Privacy Policy
This notice describes the Lens Flare Add-ons website, its aggregate page and file counters, and its optional YouTube presentations.
1. Who is responsible for your data?
The controller of personal data processed through www.blenderlensflare.com is Beniamino Della Torre, operating as Lens Flare Add-ons, Via Torino 36, 12045 Fossano (CN), Italy. Email: info [at] blenderlensflare [dot] com.
2. What this notice covers
This website presents the Flared2 and Glared2 Blender add-ons, offers downloadable examples and documentation, and includes a short development note about CineGlass. It also preserves earlier tutorials, preset previews and customer comments previously published on the website. It has no public user accounts, checkout, newsletter subscription, contact form, visitor profiling or advertising pixels. We measure use through the aggregate counters described below. Fonts are supplied by your device; we do not load Google Fonts. Images, video covers, sample files and our own videos are served from our hosting.
Purchases and store messages take place on Superhive or Gumroad. Their own privacy notices govern their platforms. Any subsequent handling by us of customer orders, support or promotional communications must be covered by the relevant customer information; the absence of a checkout here does not mean we never receive customer data from a store.
3. Data, purposes and legal bases
Delivering and protecting the website
Your browser sends technical information needed to request pages and files, including your IP address, requested resource, time of request and browser information. Hosting systems may record access and error logs. This applies to downloads and locally hosted media as well as pages. We use necessary technical data to deliver content, diagnose faults and protect the website against misuse, based on our legitimate interests in operating a reliable and secure website (GDPR Article 6(1)(f)). Technical connection data is necessary to serve the requested content. We do not use it to build marketing profiles.
Aggregate page and file counters
We measure which resources are useful using counters hosted on our own Aruba space. When a public page becomes visible with JavaScript enabled, a small first-party request sends only a fixed page identifier. It sends no referrer, page query string, fragment, cookies or visitor identifier. We store only the page identifier, calendar day and total. File links pass through a local counter before opening the original file; we store only the file identifier, calendar month and total. Totals use the Europe/Rome time zone.
The counter does not save IP addresses, browser details, exact event times or records of individual activity. It does not create or read cookies, localStorage, fingerprints or identifiers for measurement, and does not link activity across pages or downloads. There is no external analytics provider. As with any web request, the hosting infrastructure receives technical connection information; its normal logging remains separate from these aggregate counters. Any technical personal data needed to operate and secure these requests is processed for our legitimate interests in providing and evaluating the website (Article 6(1)(f)); the stored totals do not identify visitors.
A count represents a page view or a request through a counted file link, not a unique person or a completed download. Repeated requests and automated traffic can affect totals; JavaScript or network blocking may prevent page counts. Direct links to the files in /uploads/ bypass the file counter. YouTube consent has no effect on these non-identifying counters.
Private statistics administration
Only the website owner can sign in to the statistics panel. A strictly necessary first-party session cookie is used for that private login, with a 45-minute inactivity limit. It is not created for ordinary visitors or used by the counters. Access credentials and session data are used solely to protect administration, based on our legitimate interest in website security (Article 6(1)(f)).
Optional YouTube presentations
YouTube loads only with valid permission and a request to play a presentation. You can allow YouTube first and then press Play. If you press Play while it is blocked, the central privacy panel opens; choosing “Allow YouTube” there starts the presentation you requested. Your permission applies to the two YouTube presentation players. Rejecting or closing the first notice leaves them blocked. Our legal basis for activating this optional integration is your consent (Article 6(1)(a)). Refusing has no effect on access to the other website content or downloads.
Once activated, Google receives technical and interaction information, such as your IP address, browser information, our website origin and video interactions. Cookies or similar storage may be used. Our player uses youtube-nocookie.com. Privacy-enhanced mode limits personalization; it does not mean that Google receives no data. See the Cookie Policy and Google Privacy Policy.
Privacy, attribution and other enquiries
If you email us, we receive your email address, message and any details you provide. We use these to respond and handle your request, including attribution and copyright concerns raised through the credits contact. For statutory data-protection requests, the basis is compliance with our legal obligations (Article 6(1)(c)); for ordinary support enquiries, taking steps requested by you or providing contractual support where applicable (Article 6(1)(b)); otherwise, our legitimate interest in responding to correspondence (Article 6(1)(f)). Please send only the information needed for your request. The “Show email address” button reveals the contact locally in your browser; clicking it does not send information or save a preference. A readable alternative is available if JavaScript is unavailable.
