Lidhaze
DE EN
Free trial

// Privacy

Privacy Policy

In short: no advertising or tracking cookies, no third-party services on the website, no stored IP addresses in our statistics and no telemetry in the app.

1. Controller

KInnovativ, sole proprietorship in formation
Thomas Nenad Leibel
Bar, Montenegro
Email: kontakt@lidhaze.com

We are not required to appoint a data protection officer. For all privacy questions, simply write to the address above.

2. Overview

  • No advertising or tracking cookies, no fingerprinting, no profiling.
  • No third-party services on the website: no Google Fonts (fonts are served from our own server), no CDN, no social media plugins, no embedded videos, no external analytics.
  • Our visitor statistics run on our own server and store no IP addresses.
  • Our newsletter is only sent after you confirm your sign-up (double opt-in). Our emails contain no tracking pixels and no tracked links.
  • The Lidhaze app sends no telemetry. It only contacts Lemon Squeezy to check a licence.

3. Hosting, server log files and email sending

This website is hosted by ALL-INKL.COM – Neue Medien Münnich (owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany). The servers are located in Germany (data centre in Dresden). We have concluded a data processing agreement with the host (Art. 28 GDPR).

Whenever you visit the website, the web server automatically records technically necessary information in log files: IP address, date and time, requested page or file, status code, amount of data transferred, referring website and browser/operating system (user agent). This is necessary to deliver the website and to keep it stable and secure.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, error-free operation). The log files are deleted automatically by the host after a short period; we only look at them in case of a malfunction or attack.

All emails from this website (newsletter, confirmation and thank-you emails, see sections 8 and 9) are sent via the mail server of ALL-INKL.COM. We do not use an external newsletter service. For each email we keep a log entry for 395 days containing only a masked address (e.g. “t***s@e***.com”), a hash of the address, the subject, the type and whether sending succeeded. Emails waiting to be sent are deleted 30 days after sending.

4. Our own visitor statistics (without cookies)

To understand which pages are useful and whether our campaigns work, we count page views with our own software on our own server. For each page view we store:

  • the page (path without parameters), date and time,
  • the referring website (domain name only) and campaign parameters (utm_source, utm_medium, utm_campaign, utm_content) if present in the link,
  • the device type (desktop, mobile or tablet – derived from the user agent, which itself is not stored) and the website language,
  • a daily visitor code: a cryptographic hash (HMAC-SHA256) of your IP address and user agent, calculated with a random key that is replaced every day and then discarded. The IP address itself is never stored (IPv6 addresses are also shortened before hashing). Codes from different days cannot be linked, and the code cannot be traced back to the IP address,
  • a visit ID that groups page views within 30 minutes.

We also count clicks on “Download”, “Buy” and the result of the compatibility check (“compatible” / “not compatible”) – without the model identifier you entered, which is only evaluated in your browser.

Not counted: bots, the operator himself, prefetch requests and error pages. Nothing is shared with third parties.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in anonymous-style reach measurement and improving the offer). Retention: raw data is deleted automatically after 395 days (about 13 months). Protection counters against abuse are deleted after 2 hours, failed admin login attempts (stored only as a hash, never as an IP address) after 1 day. For backups see section 13.

As we cannot assign the daily code to a person, we generally cannot identify you in this data (Art. 11 GDPR). You can object at any time (Art. 21 GDPR).

Short links and redirects. When you open one of our short links (e.g. from a campaign) or an old address that we redirect, we only store which link was opened and when (and, for an A/B test, which variant) – without IP address, without device data and without a visitor code. Purpose: measuring the effect of campaigns. Legal basis: Art. 6 (1) (f) GDPR. These entries are deleted after 395 days (about 13 months).

Partner links (affiliate programme). Partners who recommend Lidhaze receive a link of the form https://lidhaze.com/?ref=CODE. If you arrive via such a link and the code belongs to an active partner, we set the cookie lh_ref (section 6) containing only the partner code, for 30 days (a newer partner link replaces it). When you click “Buy”, the partner code is passed to Lemon Squeezy as part of the checkout link and returned to us with the order, so that we can credit the partner with a commission. The partner does not receive any data about you from us – only the operator sees which orders (order number, amount) belong to which partner. We also count the click: partner code, time, landing page and the daily visitor code described in section 4 (no IP address, at most one click per visitor, code and day). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in fair commission settlement with partners). The click entries are deleted after 395 days.

Together with the checkout link we also pass the language of the website (de or en), so that our emails reach you in the right language.

