LHLocal Highlights

Candidate legal draft · not for publication

Privacy

  1. Who operates this tool. [OWNER_LEGAL_NAME_OR_SOLE_TRADER_NAME], trading as [OWNER_BRAND_NAME]. Privacy contact: [OWNER_PRIVACY_EMAIL].
  2. Local content. Content, file names, paths, titles, authors, notes, tags and output you select are processed only in browser memory. They are not uploaded, stored by the service, or included in events. Refreshing, closing or clearing removes temporary content without changing the source or an already downloaded file.
  3. Anonymous beta measurement. Only after consent, the closed event set is landing_view, demo_complete, real_file_preview, checkout_opened, paid and zip_downloaded. Each record has exactly event_name, occurred_at_utc, a random anonymous_experiment_id, language and fixed error_code=NONE. The application event store does not keep IP address, User-Agent, referrer URL, fingerprint or cookie. Hosting/security providers may transiently process network metadata under their policies.
  4. Payment and entitlement. Paddle is Merchant of Record and handles email, payment method, billing address, tax, receipt, refund and dispute. The tool never handles card data. We keep the minimum transaction and entitlement data: Paddle transaction, product/price, currency, transaction/refund state, time, opaque entitlement ID and credential hash—never reading content.
  5. Browser storage. Measurement choice, random anonymous ID and opaque entitlement token may be stored locally. Interface language is session-only. Clearing site data removes local recovery credentials but does not cancel or refund a transaction.
  6. Support. Email or receipt data voluntarily sent to [OWNER_SUPPORT_EMAIL] is used only for support/recovery. Never attach an export, highlight, note, title or ZIP. Support records are deleted 30 days after ticket closure unless a legal or dispute duty requires longer.
  7. Retention. Event detail is deleted 30 days after the experiment closes, leaving only non-reidentifiable aggregate counts. Paddle and necessary transaction/entitlement records follow [OWNER_PAYMENT_RECORD_RETENTION_BASIS]. This placeholder blocks publication.
  8. Choices and rights. Rejecting measurement does not block demo, preview or purchase. Privacy access/deletion requests go to [OWNER_PRIVACY_EMAIL]. Records Paddle must legally retain may not be deletable by this tool.
  9. Processors and links. Intended processors: Cloudflare for hosting/data infrastructure and Paddle for Merchant-of-Record payment. The support email provider remains unconfigured and is not enabled. See Paddle Privacy Notice.