Privacy Policy - Display Lab

1. Controller and scope

Display Lab is operated by Traian Anghel as an independent web service. This policy applies when you visit Display Lab, use its visual tools, purchase or restore PRO access, or contact us. For privacy questions or requests, email traian_an@yahoo.com. If a third-party website is linked from Display Lab, that website applies its own privacy policy.

2. Images and tool processing

Thumbnail previews, contrast checks, color-vision simulations, display calculations, and generated image previews are processed locally in your browser. Selecting an image does not upload it to Display Lab or create a server copy. The browser reads the file only to render the requested result, and closing or refreshing the page normally removes that temporary in-memory state.

When you choose Download Preview, the browser creates the output locally and downloads it directly to your device. Display Lab does not receive the original image, the generated preview, its filename, or its visual contents. As with any local file, you control where the downloaded result is stored and with whom it is shared.

3. PRO access data

For PRO payment confirmation and cross-device restoration, our Turso database stores a generated record identifier, Stripe customer identifier, checkout email address, API key, creation time, and active status. This limited record exists to confirm entitlement and restore access. We do not ask for a password, postal address, profile photo, date of birth, or unnecessary account biography.

Your browser also uses local storage for the PRO flag, API key, optional restoration email, theme preference, and free-tier usage counters. Local storage is not a traditional tracking cookie and remains on the device until the browser, the user, or Display Lab's logout function removes it. Clearing local storage disables local PRO recognition, but access can be restored using a matching email or API key.

4. Payments and Stripe

Payments are processed by Stripe. Display Lab does not receive or store full card numbers, security codes, or bank credentials. Stripe may process billing details, fraud signals, device information, and transaction records under its own privacy terms and legal obligations. We receive payment status, a session or customer identifier, and checkout contact information needed to deliver PRO access and handle support.

5. Cookies, advertising, and technical logs

Display Lab uses necessary browser storage for preferences and user-requested features. Optional Vercel Analytics is loaded only when Analytics consent is granted. Marketing consent is reserved for possible future advertising such as Google AdSense and is disabled by default. You can accept, reject, or customize these categories and later reopen Cookie Choices from the footer. Read the Cookie Policy for the categories, purposes, duration, third parties, and browser controls.

Hosting and security providers may generate limited technical logs such as IP address, request time, browser type, requested route, response status, and error diagnostics. Such logs are used for security, reliability, abuse prevention, and troubleshooting rather than to build a private image profile.

6. Legal bases and retention

Under GDPR, processing may rely on performance of a contract when delivering purchased PRO access, legitimate interests when securing and improving the service, consent where specifically requested, and legal obligations for financial or compliance records. PRO entitlement records are retained while needed to provide the contracted access period, support cross-device restoration, and resolve disputes. Support correspondence is kept only as long as reasonably useful. Images and generated previews are not retained by Display Lab. Technical logs are retained according to hosting-provider and security needs.

7. Sharing and international processing

Information may be processed by infrastructure providers required to operate the service, including hosting, Turso database, and Stripe payment services. We do not sell personal data. Providers receive only the information needed for their role and may process data in other countries using their published safeguards. Information may also be disclosed when legally required, to protect users and the service, or during a legitimate business reorganization subject to appropriate protections.

8. Your rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection regarding your personal data. You may withdraw consent where consent is the legal basis and complain to your local data-protection authority. To request deletion, email traian_an@yahoo.com from the checkout address and describe the relevant record. We may request reasonable verification before exposing or deleting entitlement information. Deleting the only PRO record can make future restoration impossible, so we will explain that consequence before completing the request.

9. Security, children, and changes

We use reasonable technical and organizational measures, including restricted service credentials and encrypted network connections, but no internet service can guarantee absolute security. Display Lab is not directed to children under 16, and we do not knowingly create profiles for children. We may update this policy when features, providers, or laws change. Material changes will be reflected by a revised date and, where appropriate, an in-product notice.