Last updated: July 20, 2026
Draft for legal review. Not yet final — see the note on Section 4 below.
This Privacy Notice for Johann Mager, doing business as AutoCrop ("we," "us," "our"), describes how and why we access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at support@autocrop.app.
What personal information do we process? Depending on how you interact with us, this may include contact details you provide and technical information collected automatically. See Section 1.
Do we process sensitive personal information? No.
Do we collect information from third parties? No.
Do we use your photos or Lightroom catalog? No. AutoCrop's border detection runs entirely on your own computer; no photo, preview, or catalog data is ever sent to us or to any third party.
How do we keep your information safe? We use reasonable technical and organizational measures, but no method of transmission or storage is 100 % secure. See Section 8.
What are your rights? Depending on where you live, you may have rights to access, correct, delete, or port your personal information. See Section 10.
Personal information you disclose to us. We collect personal information that you voluntarily provide, such as when you contact us, express interest in AutoCrop, or make a purchase.
Payment data. If you purchase a license, payment data (such as your payment instrument number and security code) is collected, handled, and stored by our payment processor and merchant of record, Lemon Squeezy — we do not receive or store your full payment details ourselves. See Lemon Squeezy's privacy policy.
Information automatically collected. When you visit autocrop.app, our hosting provider automatically processes certain technical information — such as IP address, browser and device characteristics, operating system, referring URLs, and timestamps — in server logs, for security and to operate the Services. This does not directly identify you. The website itself does not set cookies or use analytics or advertising scripts.
Plugin usage. The AutoCrop plugin writes a log file locally on your own computer (AutoCropLog.txt) for troubleshooting. This file stays on your machine; we only see it if you voluntarily attach it to a support email. License activation sends your license key (and, if you provide it, your email address) to Lemon Squeezy's license API to verify your purchase — no photos, filenames, or catalog data are transmitted.
We process personal information to provide and improve the Services, to respond to your inquiries, to fulfill and manage license purchases, to protect the Services against fraud and abuse, and to comply with legal obligations. We only process your information when we have a valid legal reason to do so, and for any other purpose only with your explicit consent.
If you are located in the EU or UK, we rely on the following legal bases under the GDPR / UK GDPR:
Consent — where you have given us permission for a specific purpose; you can withdraw consent at any time (Section 10).
Performance of a contract — to fulfill our obligations to you, including providing a license and support.
Legitimate interests — for example to keep the Services secure, diagnose problems, and prevent fraud, where these interests do not override your rights.
Legal obligations — such as retaining invoices for tax purposes.
We share information with the following categories of service providers, each acting under their own privacy policy:
Planned: we intend to add Google Analytics at a later stage for more detailed usage insights. Google Analytics uses cookies and transfers data to Google in the United States. It will only be activated together with a cookie consent banner that lets you accept or decline before any such cookies are set, and this notice will be updated first. It is not active today.
We may also share information in connection with a merger, acquisition, or sale of business assets.
The website does not currently set advertising or analytics cookies. We use Cloudflare Web Analytics, which is cookieless and does not store any tracking identifier on your device. Cloudflare, our hosting provider, may also use strictly necessary technical measures to operate and secure the Services. If we activate Google Analytics in the future (see Section 4), this will use cookies and will only happen after you have been asked for consent via a cookie banner; this notice will be updated first.
Our website is served via Cloudflare's global network. Our payment processor (Lemon Squeezy) and email provider (Zoho) may process data outside the country you are in, including potentially outside the EU/EEA. Where this involves the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Details can be provided on request.
We keep personal information only as long as necessary for the purposes described in this notice, or as required by law (for example, statutory retention periods for invoices). When there is no ongoing need, we delete or anonymize the information.
We use reasonable technical and organizational measures designed to protect personal information. However, no transmission over the internet or electronic storage is 100 % secure, and we cannot guarantee absolute security.
We do not knowingly collect data from or market to children under 18 (or the equivalent age in your jurisdiction). If we learn that we have collected personal information from a child without appropriate consent, we will delete it. Contact support@autocrop.app if you believe this has occurred.
If you are in the EEA, UK, or Switzerland, you have the right to request access to, correction of, deletion of, or a copy of your personal information; to restrict or object to certain processing; and to data portability. You can exercise these rights, or withdraw consent where we rely on it, at any time by emailing support@autocrop.app. We will respond in accordance with applicable data protection law.
If you are in the UK and unhappy with how we handle a complaint, you may contact the Information Commissioner's Office (ico.org.uk). If you are in the EEA, you may contact your local supervisory authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Most browsers include a Do-Not-Track ("DNT") signal. As there is no uniform standard for interpreting DNT signals yet, we do not currently respond to them — this is moot in any case, since the website does not use tracking technologies.
If you are a resident of a US state with a comprehensive privacy law (e.g. California, Colorado, Connecticut, Virginia, and others), you may have rights to know, access, correct, delete, or obtain a copy of your personal information, and to opt out of the sale or sharing of personal information or targeted advertising. We do not sell personal information. The categories of personal information we have collected in the past twelve months are:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details such as name, postal address, phone number, online identifier, IP address, email address, account name | Yes |
| B. Personal information (California Customer Records categories) | Name, contact information, financial information | Yes |
| C. Protected classification characteristics | Gender, age, race, national origin, etc. | No |
| D. Commercial information | Transaction information, purchase history, payment information | Yes |
| E. Biometric information | Fingerprints, voiceprints | No |
| F. Internet or network activity | Browsing/usage behavior on our Services | Yes |
| G. Geolocation data | Coarse device location (e.g. country, from IP address) | Yes |
| H. Audio/visual information | Images, audio, video, or call recordings | No |
| I. Professional/employment information | Business contact details, job title | No |
| J. Education information | Student records | No |
| K. Inferences | Profiles or summaries drawn from collected data | No |
| L. Sensitive personal information | — | No |
To exercise these rights, email support@autocrop.app. You may designate an authorized agent to act on your behalf where permitted by law. If we decline a request, you may appeal by emailing us, and if your appeal is denied, you may contact your state attorney general.
California "Shine the Light." California residents may request, once a year and free of charge, information about any personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year. We do not currently engage in such disclosure.
Australia and New Zealand. We process personal information consistent with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You may request access to or correction of your information via support@autocrop.app. Complaints can be directed to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner respectively.
Republic of South Africa. You may request access to or correction of your information via support@autocrop.app. Complaints can be directed to the Information Regulator (South Africa), enquiries@inforegulator.org.za.
We may update this Privacy Notice from time to time; the "Last updated" date above will reflect the latest revision. Material changes will be highlighted on the Services.
Johann Mager
AutoCrop
business address to be published before launch
Germany
Email: support@autocrop.app
You have the right to request access to the personal information we hold about you, ask how it has been processed, request correction of inaccuracies, or request deletion, subject to legal limitations. To make such a request, email support@autocrop.app.