What we collect, and what we do not.
GPrint is built on the idea that your app, your data and your AI account are yours. This page holds the website and the app to the same standard, in plain words, and sets out everything the UK GDPR and the EU GDPR require us to tell you.
The short version. This website sets no tracking cookies and runs no analytics; the only cookie it sets remembers the language you pick. If you ask for the Mac download, we keep your email address and which kind of Mac you have, so we can send you one link. If you subscribe, we keep what we need to run your subscription: your email address, your licence key and the computers (Mac or Windows PC) you use it on. If you use a promo code, we keep your email address, your key and which code you used, and no card is asked for. Stripe takes your payment; your card details never reach us. The GPrint app sends us two things: crash reports, so we can find and fix bugs, and a licence and update check. Neither ever includes your code, your data or your keys, and you can turn crash reports off in Settings. Everything else the app talks to is your own accounts. If you press play on the GPrint Academy video, it plays from YouTube.
1. Who we are, and how to reach us
The data controller is G&G Digital Ltd, a company registered in England and Wales under number 15189068. For anything on this page, including exercising your rights, email g@greis.uk. We are a small company and are not required to appoint a Data Protection Officer; the director handles privacy questions personally.
This policy applies to the website at this address and to the GPrint app for Mac and for Windows (the Windows version is a beta). It applies to you wherever you are; if you are in the United Kingdom the UK GDPR and the Data Protection Act 2018 govern it, and if you are in the European Economic Area the EU GDPR does.
2. What we collect, why, and on what basis
When you ask for the download
We collect personal data in exactly one place: the "Download for Mac" form. Everything we hold about you comes from you, through that form, and from the connection your browser makes when it sends it. We do not buy, enrich or combine it with data from anywhere else.
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Your email address | To send you the download link once the Mac build is signed, and to answer if it does not arrive | Consent (Art. 6(1)(a)), given by ticking the box and sending the form | Until the link has gone out and for up to 12 months afterwards, then deleted |
| Which chip your Mac has | To send you the right build | Consent, as above | Same as the email address |
| A salted hash of your IP address | To stop one address flooding the form. The address itself is never stored and cannot be recovered from the hash | Legitimate interest (Art. 6(1)(f)): keeping the form free of abuse. We judged this outweighs any impact on you because the hash identifies nobody | Same as the email address |
| The country your request came from, and your browser's user agent string | To spot abuse, and to know which browsers the page must work in | Legitimate interest, as above | Same as the email address |
| The time you opened the form | A bot check: a form sent faster than a person could fill it is ignored | Legitimate interest, as above | Not stored. Checked and discarded |
Giving us your email address is voluntary. It is not required by law or by any contract. If you do not give it, the only consequence is that we cannot send you the link; you can still read everything on this site and, once released, download GPrint from its public release page.
We use your address for this one purpose. We do not add you to a newsletter, send marketing, or share or sell the list. If we ever want to use it for anything else, we will ask you first.
Withdrawing consent. You can withdraw it at any time by emailing g@greis.uk. We will delete your address within 30 days, and withdrawing does not affect anything done before you withdrew.
No automated decisions. Nothing we do with your data involves profiling or a decision made by a machine that has a legal or similar effect on you.
If you subscribe to GPrint Pro
You subscribe through Stripe's checkout page. Your card details go straight to Stripe and never reach us. From Stripe and from the app, we keep:
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Your email address, Stripe's reference for you, your licence key, and your subscription's status and dates (trial end, renewal, cancellation) | To give you a key, know whether it is active, send it again if you lose it, and handle billing questions | Contract (Art. 6(1)(b)): we need it to provide the subscription you bought | While your subscription exists. After it ends, the billing record (email, Stripe reference and dates) is kept for 6 years because UK tax law requires it; the rest is deleted |
| For each computer using your key (Mac or Windows PC): a random install ID the app makes once, the computer's name (on a Mac, as it appears in System Settings; on Windows, the PC's name), when it was first seen and last checked in | To keep a key to the number of computers the plan allows, and so you (and we, when you ask for help) can recognise which computer is which | Contract, as above | Until the computer is removed from your subscription, or 12 months after the subscription ends, whichever comes first |
| The language you used on this site | To write to you in it: your welcome email and anything we send about your key | Contract, as above | As long as your key is kept |
| The last time the app checked your key | To tell a key in use from one that is not, and to spot a key shared beyond the plan | Contract, as above | While your subscription exists |
The app sends your key, its install ID and your computer's name to gprint.ai about once a day to check the key, and your key and install ID about every four hours to ask whether a new version is ready. The request comes from your computer, so Cloudflare sees its IP address as part of serving it, in its short-lived server logs; we do not keep it in our records. These checks carry nothing about your projects.
