Privacy

Privacy Policy

The short version: your video files never leave your Mac. Selling licences from this site means we hold an email address and a few details about the Macs a licence runs on, and this page says exactly what, and why. Buy the app from the Mac App Store instead and we hold nothing about you at all, unless you send us feedback or answer a survey.

Who we are, and what this covers

This website and Content Creators Studio for Mac are run by The Digital Pro, which is responsible for the personal data described on this page. You can reach us about any of it at support@contentcreatorsstudio.co.uk.

This policy covers this website and the Mac app. Galleries, our delivery service, is a separate product with its own privacy policy, listed on our legal page. The one part of Galleries this site collects is its waiting list, and that is covered here.

Your footage stays on your Mac unless you send it

Importing, culling, trimming, grading and exporting all happen locally. Your clips, ratings, reels and settings are never uploaded to us, never scanned, and never shared with anyone else. Nothing the app does by itself puts any of it in front of us.

Two things can send your work out of the app, and neither happens unless you ask for it.

The first is a Dropbox delivery. If you sign in to Dropbox and choose it as the destination for a delivery, the app uploads that delivery straight from your Mac to your own Dropbox account. It goes to you, not to us, and no copy of it reaches us at any point. The app is registered with Dropbox so that it can only see its own folder in your account: it cannot read, change or delete anything else you keep there. Signing out in Settings stops it, and what happens to files once they are in Dropbox is between you and Dropbox, under their terms.

The second is a screenshot attached to feedback, and that one does come to us. It is the only thing you can send that might show your work — a frame sitting in the player, a client’s name on a folder — so it is never gathered for you: you choose the picture, the app shows it to you in the window before anything is sent, you can remove it, and it goes only when you press Send. One picture per message, shrunk on the way, and nothing else from your Mac travels with it.

A survey sends words, not work. Now and then the app puts a few questions on its home screen. If you answer them and press Submit, what you chose or wrote comes to us with this Mac’s device identifier, the app’s version, which edition it is and the macOS version. Nothing from your projects goes with it, and closing the prompt sends nothing at all. That is the same whichever edition you have.

A crash report says where, not who. If the app crashes or stops responding, macOS notes which part of the app was running, and the next time you open it the app sends that to us so it can be fixed, with the app’s version and edition, the macOS version and the model of Mac. It carries no device identifier and nothing from your projects, and the app takes out anything macOS included that could point to you before it goes. This is the one thing the app sends without being asked each time, so it has a switch of its own in Settings › General, in both editions.

Beyond that, what the app sends depends on where you bought it. Bought from this site, it sends a licence check: a device identifier, and your licence key once you have one.

Bought from the Mac App Store, it sends us nothing about your purchase. Apple takes the payment under its own privacy policy and keeps a signed record of the subscription on your Mac, and the app reads that record there without asking anyone. No email address, no key, no device identifier and no trial record reaches us from that edition; the only things that ever do are feedback you choose to send, a survey you choose to answer and the anonymous crash reports described above.

