Privacy policy

Who is responsible for your data

Lumasmith is an independent project that develops a GPU path tracer for Cinema 4D. For the purposes of the General Data Protection Regulation (GDPR), the data controller is Lumasmith, reachable at [email protected] for any question about this policy or about your data.

What we collect

There are only two ways data reaches us:

• The build-request form. Your email address (required), your GPU model and a free-text note about what you render (both optional). Together with them we store the date and time, the country the request came from, and the browser's user agent. The last two are used only to recognise abusive submissions and to understand the context of the request.
• Technical logs. The site is served by Cloudflare, which processes connection data (IP address, requested URL, timestamp) as our hosting provider in order to deliver the page and protect it from abuse. We do not build profiles and we do not keep these logs ourselves.

There are no accounts, no newsletter, no analytics, no advertising, no tracking pixels and no profiling of any kind. We do not load third-party fonts, scripts or embeds: every resource on this site is served from lumasmith.com.

Why we process it, and on what legal basis

• To answer your request and send you a build — taking steps at your request before a possible contract (Art. 6(1)(b) GDPR), and, for the communications that follow, your consent (Art. 6(1)(a)), which you can withdraw at any time.
• To keep the service secure — legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR).

Providing your email is optional: without it we simply cannot send you a build. Nothing on this site is automated decision-making.

Who receives it

• Cloudflare, Inc. — hosting, content delivery, storage of the form submissions and email routing, under its data processing terms.
• Google Ireland Ltd. / Google LLC — the notification of your request is delivered to a Gmail mailbox, so Google processes that message on our behalf.

Both operate under standard contractual clauses for transfers outside the European Economic Area. We never sell your data, and we never share it for marketing purposes.

How long we keep it

Build requests are kept until the technical beta ends, and in any case no longer than 24 months from the last contact. Emails exchanged with us are kept as long as needed to handle the conversation. If you ask us to delete your data, we do it without undue delay, and that also applies to the copy stored for notifications.

Your rights

You can ask us at any time to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw it at any time without affecting what happened before.

Write to [email protected]: we answer within one month. If you believe we are handling your data unlawfully you can complain to the Italian supervisory authority, Garante per la protezione dei dati personali, or to the authority of your country of residence.

Cookies and local storage

This site does not set cookies of its own and does not use local storage. Cloudflare may set strictly technical cookies for security and bot mitigation (for example __cf_bm); these are necessary for the site to work and, under the ePrivacy rules, do not require consent. There is no cookie banner because there is nothing to ask you about.

Changes to this policy

If the way we handle data changes — for example when the beta becomes a commercial product with user accounts — this page will be updated and the date at the top will change. Substantial changes will be announced on the site.

This policy describes the site as it works today: a static page, one form, no accounts, no tracking. It is not legal advice and does not replace a review by a professional if you plan to sell the product in the EU.