If you use a promo code
A promo code gives a key free time without a card. You type the code and your email address on gprint.ai, or type a code in the app to add it to the key you have. We keep:
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Your email address, your licence key, and the date your free time ends | To send you the key, know whether it is active, and send it again if you lose it. The key is only ever sent to the address you typed, never shown on the page, so a key cannot be taken in someone else's name | Contract (Art. 6(1)(b)): we need it to provide the free time you asked for | While the key has free time. If you never subscribe, 12 months after the free time ends, then deleted. If you do subscribe, the subscription rows above apply |
| The language you used on this site | To write to you in it: your welcome email and anything we send about your key | Contract, as above | As long as your key is kept |
| Which code you used, when, and whether on gprint.ai or in the app | So a code works once per key, and so we can see how many people each code reached | Contract, as above | As long as the key is kept |
| Each try at a code: a salted hash of your IP address, the key when the try came from the app, the time, and whether the code was right | To stop anyone guessing codes: ten tries an hour from one network, five wrong tries a day from one key. The address itself is never stored and cannot be recovered from the hash | Legitimate interest (Art. 6(1)(f)): keeping codes from being guessed. We judged this outweighs any impact on you because the hash identifies nobody | 30 days, then deleted automatically |
The computers using a promo key are recorded exactly as for a subscription, above. When a code is redeemed, we receive a short email saying which address used which code.
If you ask for a lost key, we email it to the address on your subscription through Resend. Stripe emails you receipts and reminders before renewals under its own privacy policy, as an independent controller for its payment and fraud-prevention duties.
3. Who else sees it
We do not sell or rent personal data, and we do not share it with anyone for their own purposes. The following companies process it on our behalf, as processors, under contracts that bind them to our instructions:
| Processor | What they do for us | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts the website, stores the sign-up list, sends us the notification email, and keeps short-lived server logs to run the service | Cloudflare operates a global network. Data may be processed in the United Kingdom, the European Union and the United States |
| Google LLC (Google Fonts) | Serves the page's typeface. When your browser fetches it, Google receives your IP address and the usual request headers | United States. You can stop this by choosing "Essential only" in the notice on the home page |
| Stripe | Takes subscription payments, holds your card details, and tells us when a subscription starts, renews or ends. Stripe is also an independent controller for its own legal and fraud-prevention duties | United Kingdom, the European Union and the United States |
| Resend, Inc. | Sends the email with your licence key: when a promo code gives you one, and when you ask for it again | United States |
| Functional Software, Inc. (Sentry) | Receives and stores the GPrint app's crash reports, so we can find and fix bugs (see section 7) | Stored in Sentry's EU region, in Germany |
We would also disclose data if the law required it, for example to a court or a regulator, and we would tell you unless the law forbade it.
4. Transfers outside the UK and the EEA
Cloudflare, Google, Stripe, Resend and Sentry are headquartered in the United States. Where your data leaves the UK or the EEA, it does so under safeguards recognised by law: Cloudflare, Google and Stripe are certified under the EU–US Data Privacy Framework and its UK Extension, and our contracts with them, and with Resend, include the European Commission's Standard Contractual Clauses with the UK International Data Transfer Addendum. Crash reports are stored in Sentry's EU region, in Germany; Sentry's Data Processing Addendum includes the Standard Contractual Clauses for any access from outside the EEA. You can ask us for a copy of the relevant safeguards by email.
5. Cookies and browser storage
We use no analytics, advertising or tracking of any kind. We set one cookie of our own, and only if you ask for it: when you pick a language from the menu at the top of the page, a cookie called gprint-lang remembers that choice, so the site opens in your language next time. It holds only the language (for example pt-BR), lasts one year, is read only by gprint.ai, and you can remove it at any time by clearing your browser's site data. Without it, the site uses the language your browser asks for.
Under the Privacy and Electronic Communications Regulations, we also store one item in your browser: your answer to the privacy notice ("That is fine" or "Essential only"), so we do not ask you again. It contains nothing about you, is never sent to us, and you can clear it by clearing your browser's site data.
The GPrint Academy video on the home page plays from YouTube, in its privacy-enhanced mode (youtube-nocookie.com). Nothing from YouTube loads until you press play. When you do, Google receives your IP address and the usual request headers, and YouTube may store information in your browser to play the video. That is YouTube’s own processing, as an independent controller, under Google’s privacy policy. If you would rather not, the video is also on YouTube itself, and nothing else on this site needs it.
If we ever turn on Cloudflare's spam check (Turnstile) for the form, it may set a cookie of its own to tell a person from a bot. This page will say so, with the cookie's name and lifetime, before that happens.