6. Cookies and browser storage

Visitors only receive the following cookies and storage entries, and only in the situations described. They contain no personal profile and are not used to track you across websites:

lang
Stores the website language you chose (de or en). Only set when you switch the language. Lifetime: 1 year. Strictly necessary for the function you requested (§ 25 (2) no. 2 TDDDG).
ab_<name>
Only set if you open one of our campaign short links for which we are testing two target pages (A/B test). Stores “a” or “b” so you always see the same variant. Lifetime: 180 days. Contains no identifier.
lh_ref
Only set if you arrive via a link of one of our partners (…?ref=CODE) and the partner code is valid. Contains only the partner code, no identifier of you. Lifetime: 30 days. Purpose: attributing a purchase to the recommending partner (commission), see section 5.
lh_admin, lh_adm
Only for the site operator in the admin area (session and a marker so that his own visits are not counted; lifetime at most 30 days). Not set for visitors.
lhp_<number>_<version>
Not a cookie but an entry in your browser storage (localStorage or sessionStorage), only if we show a notice (pop-up) on a page. Stores “1” so the same notice is not shown to you again (localStorage: until you delete your website data; sessionStorage: until you close the tab). Never sent to our server; no tracking across websites.

You can delete cookies and website data in your browser at any time. The website works without them (default language is then determined by your browser settings; a notice may then appear again).

7. Contact by email

If you write to us, we process your email address, name (if given) and the content of your message to answer your request. Legal basis: Art. 6 (1) (b) GDPR (contract or pre-contractual enquiry) or Art. 6 (1) (f) GDPR (general enquiries). Our mailbox is also hosted by ALL-INKL.COM. We delete emails once they are no longer needed, unless statutory retention obligations apply (e.g. commercial or tax law).

8. Newsletter

With our newsletter we send news, tips and offers about Lidhaze – including, a few days after your sign-up, a single reminder before the end of the 7-day trial (not if you have already bought a licence). You can sign up with the form at the bottom of every page.

Double opt-in. After you sign up we send you an email with a confirmation link (valid for 7 days, usable once). Only after you confirm on our website do you receive the newsletter. Sign-ups that are not confirmed are deleted automatically after 30 days.

What we store: your email address, the language of the page, where you signed up (e.g. “footer”), the time of your sign-up (= consent) and of your confirmation, and – if you unsubscribe – the time of unsubscribing. We do not store an IP address or a name. To prevent misuse, sign-ups are limited per visitor with the daily visitor code (section 4) and per address with a hash of the address; these counters are deleted after at most 1 day.

Legal basis: your consent, Art. 6 (1) (a) GDPR and § 7 (2) no. 2 UWG. Recording the sign-up and confirmation serves to prove your consent (Art. 7 (1) GDPR; Art. 6 (1) (c) and (f) GDPR).

Unsubscribing / withdrawing consent: at any time with effect for the future (Art. 7 (3) GDPR) via the link at the end of every newsletter, via the unsubscribe function of your email program, or by an informal email to us. Pending newsletter emails to you are deleted immediately. We keep the unsubscribed entry (address, times of sign-up, confirmation and unsubscribing) for 3 years after unsubscribing as proof of consent and withdrawal; after that it is deleted automatically. On request we delete it earlier.

The newsletter contains no tracking pixels and no tracked links; we do not measure opens or clicks. Sending is done via ALL-INKL.COM (section 3).

9. Automatic emails after purchase

Thank-you email. After a purchase via Lemon Squeezy we send you one email with tips for activating the licence and a link to the user guide, using the email address and first name from your order. It is not advertising and contains no newsletter. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in helping buyers get started with the licence they bought; the contract itself is concluded with Lemon Squeezy, see section 10). You can object at any time by an email to us.

Purchase reminder. The reminder before the end of the trial is only sent to confirmed newsletter subscribers who have consented (section 8) – never on the basis of a purchase or of the licence check.

10. Purchase via Lemon Squeezy

Lidhaze licences are sold by Link, LLC (formerly Lemon Squeezy, LLC), 222 Main Street, Suite 500, Salt Lake City, UT 84101, USA, as Merchant of Record (reseller). When you click “Buy”, you are taken to the Lemon Squeezy checkout. There, Lemon Squeezy processes your data (e.g. name, email, billing address, payment data, country, IP address) as an independent controller, in order to conclude the contract, collect payment, calculate VAT and issue the invoice and licence key. Details: Lemon Squeezy privacy policy.

What we receive. We do not receive your payment data or billing address. After each order (and after a refund) Lemon Squeezy notifies our server automatically (webhook); where needed we retrieve missing details via the Lemon Squeezy interface. We store: email address, name, country, the Lemon Squeezy customer ID, order number and date, product, amounts (total, VAT, discount, refund), status, discount code, partner code (section 5), the link to your Lemon Squeezy receipt and the last 4 characters of the licence key (never the full key). A technical copy of the notification is stored without email address, name, address or receipt link.