4. Who receives data?
Our website and contact mailbox use Aruba S.p.A. — Hosting Basic Linux, Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy. Its published Hosting and Domains terms distinguish processing on the customer’s behalf (Article 23, processor appointment) from its own processing (Article 22). These roles apply to particular operations; they do not mean that every hosting log belongs to the same category. The mailbox is hosted by Aruba and read only by Beniamino Della Torre on his local Mac. Messages are not forwarded to another provider or shared with other readers. There is no additional cloud synchronisation or archive, and the controller does not create local or cloud backups of correspondence. These statements describe the controller’s arrangements, not the absence of technical copies operated by the hosting provider. Competent authorities or professional advisers may receive information where required by law or necessary to establish or defend legal claims.
YouTube is a Google service. For users in the European Economic Area, Google identifies Google Ireland Limited as the controller for relevant services under its privacy policy. Google is responsible for its own subsequent processing. Superhive and Gumroad receive information when you visit or use their services; simply displaying an ordinary store link does not embed their services in this page.
5. International transfers
Aruba states that its hosting and email services are operated from its own data centres in Italy. See Aruba’s provider information. This statement does not describe the locations used by Google when you enable YouTube.
Enabling YouTube can involve processing outside the EEA, including in the United States. Google describes its transfer arrangements, including applicable adequacy frameworks and standard contractual clauses, in its data transfer information. You can consult that page for details and obtain information about safeguards using the contact details above. Consent to display a video is not, by itself, a substitute for required international-transfer safeguards.
The mailbox is provided by Aruba. The controller reads it locally on a Mac, without forwarding or an additional cloud service. Google’s processing, when you enable YouTube, is separate from these arrangements.
6. How long is information kept?
| Data | Retention information |
|---|---|
| YouTube privacy choice | Six calendar months from the latest choice. The first-party localStorage record contains the decision, action, decision date, expiry and notice version. Changing the choice replaces it; expired records are ignored and removed when the site is next used. Browser deletion can remove it earlier. No copy is sent to our server and no visitor identifier is created. |
| Hosting access, error and security logs | The applicable retention periods and any backup retention have not yet been established for this account. The published hosting terms do not provide one period that can safely be applied to all these records. No unverified number of days or deletion schedule is asserted here. |
| Email correspondence | Messages are used only to handle enquiries and their necessary follow-up and are deleted after 12 months. Only Beniamino Della Torre reads them. No additional local or cloud backup or forwarding archive is created by the controller. |
| YouTube / Google data | Durations depend on the item and Google’s processing. See the documented examples in our Cookie Policy and Google’s retention information. Withdrawing permission on our site does not delete data already received by Google. |
| Aggregate page and file totals | The current calendar month and the previous 23 months. Older counter files are removed when a counter is next updated. Totals contain no visitor identifiers. The owner can export aggregate CSV reports and retain those anonymous reports for longer. |
| Private administration session | Available only after the owner signs in. The authentication expires after 45 minutes of inactivity or on logout. The session cookie is a browser-session cookie; the application checks the inactivity limit on access. |
7. Your choices and rights
You may request access, correction, erasure, restriction and, where applicable, portability of your data. You may object to processing based on legitimate interests on grounds relating to your situation. Where processing depends on consent, you may withdraw it without affecting earlier lawful processing. Rights apply subject to their legal conditions.
To stop YouTube, use “Privacy choices” on any page and select “Reject optional”. This removes players on the current page and informs other open tabs on the same origin. Reloading does not revoke a saved choice. If browser storage is unavailable, the choice works only in the current page. Our Cookie Policy explains the limits of withdrawal and browser controls.
Email info [at] blenderlensflare [dot] com to exercise your rights. We normally respond within one month; where a lawful extension is needed, we will explain it within that month. You may complain to the Italian Garante or another competent supervisory authority.
8. Automated decisions and changes
We do not use website visitor data for automated decisions producing legal or similarly significant effects. This notice will be updated when our practices change; its revision date will appear above.