DWG NO. L-400 · PRIVACY · led.fyi v2

Privacy Policy

Effective date: July 10, 2026
Last updated: July 10, 2026

Introduction

Welcome to led.fyi. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and desktop applications. We value your privacy and are committed to protecting your personal data.

Who we are. The Service is operated by Blinking Things LLC (“led.fyi,” “we,” “us”), 2108 N St, Ste N, Sacramento, CA 94816, USA, which is the data controller responsible for the personal information described here. You can reach us about privacy at support@led.fyi.

Data collection

1. Email addresses

We store your email address in a secure database for account management and communication purposes.

2. Passwords

We do not directly store your passwords. User authentication is managed through Supabase, which uses industry-standard encryption. We strongly encourage users to choose strong, secure passwords to protect their accounts.

3. Project files

Users may create and store project files on our platform. These files may contain information related to LED screen configurations for events, installations, or productions. Project data is stored securely and is accessible only to the account owner.

4. Equipment library

Users may create and store custom LED panel profiles on our platform. These profiles may be associated with your account. We may use anonymized, aggregated equipment data to improve our panel database for all users.

5. Local storage

Our application uses local storage in your browser and on desktop applications as part of its core functionality. This allows your projects and preferences to persist across sessions.

6. Payment information

We use Stripe to process payments. We do not store credit card numbers or sensitive payment details on our servers. Stripe handles all payment information in compliance with PCI-DSS standards.

Use of data

We may use the collected data for the following purposes:

  • To provide and maintain our service
  • To notify you about changes to our service
  • To provide customer support
  • To improve our services and user experience
  • To process payments and manage subscriptions

Your data is stored on secured cloud servers and accessed exclusively by authorized personnel.

Your privacy rights

We honor the privacy rights given to you by the laws that apply to you, including the EU and UK General Data Protection Regulation (GDPR) and US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA). Subject to those laws, you have the right to:

  • Access — get a copy of the personal data we hold about you
  • Rectify — correct inaccurate or incomplete data
  • Delete — ask us to erase your account and personal data
  • Port — receive your data in a portable, machine-readable format and reuse it elsewhere
  • Restrict or object — limit or object to certain processing
  • Withdraw consent — for processing that relies on your consent
  • Non-discrimination — we will not penalize you for exercising a right

How to exercise these rights. Most are available directly in the app: “Download my data” in your account settings exports a full copy of your account (profile, projects, custom equipment, shares, and migration history), and “Delete account” schedules deletion. Account deletion runs on a 7-day grace period during which you can cancel; after it finalizes, we delete your account and associated personal data, including analytics data held by PostHog. You can also contact us at support@led.fyi and we will respond within the time required by law.

On the web, you can withdraw your analytics-cookie consent at any time, as described in the “Cookies, analytics, and session recording” section below. We do not sell or share your personal information for cross-context behavioral advertising.

Legal bases (GDPR). Where the GDPR applies, we process personal data to perform our contract with you (providing the Service), to comply with legal obligations, with your consent (e.g., analytics cookies), and for our legitimate interests in operating, securing, and improving the Service. If you are in the EU/UK and believe we have mishandled your data, you may lodge a complaint with your local supervisory authority, though we ask that you contact us first so we can help.

Security measures

We take the security of your data seriously and use industry-standard encryption and security practices to protect it from unauthorized access. Access to user data is restricted to authorized personnel only. In the unlikely event of a data breach, we will follow established protocols and notify affected users as required by law.

Children’s privacy

led.fyi is a professional design tool intended for adults. The Service is not directed to children, and you must be at least 18 (or the age of majority where you live) to use it, as stated in our Terms of Service. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us at support@led.fyi and we will delete it.

Cookies, analytics, and session recording

We use cookies, browser local storage, and similar technologies. We group them into two categories:

Essential (always active)

These are required for the application to function and cannot be turned off.

  • Authentication — Supabase stores a secure session token so you stay signed in.
  • Local storage — saves your projects, preferences, and your cookie choice on your device.
  • Payments — Stripe uses cookies for payment processing and fraud prevention during checkout.

Analytics and product improvement (consent required on the web)

On the web, these are disabled by default and are only activated after you accept them in our cookie banner. You may decline, and the application will continue to work normally. In our desktop application, your acceptance of our Terms of Service during setup serves as your consent.

  • PostHog — product analytics (and, where enabled, session replay), hosted in the European Union. This is the analytics provider we currently use.
  • Microsoft Clarity — session replay and heatmaps used to diagnose usability issues. We may enable this in the future.
  • Vercel Analytics — aggregate traffic and web-performance metrics. We may enable this in the future.

What analytics may collect: pages visited and actions taken; approximate location (country, derived from your IP address); device and browser information; and configuration data from your projects — such as the equipment models, screen dimensions, and export formats you use. We use this information to understand how the product is used and to improve and market it.

Session replay: where session replay is enabled, PostHog (and, if we enable it, Microsoft Clarity) may record your interactions with the interface — such as clicks, navigation, and on-screen changes, including the design canvas — to help us reproduce issues and improve usability. Text inputs and other sensitive fields are masked by default and are not captured.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

International transfers and retention: PostHog data is stored in the European Union. Some other providers may process data in the United States under appropriate safeguards. Analytics data is retained only as long as needed for the purposes above, and is deleted when you delete your account.

Managing your choice: on the web you can withdraw your consent at any time by clearing this site’s data in your browser, which will cause the cookie banner to appear again, or by contacting us at support@led.fyi. Most browsers also let you block or delete cookies in their settings.

AI features

Some features (where available) use artificial intelligence — for example, describing a screen in plain language and having the app build it for you. When you use such a feature, the text you provide is sent to our AI provider (Anthropic) to generate a result. We do not use your inputs to train third-party AI models, and AI features are optional — the rest of the Service works without them.

Third-party services

We share data with the following third-party providers, who act as our processors / service providers and handle it under their own privacy terms and our agreements with them. Several are active only when you use the related feature or when our cloud features are configured; when cloud features are not configured, the app runs fully offline on your device.

  • Supabase — authentication, database, file storage, and serverless functions; stores your account and cloud project data
  • Stripe — payment processing and subscription billing
  • Vercel — hosting for the web app and marketing site (processes request and IP data to serve pages)
  • PostHog — product analytics and, where enabled, session replay (EU-hosted)
  • Google — “Sign in with Google” when you choose it, web fonts on our marketing site, and a connectivity check in the desktop app
  • Apple — “Sign in with Apple” when you choose it
  • Anthropic — powers optional AI features (where available); receives the text you submit to those features
  • Cloudflare — delivers desktop application downloads and updates
  • Email delivery provider — sends account and transactional emails such as verification and password-reset messages
  • Microsoft Clarity — session replay and heatmaps (we may enable in the future)

International data transfers and retention

We and our providers may process your data in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for international transfers. We keep personal data only as long as needed to provide the Service and for legitimate or legal reasons, and we delete it when you delete your account, subject to limited retention required by law (for example, billing records).

Changes to this policy

We reserve the right to make changes to this Privacy Policy at any time. Any changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically.

Contact information

If you have any questions about this Privacy Policy, please contact us at support@led.fyi.

By using led.fyi, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use our application.