Privacy

Leadlight Companion keeps the designs you give it so you can come back to them. We never use them to train AI, and you can export or delete everything.

Leadlight Companion stores the photos and designs you upload only to run the service and let you return to your work. We do not use your images or designs to train AI or machine-learning models, and we do not sell them. You can export everything and delete it at any time; without an account, guest designs are deleted 30 days after you last open them.

What we collect

We collect and store the following:

Designs — Images you upload (photos or scans of stained glass patterns) and the vectorized results we generate from them: the SVG, the analysis, and any overlays.Stored on our server. Kept until you delete it. Without an account, a design is kept for 30 days after you last open it, then deleted automatically. With an account, your designs are kept until you delete them. Legal basis: contract (needed to run the service). Removable when you delete your account. Shared with: DigitalOcean.
Account — Your sign-in identity is managed by Lotl Auth, our authentication service (auth.lotlsoft.com). Lotl Auth stores your email, your name if you provided one, and a hash of your password (argon2id). Sign-in issues a short-lived JWT access token (15 minutes) and a refresh token (30 days). Email verification and password resets go through transactional email (Resend).Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service). Removable when you delete your account. Shared with: Lotl Auth.
Feedback messages — Free-text feedback you send via the in-app form. Stored unredacted so we can read what you wrote.Stored on our server. Kept until you delete it. Legal basis: legitimate interests. Removable when you delete your account. Shared with: Lotl Observe.
Usage telemetry — Page views, upload/processing counts, and crash reports sent to Lotl Observe so we can see what works and what breaks.Stored on our server. Held briefly during the request and discarded. Crash and performance data are kept for 90 days; product-interaction analytics for 30 days. Legal basis: legitimate interests. Removable when you delete your account. Shared with: Lotl Observe.

Third parties

These external services receive some of your data:

DigitalOcean — server hosting

Your rights

You can export everything we hold about you, and delete your account at any time. Both options live in your account settings. Deletion is immediate and unrecoverable.

Last updated: 2026-06-04.