What we collect, and what we do not.
GPrint is built on the idea that your app, your data and your AI account are yours. This page holds the website and the app to the same standard, in plain words, and sets out everything the UK GDPR and the EU GDPR require us to tell you.
The short version. This website sets no tracking cookies and runs no analytics. If you ask for the Mac download, we keep your email address and which kind of Mac you have, so we can send you one link. The GPrint app itself sends us nothing: it runs on your Mac, and the services it talks to are your own accounts.
1. Who we are, and how to reach us
The data controller is G&G Digital Ltd, a company registered in England and Wales under number 15189068. For anything on this page, including exercising your rights, email g@greis.uk. We are a small company and are not required to appoint a Data Protection Officer; the director handles privacy questions personally.
This policy applies to the website at this address and to the GPrint app for Mac. It applies to you wherever you are; if you are in the United Kingdom the UK GDPR and the Data Protection Act 2018 govern it, and if you are in the European Economic Area the EU GDPR does.
2. What we collect on the website, why, and on what basis
We collect personal data in exactly one place: the "Download for Mac" form. Everything we hold about you comes from you, through that form, and from the connection your browser makes when it sends it. We do not buy, enrich or combine it with data from anywhere else.
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Your email address | To send you the download link once the Mac build is signed, and to answer if it does not arrive | Consent (Art. 6(1)(a)), given by ticking the box and sending the form | Until the link has gone out and for up to 12 months afterwards, then deleted |
| Which chip your Mac has | To send you the right build | Consent, as above | Same as the email address |
| A salted hash of your IP address | To stop one address flooding the form. The address itself is never stored and cannot be recovered from the hash | Legitimate interest (Art. 6(1)(f)): keeping the form free of abuse. We judged this outweighs any impact on you because the hash identifies nobody | Same as the email address |
| The country your request came from, and your browser's user agent string | To spot abuse, and to know which browsers the page must work in | Legitimate interest, as above | Same as the email address |
| The time you opened the form | A bot check: a form sent faster than a person could fill it is ignored | Legitimate interest, as above | Not stored. Checked and discarded |
Giving us your email address is voluntary. It is not required by law or by any contract. If you do not give it, the only consequence is that we cannot send you the link; you can still read everything on this site and, once released, download GPrint from its public release page.
We use your address for this one purpose. We do not add you to a newsletter, send marketing, or share or sell the list. If we ever want to use it for anything else, we will ask you first.
Withdrawing consent. You can withdraw it at any time by emailing g@greis.uk. We will delete your address within 30 days, and withdrawing does not affect anything done before you withdrew.
No automated decisions. Nothing we do with your data involves profiling or a decision made by a machine that has a legal or similar effect on you.
3. Who else sees it
We do not sell or rent personal data, and we do not share it with anyone for their own purposes. The following companies process it on our behalf, as processors, under contracts that bind them to our instructions:
| Processor | What they do for us | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts the website, stores the sign-up list, sends us the notification email, and keeps short-lived server logs to run the service | Cloudflare operates a global network. Data may be processed in the United Kingdom, the European Union and the United States |
| Google LLC (Google Fonts) | Serves the page's typeface. When your browser fetches it, Google receives your IP address and the usual request headers | United States. You can stop this by choosing "Essential only" in the notice on the home page |
We would also disclose data if the law required it, for example to a court or a regulator, and we would tell you unless the law forbade it.
4. Transfers outside the UK and the EEA
Cloudflare and Google are headquartered in the United States. Where your data leaves the UK or the EEA, it does so under safeguards recognised by law: both companies are certified under the EU–US Data Privacy Framework and its UK Extension, and our contracts with them include the European Commission's Standard Contractual Clauses with the UK International Data Transfer Addendum. You can ask us for a copy of the relevant safeguards by email.
5. Cookies and browser storage
We set no cookies of our own and use no analytics, advertising or tracking of any kind. Under the Privacy and Electronic Communications Regulations, we store one item in your browser: your answer to the privacy notice ("That is fine" or "Essential only"), so we do not ask you again. It contains nothing about you, is never sent to us, and you can clear it by clearing your browser's site data.
If we ever turn on Cloudflare's spam check (Turnstile) for the form, it may set a cookie of its own to tell a person from a bot. This page will say so, with the cookie's name and lifetime, before that happens.
6. The GPrint app
GPrint does not have a server. There is no GPrint account, no sign-in, and nothing in the app reports back to us: not your prompts, not your files, not your data, not usage statistics, not crash reports. For anything that happens inside the app, we are not a controller or a processor, because we never receive it.
The app does talk to other services, and each is your own relationship, under their own privacy policies. You are the controller of whatever you put into them:
| Service | When | What they see |
|---|---|---|
| Your AI assistant (Claude Code, Codex, Gemini, or one you choose) | While you use it inside GPrint | Whatever you type to it and whatever it reads in your project folder. GPrint never sees your sign-in and never pays for your usage. |
| Railway | Only if you connect it, to put your app online | Your app's files and the database it creates for you, on your own Railway account. |
| Cloudflare | Only if you make a temporary link | The traffic that passes through the temporary tunnel while it is open. |
| nodejs.org and GitHub | When GPrint fetches its own copy of Node, and when it checks for a new version of itself | An ordinary download request from your computer, including its IP address. |
Your sign-ins to those services are kept in your Mac's keychain, never inside your app's folder, and never sent to us. If your own app collects personal data from your customers, you are responsible for it under the GDPR; GPrint gives you the tools to see and control that data, and the app's own guidance points you to what the law expects.
7. How we keep it safe
The sign-up list is stored encrypted at rest on Cloudflare's infrastructure and reached only over encrypted connections. Access is limited to the director, through an account protected with two-factor authentication. IP addresses are hashed with a secret salt before storage. If a breach ever put your rights at risk, we would tell the ICO within 72 hours and tell you without undue delay, as the law requires.
8. Your rights
Under the UK GDPR and the EU GDPR you have the right to:
- access the personal data we hold about you, and receive a copy;
- rectification of anything inaccurate or incomplete;
- erasure, which for us means deleting your row from the list;
- restriction of processing while a question about it is resolved;
- portability: your data in a common, machine-readable form;
- object to processing based on legitimate interests, which we will stop unless we can show compelling grounds;
- withdraw consent at any time, as described in section 2.
To exercise any of them, email g@greis.uk. We do not charge, and we will answer within one month. We may ask you to confirm the address the request concerns, so that nobody else can act on your data.
You also have the right to complain to a supervisory authority. In the UK that is the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113. In the EEA it is the authority in the country where you live or work. We would rather hear from you first, but you do not have to.
9. Children
The website and the app are for adults running or planning a business. We do not knowingly collect anything from anyone under 18, and if we learn that we have, we will delete it.
10. Changes to this policy
If this page changes in a way that matters, the date and version at the top change with it, and if you are on the download list we will tell you by email before the change takes effect. Earlier versions are available on request.