's Office if you believe your rights were not respected
To exercise a privacy right, email [email protected] from the address connected to your account. We may need to verify that the request is yours.