Purposes: support and help with the licence, handling refunds, checking our payouts and bookkeeping, commission settlement with partners and the thank-you email (section 9). We never use purchase data for advertising; buying does not sign you up for the newsletter. Legal basis: Art. 6 (1) (f) GDPR; where statutory retention obligations apply, Art. 6 (1) (c) GDPR.

Retention and deletion: we keep these data as long as they are needed for support, licence help and refunds. On request (email is sufficient) we delete them: email address, name, customer ID, receipt link and the technical copy are removed and replaced by a placeholder; only amount, date, status, country, discount and partner code remain without reference to you, as far as we need them for bookkeeping. Later notifications from Lemon Squeezy about the same order do not restore the deleted data. The data held by Lemon Squeezy itself must be deleted there; we are happy to help. For backups see section 13.

Lemon Squeezy is based in the USA. The transfer is necessary for the purchase you requested (Art. 49 (1) (b) GDPR) and is additionally secured by the safeguards used by Lemon Squeezy (EU standard contractual clauses or the EU-U.S. Data Privacy Framework, as applicable).

11. Download

The app (DMG file) is downloaded directly from our web server. Only the server log files described in section 3 are created, and the click is counted in our statistics (section 4).

12. The Lidhaze app

No telemetry. The app sends no usage data, crash reports or analytics to us or anyone else.

Trial. The 7-day trial works without an account and without an internet connection. The start date is stored locally on your Mac.

Licence check. When you activate a licence key, the app connects to api.lemonsqueezy.com (Lemon Squeezy, USA) and transmits the licence key and an instance name – this is the name of your Mac as set in macOS (e.g. “Anna’s MacBook Pro”); it may contain your first name. You can change it under System Settings → General → Sharing. Lemon Squeezy returns an instance ID and the email address used for the purchase. The app checks the licence again at most every 7 days and when you deactivate it on a Mac; the licence key and instance ID are transmitted. Technically, your IP address reaches Lemon Squeezy’s servers. Purpose: licence validation and the limit of 2 Macs. Legal basis: Art. 6 (1) (b) GDPR.

Tester keys (starting with “LH1-”) are checked entirely offline with a digital signature; no connection is made.

Stored locally on your Mac only (we have no access):

  • ~/Library/Application Support/Lidhaze/license.dat – trial start, licence key, instance ID, purchase email, date of the last check,
  • the app settings in the macOS preferences (app.lidhaze),
  • ~/Library/Logs/Lidhaze.log – a short technical log (lid angle, sensor status, model identifier) for troubleshooting, restarted at 512 KB. It only reaches us if you send it to us yourself.

The menu item “Lizenz kaufen…” (buy licence) simply opens our website in your browser.

Uninstalling: delete the app, the folder ~/Library/Application Support/Lidhaze and the settings (Terminal: defaults delete app.lidhaze). Please deactivate the licence in the app first.

13. Backups

To protect against data loss, our database is backed up automatically once a day and additionally by hand when needed. Backups contain the complete database (e.g. statistics, newsletter subscribers, order and customer data from section 10) and are stored only on our server at ALL-INKL.COM, outside the publicly accessible area; they are not passed on. We keep the latest 20 backups (the number can be adjusted by the operator); older backups are deleted automatically, so with daily backups data remains in backups for about 20 days. Data we have deleted remains in older backups until they are deleted; if a backup has to be restored, we repeat deletions carried out in the meantime. Legal basis: Art. 6 (1) (f) GDPR and Art. 32 GDPR (data security).

14. Recipients

ALL-INKL.COM (hosting, email and email sending, as processor) and Lemon Squeezy (as an independent controller for the purchase and licence check). Partners in our affiliate programme receive no personal data from us. We do not sell data and do not pass it on for advertising purposes.

15. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You can withdraw consent (e.g. for the newsletter) at any time with effect for the future (Art. 7 (3) GDPR). An informal email to kontakt@lidhaze.com is sufficient.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You can contact any authority, for example the one where you live.

16. Other information

You are not obliged to provide personal data. Without the technically necessary data the website cannot be delivered; without a licence check the app runs in trial mode only; without an email address we cannot send you the newsletter. There is no automated decision-making including profiling (Art. 22 GDPR).

We will update this privacy policy whenever the processing changes. The version published here applies. The German version is authoritative; this English version is a courtesy translation.

Last updated: September 2026