Privacy policy

Last updated: 10 October 2026

This policy explains what data FlashRAW and this website use. The controller is Elisson Andrade de Carvalho (CNPJ 21.867.930/0001-17), Brazil — [email protected].

Your photos never leave your computer

FlashRAW reads and analyzes your photos locally, including the focus and eye checks. It never uploads photos, previews, file names or folder paths.

What the app sends

• Trial check. The first time the trial runs, the app sends an anonymous code for your computer — a one-way hash (SHA-256) of the operating system's machine ID — and which version of FlashRAW it runs (Mac with Apple chip, Mac with Intel chip or Windows). Our server stores that code with the trial's end date, so reinstalling doesn't restart the trial. It can't be turned back into the machine ID and contains nothing about you.
• Error reports — only if you allow them. The first time you open FlashRAW it asks whether it may send error reports. If you say yes, it sends, with a random ID created for the installation: that the app was opened (once a day), error messages with any file paths and file names removed, whether the previous session closed unexpectedly and why (the kind of error, the names of the program's own functions that were running, how long it had been open, its peak memory, the computer's total memory and which screen was in use), when the window freezes for 8 seconds or more (for how long and the same function names), and, when a folder's thumbnails fail or do not appear, a summary of that folder: how many photos, which camera models and file types, how many thumbnails were requested, ready and failed and why, whether the listing had finished, which screen was in use, the disk's file system type and free space — each with the app version, the operating system and the processor type. No photos, file names, folder paths, email or license. You can turn this off in Ajuda › Enviar relatórios de erro (Help menu) at any time.
• Messages you send us. When you write through Ajuda › Enviar sugestão ou relatar problema… in the app or the support page, we receive your text, the email address if you give one, and, from the app, its version, the operating system and (only if you leave the box ticked, after seeing it) the diagnostics shown in that window: recent error messages and the last folder summary, without photos, file names or folder paths. We use them only to answer you and fix FlashRAW.
• Update check. Once a day, and when you choose Ajuda › Verificar atualizações… (Help menu), the app asks GitHub (github.com), where the installers are published, for the number of the latest version. Nothing about you or your photos is sent; like any website, GitHub sees your IP address.
• License activation. When you activate a license key, and then whenever FlashRAW starts with internet access, the app sends the key (which contains your email), the same anonymous computer code used for the trial, which version of FlashRAW it runs, and the computer's name (as set in the operating system), so you can tell your computers apart when you replace one. Our server stores, for each license email, the computers activated and the day each was last used.

When you buy

Payments are processed by Paddle.com, our reseller and Merchant of Record, which collects your name, email, billing address and payment details under Paddle's privacy policy. Paddle tells us your email so we can send your license key. We send that email through Resend (resend.com) and keep a record of the key sent for each purchase.

Where data is stored

The trial codes, activations, purchase records and error reports are stored on Cloudflare (cloudflare.com). Trial codes are kept for as long as the trial could be restarted; activations while the license is in use; purchase records for as long as the law requires; error reports and messages for up to 12 months.

This website

The site uses Google Analytics (Google LLC) to count visits and see which pages people read: it records pages viewed, the referring site, an approximate location from your IP address, and your device and browser type. Outside Europe it sets an analytics cookie; for visitors in the European Economic Area, the United Kingdom and Switzerland it sets no cookie and only sends anonymous signals. It uses no advertising cookies and we do not use this data for ads. See Google's privacy policy. It also uses Microsoft Clarity (Microsoft Corporation) to see, without personal data, how pages are used: clicks, scrolling and anonymous recordings of the visit, with any text typed into forms masked. Clarity follows the same cookie rules as Google Analytics above. See Microsoft's privacy statement. The pricing section loads Paddle's script to show prices in your currency and to open checkout. If you arrive through a partner's link (an address ending in ?ref=), your browser keeps that partner's code for 60 days and sends it with a purchase, so the partner is credited; nothing else about you is stored with it.

Your rights

Under the LGPD (Brazil), the GDPR (Europe) and similar laws, you can ask for access to, correction of, or deletion of your data, and withdraw consent to error reports at any time. Write to [email protected].