What we collect, and why

What	Why	Lawful basis
Your email address	To send your activation key, and to prove it is your licence when you release a seat or ask for the key again.	Contract
Your licence key and subscription status	To unlock the app and know whether the subscription is current.	Contract
Stripe customer, subscription and payment identifiers	To match a payment to a licence, and to handle renewals, cancellations and refunds.	Contract
The amount you paid and its currency	For support and for our accounting records.	Legal obligation
A device identifier generated by the app	To count how many Macs a licence is active on, and to run the free trial. It is a random value created on your Mac. It is not a hardware serial number and identifies nothing outside this system. If you bought the app from the Mac App Store it is only ever sent with feedback you choose to send or a survey you choose to answer, so that two reports from one Mac can be told apart and each Mac answers a survey once.	Contract
Your computer’s name, macOS version and app version	So you can tell your Macs apart when choosing which one to release, and so support can reproduce a problem. A computer name often contains a person’s name, which is why it is listed here.	Contract
Your details if you ask for a place on a beta, when one is open	Betas run before a major release and are not always open; when one is, this is what asking for a place involves. To contact you when a place comes up, and to decide who to invite first. Your email, plus your name, the social handle you gave us and what you shoot — those three only if you chose to fill them in. We use the handle to look at your work, and to follow you. We also note what you signed up from: whether it is a Mac and, where your browser says so, its macOS version, its chip and the browser itself. That is read from your browser without asking you anything, and it is used for one purpose, to avoid inviting someone whose computer cannot run the app. We still hold the details of people who asked during an earlier beta.	Consent
Your details if you register interest in Galleries	To tell you when Galleries opens. Your email, plus your name and how you deliver to clients today, those two only if you chose to fill them in. This list is kept apart from the beta list, and joining one does not put you on the other.	Consent
Feedback you send from inside the app	To fix bugs and decide what to build next. What you write, plus the app and macOS version so a problem can be reproduced, and this Mac’s device identifier. If you bought from this site and have entered your licence key, the key goes too, so a problem with your licence can be looked into without asking you for it. Your email address only if you give one — it is optional, and without it we simply cannot reply. A screenshot only if you attach one: the app shows you the picture before it is sent, nothing else leaves your Mac with it, and it is stored privately and read only by us.	Legitimate interests
Your answers to a survey in the app	To learn what people make with the app, how it is serving them and what to build next. Now and then the app puts a few questions on its home screen. Nothing is sent unless you answer and press Submit, and closing the prompt sends nothing at all. What goes is what you chose or wrote, with this Mac’s device identifier (so each Mac answers a survey once), the app’s version, which edition it is and the macOS version. It is held in the same database as the rest of this table, in London.	Legitimate interests
Crash reports from the app	To find and fix what makes the app crash or stop responding. When it does, macOS notes which part of the app was running, and the next time the app opens it sends that to us with the app’s version, which edition it is, the macOS version and the model of Mac. There is no device identifier, no licence key and nothing from your projects in it, and the few things macOS includes that could point to you or a file — the region your Mac is set to, the wording of an error message, the names of your files and folders — are taken out on your Mac before it is sent. The same in both editions. Settings ▸ General turns it off, and turning it off throws away any report not yet sent.	Legitimate interests
Download records: version, country, browser and referring site	To know which builds people install and how they reached the download. The browser line is the user agent your browser sends with every request; the country comes from the network edge — no IP address is stored.	Legitimate interests
How this website is used	To see which pages people read and how they found us. This site counts its own visits: when your browser opens a page, the page sends us the path you opened and, if you followed a link here, the name of the site it was on. What is recorded is that path, that site, roughly which country you are in and whether you are on a phone or a computer. Nothing is written to your device and no third party is involved, which is why there is no cookie banner. Instead of an identifier that follows you, the count uses a one-way hash of your address and browser mixed with a secret and the date, so two visits on one day can be told apart and the same person tomorrow cannot be recognised. Google Analytics also runs, with its storage switched off, so it too sets nothing on your device.	Legitimate interests
Salted, one-way hashes of IP addresses and email addresses	To rate limit the API so keys cannot be guessed and the key-resend form cannot be used to send unwanted email. The hashes cannot be reversed to recover the original value.	Legitimate interests

What we deliberately do not collect

—Your card details — Stripe or Apple handles those and we never see them.
—IP addresses. Download records store a country, not an address.
—Any of your video files, thumbnails, ratings or reels.
—Anything about you from other websites, or about your visits to them.
—Advertising identifiers. There is no advertising.

Cookies

This site sets no cookies of its own, and there is no banner asking you to accept any. The visitor figures we look at are counted here, on our own server, and each page you open tells us which one it was: nothing is stored in your browser and nothing is sent to anybody else to do it. Google Analytics also runs, with its storage switched off, so it writes nothing to your device either. Nothing here follows you to other websites, and none of it is used for advertising.

Two cookies sit outside that, and neither is about tracking you. Stripe sets its own on its checkout and billing pages, which are hosted by Stripe rather than by us. The admin area sets one session cookie to keep staff signed in, and only staff ever receive it.

