Privacy Policy

This policy explains what DemoLens collects when you use the DemoLens Chrome extension, the optional desktop helper, and this website — and, just as importantly, what it does not.

The short version

Your recordings never leave your device. Screen capture, compositing and encoding all happen locally in your browser, and the finished file is saved by you. We have no copy of any recording and no way to obtain one. We run no analytics, no advertising, and no cross-site tracking of any kind — there are no third-party trackers on this site or in the extension.

What we collect

Account details. If you sign in with Google, we store the name, email address and profile-image URL Google returns, an internal account identifier, and your role. We never receive your Google password.

Subscription and payment records. If you subscribe to Pro, we store the subscription and payment metadata needed to run billing: plan, billing cycle, currency, amount, status, period dates, and the identifiers Razorpay issues for your subscription, customer record, payments and invoices. We never receive or store your card details — those go directly to Razorpay.

Linked devices. When you connect the extension to your account we create a device record holding a device label, platform, extension identifier, a public device id, a hash of the device secret, and timestamps for when it was linked, last seen, and revoked. We also keep a record of each entitlement token issued to a device, so that access can be audited and withdrawn.

Download events.When you click a download link we record which asset was requested, the operating system it was for, the country your request came from, your browser's user-agent string, the referring page, and the time. If you are signed in, this is associated with your account.

Technical data, including IP address. To protect account-linking and entitlement endpoints from abuse, we keep short-lived rate-limiting counters keyed on the requesting IP address. Our hosting provider also processes your IP address to deliver the site, and we use the country it infers to decide which currency to show you on the pricing page.

What we never collect

We do not collect your recordings, the contents of pages you visit, what you type, or your browsing history. The extension's in-page script exists only to observe click position and the zoom shortcut so the recorder knows where to zoom; those coordinates are used inside your own browser and are never transmitted to us.

The desktop helper and input monitoring

The optional DemoLens helper extends zoom-to-cursor beyond the browser. To do that, it uses your operating system's input-monitoring permission, which technically allows it to observe all mouse and keyboard events while it is running.

It deliberately does far less than that permission allows. Only three things ever leave the helper process, and they go to the DemoLens extension on the same machine, never to us: your cursor position, left mouse clicks, and the single zoom keyboard shortcut. Key identity and typed content are not recorded, stored or transmitted — every other key is discarded without being examined. The helper also checks for its own updates over HTTPS, which reveals your IP address and the version you are running to the server hosting them.

You can revoke input monitoring in your operating system's privacy settings, or uninstall the helper, at any time. The extension continues to work without it, with zoom limited to inside browser tabs.

Why we process it, and on what basis

Account, subscription and device data is processed to perform our contract with you — providing the service you signed up for. Rate limiting and abuse prevention rest on our legitimate interest in keeping the service available and paid features protected. Download events rest on our legitimate interest in understanding which platforms to support. Payment records are also kept to meet tax and accounting obligations.

Who we share it with

We do not sell your data or share it for advertising. We use a small number of providers to operate the service, each receiving only what their function requires:

• Google — sign-in. Google receives authentication requests and returns your basic profile.
• Razorpay — payment processing. Razorpay receives your payment details directly and handles them under its own privacy policy.
• Cloudflare — hosting and database. Site content and the data described above are served and stored on Cloudflare infrastructure.

We may also disclose information where the law requires it, or to establish or defend legal claims.

Cookies

We use cookies only to keep you signed in. When you sign in, an authentication session cookie is set; it expires on its own and is cleared when you sign out. We set no advertising, analytics or tracking cookies, so there is no cookie banner to dismiss.

International transfers

Our providers operate globally, so your data may be processed outside your country, including outside the European Economic Area. Where that happens we rely on the transfer safeguards those providers have in place.

How long we keep it

Account, subscription and device records are kept for as long as your account exists, and payment records for as long as tax and accounting rules require after that. Rate-limiting counters are short-lived and expire with their window. Download events are retained in aggregate for product planning.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable form, or withdraw consent. You also have the right to complain to your local data-protection authority.

Two of these you can exercise directly: you can revoke any linked device from your dashboard, which invalidates its access, and you can cancel your subscription there. For anything else — including account deletion, which is not yet self-service — email getdemolens@gmail.com and we will action it.

Children

DemoLens is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date above. Material changes will be communicated to signed-in users by email.

Contact

Questions, requests or complaints about privacy go to getdemolens@gmail.com, or through our support page. Security vulnerabilities should go through our security page instead.