6. The GPrint app
GPrint does not have a server. There is no GPrint account and no sign-in beyond your licence key. The app reports back to us two things only: crash reports, described in section 7, and the licence and update check, described in section 2. Never your prompts, your files, your data, or usage statistics. For anything else that happens inside the app, we are not a controller or a processor, because we never receive it.
The app does talk to other services, and each is your own relationship, under their own privacy policies. You are the controller of whatever you put into them:
| Service | When | What they see |
|---|---|---|
| Your AI assistant (Claude Code, Codex, Gemini, or one you choose) | While you use it inside GPrint | Whatever you type to it and whatever it reads in your project folder. GPrint never sees your sign-in and never pays for your usage. |
| Railway | Only if you connect it, to put your app online | Your app's files and the database it creates for you, on your own Railway account. |
| Cloudflare | Only if you make a temporary link | The traffic that passes through the temporary tunnel while it is open. |
| GitHub | Only if you connect it, to share your app's versions with your team; and when GPrint downloads the tool that makes a temporary link | Your app's files and history, on your own GitHub account. The download is an ordinary request from your computer, including its IP address. |
| nodejs.org | When GPrint fetches its own copy of Node | An ordinary download request from your computer, including its IP address. |
Your sign-ins to those services, and your licence key, are encrypted by your computer: on a Mac with the macOS keychain, and on Windows with Windows' own data protection (DPAPI), which ties them to your Windows account. They are never kept inside your app's folder, and never sent to us. If your own app collects personal data from your customers, you are responsible for it under the GDPR; GPrint gives you the tools to see and control that data, and the app's own guidance points you to what the law expects.
Mac and Windows alike. The Windows version is a beta. It collects and sends exactly what the Mac version does, as this page describes, and nothing more.
7. Crash reports
When something goes wrong inside GPrint, the app sends a crash report to Sentry (Functional Software, Inc.), which stores it for us in its EU region, in Germany. We use these reports for one purpose: to find and fix bugs in GPrint.
On by default, and yours to turn off. Crash reports are on when you install GPrint. You can turn them off at any time in Settings → Your computer → Crash reports. Turning them off stops them straight away and stays off the next time GPrint opens; while they are off, the app sends nothing to Sentry at all.
| What's sent | What's never sent |
|---|---|
| The error, where in GPrint it happened, the GPrint version and your computer's system version (macOS or Windows), plus the versions of the parts GPrint is built on (Electron, Chrome and Node), so we can tell which one a bug is in. | Your files, your app's data, your keys, your project names, or your folders. Before a report leaves your computer, GPrint removes folder names, web addresses beyond the site's name, anything that looks like a key or a password, and database addresses. It sends no screenshots and no attachments, and nothing about your computer beyond its system version. |
Lawful basis. Legitimate interest (Art. 6(1)(f)): keeping GPrint working for the people who pay for it. We judged this outweighs any impact on you because a report identifies nobody, carries none of your content, and you can turn it off. Sentry sees the IP address a report comes from, as any server would; GPrint tells Sentry not to store it.
Kept for. 90 days, Sentry's standard retention, then deleted.
Who processes it. Sentry acts as our processor (a subprocessor for the reports), under its Data Processing Addendum; it is listed in section 3.
8. How we keep it safe
The sign-up list and the subscriber records are stored encrypted at rest on Cloudflare's infrastructure and reached only over encrypted connections. Access is limited to the director, through an account protected with two-factor authentication. IP addresses are hashed with a secret salt before storage. If a breach ever put your rights at risk, we would tell the ICO within 72 hours and tell you without undue delay, as the law requires.
9. Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- access the personal data we hold about you, and receive a copy;
- rectification of anything inaccurate or incomplete;
- erasure: we delete your sign-up, or your subscriber and device records, except the billing record the law makes us keep;
- restriction of processing while a question about it is resolved;
- portability: your data in a common, machine-readable form;
- object to processing based on legitimate interests, which we will stop unless we can show compelling grounds;
- withdraw consent at any time, as described in section 2.
To exercise any of them, email g@greis.uk. We do not charge, and we will answer within one month. We may ask you to confirm the address the request concerns, so that nobody else can act on your data.
You also have the right to complain to a supervisory authority. In the UK that is the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113. In the EEA it is the authority in the country where you live or work. We would rather hear from you first, but you do not have to.
10. Children
The website and the app are for adults running or planning a business. We do not knowingly collect anything from anyone under 18, and if we learn that we have, we will delete it.
11. Changes to this policy
If this page changes in a way that matters, the date and version at the top change with it, and if you are on the download list or a subscriber we will tell you by email before the change takes effect. Earlier versions are available on request.