Privacy policy

Last updated 29 September 2026

LocalGuard is made by Rawira LTD, the controller of the personal data described here. Questions and requests: support@localguard.me.

1. This website

• No cookies, analytics or ad trackers. Fonts and images are served from localguard.me itself.
• Your browser's local storage keeps one value, lg_privacy_notice, so the privacy notice is not shown again. It never leaves your browser.
• The live demo runs entirely in your browser. What you type into it is not sent anywhere.
• Our web server logs each request: IP address, time, requested address and browser identifier. This covers our licence API too, so the request the checkout page makes can include the email you typed. We use these logs to keep the service running and secure (legitimate interest, Art. 6(1)(f) GDPR) and delete them after 14 days.

2. Buying a subscription

• You enter your email on the checkout page; we pass it to Stripe to open the payment form. Stripe collects your payment details, billing address and, if you give one, a tax ID. We never see your card number.
• We store your email, your Stripe customer and subscription IDs, the subscription status and renewal date, and a record that the first-month offer was used (by email or device identifier).
• We email you the activation code and, when you ask for them, one-time sign-in codes.
• Legal basis: performing our contract with you (Art. 6(1)(b) GDPR). Invoices and tax records are kept as tax law requires (Art. 6(1)(c)).

3. The LocalGuard app

• Detection and redaction run on your computer. The app has no telemetry and sends none of the traffic it inspects to us.
• To renew its licence, the app contacts api.localguard.me when it starts and once a day, sending a device token and a device identifier: a hash derived from your computer's serial number or system ID. It is what lets one subscription move between computers.
• When you activate with your email, the app sends that email to receive a sign-in code.
• App updates and the on-device AI model are downloaded from GitHub, which sees your IP address as any download host does.

4. Who processes data for us

• Stripe (Stripe Payments Europe, Ltd., Ireland): payments, invoices, tax.
• Amazon Web Services: email delivery through Amazon SES, EU (Ireland) region.
• Hetzner Online GmbH (Germany): hosting of localguard.me and api.localguard.me on servers in the EU.
• GitHub, Inc. (USA): hosting of app downloads and updates.

Where a provider processes data outside the EU, it relies on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

5. How long we keep it

• Web server logs: 14 days.
• One-time sign-in codes: valid for 15 minutes.
• Subscription and device records: while you are a customer, and afterwards as long as tax, accounting and dispute handling require. Ask us and we delete what the law does not require us to keep.

6. Your rights

You can ask us for a copy of your data, to correct it, delete it, restrict or object to its use, or receive it in a portable format. Write to support@localguard.me from the email you bought with; we answer within one month. You can also complain to the data protection authority where you live or work.

7. Changes

When this policy changes, the date at the top changes with it.