Legal

Privacy Notice

Effective 27 November 2026

1. Who we are

Eight-Seven Inc. is the controller of the personal data described here, except where this notice says Paddle or another company acts as its own controller.

Eight-Seven Inc.
801-294 Chandler Drive, Kitchener, Ontario N2E 2K1, Canada
Privacy contact: [email protected]

2. The app: Shrinker Pro and Shrinker Studio

Your images. Every image you open, compress, convert or edit is processed on your Mac, by software inside the app. None of it is uploaded to us or to anyone else, and we never see it.

The update check. Once a day, Shrinker Pro checks for a new version by downloading a small update feed from GitHub Pages. That request sends no identifiers, no usage data and nothing about your images. Like any web request, it reveals your IP address to GitHub, which hosts the feed. Updates are never installed without asking you first.

Your licence. Shrinker Studio checks your licence on your Mac, against its signature. There is no activation server, and the check does not use the network. Your licence file carries the name you enter when you buy (or, if you leave that empty, your email address), and Studio shows it in the app, so a licence file you share shows it to whoever opens it.

The app has no analytics, no crash reporting that sends data to us, and no account.

3. Buying Shrinker Studio

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. At checkout, Paddle collects the details it needs to take payment, calculate tax, prevent fraud and give you a receipt, such as your name, email address, billing address or country, and payment details. Paddle acts as an independent controller of that data, under Paddle’s Privacy Policy. We never see or store your card details.

The Buy page loads Paddle’s checkout script, on that page only. It also asks for two optional things, which go to Paddle with your order: the name to show in Studio, and whether you want update emails.

From Paddle, we receive your name, email address and order ID, and those two choices. We use them to:

• generate your signed licence file, offer it for download after checkout, and email it to you;
• email it again when you ask on the lost licence page (only ever to the address it was bought with), and answer your questions about your purchase;
• handle refunds with Paddle, and keep the records the law requires of a business.

Licence emails are sent through Amazon SES. Our licence service runs on Cloudflare Workers, which processes your email address and IP address when you download a licence or ask for it again, partly to stop the lost licence page being abused.

Legal basis: performing our contract with you (delivering and supporting what you bought), and complying with our legal obligations (accounting and tax records).

4. When you write to us

If you email us, we receive your email address, your name if you include it, and whatever you choose to write. We use it to reply and to help you. Legal basis: our legitimate interest in answering you, or our contract with you if you are a customer.

5. Update emails

When you buy Shrinker Studio, the Buy page has a box labelled “Email me about Shrinker updates”. It is unticked unless you tick it. If you tick it, we add your email address and name to our mailing list, which we run with Sendy, mailing-list software we host ourselves on a server in Canada, and send you occasional emails about new releases. If you do not tick it, buying does not add you to any list, and asking for a lost licence never does.

Every email has an unsubscribe link, and unsubscribing takes effect straight away. Legal basis: your consent, which you can withdraw at any time.

6. Our websites, and cookies

Analytics. shrinkerpro.app and shrinkerstudio.app use Google Analytics to count visits and see which pages are read. Google Analytics sets cookies and receives information such as the pages you visit, your approximate location, your browser and device type, and your IP address. How Google uses this data.

• In the UK and the EEA (and anywhere we cannot tell where you are), nothing from Google loads, and no analytics cookie is set, unless you accept the cookie banner. Legal basis: your consent. You can change your mind at any time with “Cookie settings” at the bottom of each page; declining also clears the cookies an earlier Accept set.
• Elsewhere, Google Analytics loads without a banner. Legal basis: our legitimate interest in understanding how the sites are used. You can block it with your browser’s settings or an extension.

Your cookie choice is remembered in your browser’s local storage, under sp-consent. It never leaves your browser.

Delivery and security. Both sites are served through Cloudflare, which processes your IP address to deliver pages, protect the sites from abuse, and tell us your country so we know whether to show the cookie banner.

Checkout and licence pages. The Buy page loads Paddle’s checkout script. The page you land on after buying, and the lost licence page, load no analytics at all, because their addresses can identify your order.

Downloads. The Download buttons link to GitHub, which hosts the app, and to its own terms and privacy policy.

7. Who receives personal data

We do not sell personal data, and we do not share it for advertising. It goes only to:

• Paddle.com, our reseller and merchant of record, for orders, payments, tax and refunds;
• service providers who run things for us: Cloudflare (website delivery and security), Cloudflare Workers (our licence service), Amazon SES (licence emails, and the mailing list, which our self-hosted Sendy sends through), Google (website analytics), GitHub (downloads and the update feed), and Fastmail, our email provider;
• professional advisers, such as accountants and lawyers, where they need it to advise us; and
• authorities, where the law requires it.

8. International transfers

We, and some of the providers above, are based outside the UK and EEA, so your data may be processed in other countries, including Canada, the United States and Australia. Where data about people in the UK or EEA is transferred, we rely on an adequacy decision (Canada has one for commercial organisations) or on the standard contractual clauses, or the UK addendum to them, that our providers offer.

9. How long we keep it

• Order records (name, email, order ID): for six years after the purchase, to meet tax and accounting law, and so we can re-send your licence if you lose it.
• Emails with us: for two years after the conversation ends, unless they relate to an order, in which case we keep them with the order records.
• Mailing list: until you unsubscribe.
• Analytics: Google Analytics data is kept for 14 months.

10. Your rights

Depending on where you live, you have the right to ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time, without affecting what was done before.

To use any of these rights, write to [email protected]. We will answer within one month. For data Paddle holds about your purchase, you can also contact Paddle directly.

If you are unhappy with how we have handled your data, you can complain to a data protection authority: in the UK, the Information Commissioner’s Office; in the EEA, the authority in your country; in Canada, the Office of the Privacy Commissioner of Canada. We would appreciate the chance to put it right first.

11. Security

We keep the personal data we hold to the minimum, protect it with access controls and encryption in transit, and limit access to the people who need it. The app’s design does most of the work: your images, and almost everything you do in the app, never leave your Mac at all.

12. Children

Shrinker Studio is not sold to children, and we do not knowingly collect personal data from anyone under 16.

13. Changes

We will update this notice when what we collect or how we use it changes. The date at the top shows when it last changed. If a change is significant, we will say so on this page and, for customers, by email.