There is nothing here for you to turn off, which is the point of doing it this way.

Who else processes your data

StripePayments and subscription billing

Stripe collects your card details directly. They never pass through our servers and we never see them. Stripe also handles the billing portal where you update a card or cancel.

Stripe privacy policy

AppleMac App Store purchases

If you buy through the Mac App Store, Apple takes the payment, handles renewals, cancellations and refunds, and keeps the record of your subscription. Apple does this as a seller in its own right rather than on our behalf: we never see your card, your Apple Account or your name, and Apple sends us nothing that identifies you.

Apple privacy policy

ResendSending email

Processes your email address in order to deliver your activation key. It also carries the notification we receive when someone asks for a place on a beta, registers interest in Galleries or sends feedback, which contains what was typed into that form. A screenshot attached to feedback does not go through email — the notification only says that there is one.

Resend privacy policy

SupabaseDatabase and file hosting

Stores the licence records, waiting lists, feedback and survey answers described above, on servers in London, United Kingdom. A screenshot you attach to feedback is held there too, in private storage that is not readable from the web and is opened only by us, through a link that expires.

Supabase privacy policy

Google AnalyticsWebsite statistics

Tells us which pages are read and how people arrived. It runs with storage switched off, so it sets no cookies and keeps nothing in your browser between visits. It processes your IP address to work out roughly where you are; Google does not log the address itself in Analytics. Nothing about your licence, your footage or your Mac reaches it.

Google Analytics privacy policy

We do not sell your data, and we do not share it with anyone beyond the companies named above.

How long we keep it

Licence and subscription recordsFor as long as the licence exists, then for six years to meet UK tax record-keeping requirements.
Device activationsFor as long as the licence exists. Releasing a seat keeps the record so a returning Mac does not consume a new one, and so we can look into a dispute about key sharing.
Trial recordsKept after the trial ends, so reinstalling does not grant a second free trial.
Download countsKept indefinitely — they contain no identifier.
Beta waiting listKept between betas, so you do not have to ask again for the next one, and deleted whenever you ask us to.
Galleries waiting listUntil we have told you Galleries is open, or until you ask us to remove you, whichever comes first.
Website statisticsThe page views we count ourselves are kept while they are useful for seeing how the site is doing, and the hash standing in for a visitor stops meaning anything at midnight. What Google Analytics holds is kept for the retention period set on the property, then deleted. Nothing is kept in your browser between visits, and the reports we look at are counts with nobody named in them.
FeedbackKept while it is useful — an open bug report outlives the release that caused it. A screenshot attached to it is kept and deleted with it, never on its own. Ask us and we will delete yours.
Survey answersKept with the survey they answer while its results are useful, and deleted with it. Ask us and we will delete yours.
Crash reportsKept while they are useful — a crash fixed in one release can come back in another, and the old reports are how we know it is the same one. They carry no identifier, so nothing in them leads back to you or your Mac.
Rate-limit hashesSwept regularly; they are meaningless once their window closes.

Your rights

Under UK data protection law you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing we do on the basis of legitimate interests, or ask for it in a portable format.

Email support@contentcreatorsstudio.co.uk and we will respond within one month. Deleting your licence record ends the subscription and the app will stop unlocking, so we will confirm before doing it.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Security

Licence records are held in a database that is not reachable from the public internet — every request goes through our own API, and the app itself carries no database credential of any kind. A screenshot attached to feedback is held the same way: private storage with no public address, opened only from our admin area through a link that stops working after an hour. Card details never reach our servers. The admin area is password protected and rate limited.

Changes to this policy

We will update this page when what we collect changes, and change the date below. The first version of this page was written when the app was sold only through the Mac App Store and collected nothing at all; selling licences from this site is what brought the tables above into being, and the App Store edition still collects nothing beyond feedback you choose to send and surveys you choose to answer.

Questions about any of this? support@contentcreatorsstudio.co.uk

Last updated: October 2026