Who is responsible
The controller is Jan Horák, Šumperk, Czech Republic, operating under the name LightNinja. Contact for all privacy matters: hello@lightninja.io.
This website
lightninja.io and lightninja.cz set no cookies, use no analytics and load nothing from third parties – fonts and scripts are served from our own server. The site does not store anything in your browser.
Like every web server, ours writes a short access log for each request: IP address, time, requested address, status, size, referrer and browser identification. We use it only to keep the service secure and working (legitimate interest, Art. 6(1)(f) GDPR). The same applies to get.lightninja.io, app.lightninja.io and academy.lightninja.io.
What PixelGuru Cloud stores
PixelGuru Cloud is optional. Studio, the Launcher and the props work fully without it. If you create an account, the cloud stores:
- Account: email address, username, password hash (never the password itself), account creation and sign-in times.
- Profile: display name, avatar, bio and links – only what you choose to fill in. A public profile is visible to everyone.
- Projects: your shows, their edit history, versions, music and pictures you upload, team memberships and share links.
- Chat and comments: messages in team chat and comments on projects and community items, with their author and time.
- Community uploads: items you publish, their versions, licences, likes, downloads and reports you file.
- Server logs: IP address, time, request and user agent, used for security, abuse prevention and rate limits.
- Backups: a nightly copy of the database and stored files, kept as 14 daily and 8 weekly backups.
Why, and on what legal basis
- Providing the account, sync, co-editing, sharing and the community library you asked for – performance of a contract (Art. 6(1)(b)).
- Security, abuse prevention, rate limiting, backups and resolving problems – legitimate interest (Art. 6(1)(f)).
- Service emails such as address verification, password reset, invitations and notification digests – performance of a contract; you can switch digests off in the app.
- Handling legal requests and takedown notices – legal obligation (Art. 6(1)(c)).
We do not sell data, do not profile you and do not show ads.
How long we keep it
- Account, profile and projects: until you delete them or your account.
- Server and web access logs: up to 14 days, then rotated away, unless needed to investigate a specific incident.
- Backups: deleted data disappears from the rolling backups within about 8 weeks (14 daily and 8 weekly copies).
- Community items you published under an open licence may already have been downloaded or remixed by others; remixes keep a credit to your username.
Who else processes data
The cloud and all websites run on a server administered by the controller in the EU. We use no analytics, advertising or tracking services.
Once email sending is switched on, a transactional email provider will deliver service emails as our processor under a data processing agreement. We will name it here before it is used. Until then no email is sent.
We do not transfer personal data outside the EU/EEA. If a future processor did, it would be covered by an adequacy decision or standard contractual clauses.
Your rights
You have the right to access your data, rectify it, have it erased, restrict or object to processing, and to data portability.
- Export: the account settings in Studio let you download everything linked to your account as a machine-readable archive.
- Deletion: deleting your account in the account settings removes your account, profile, private projects, chat messages and comments at once; backups roll over within about 8 weeks.
- Anything else, or if you cannot sign in: write to hello@lightninja.io. We answer within one month.
If you think we handle your data unlawfully, you can complain to the Czech supervisory authority, the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz, or to the authority in your EU country.
Children
Cloud accounts are for people aged 15 and over (the Czech age of digital consent). Younger performers can use the apps without an account.
Changes
We will update this page when the processing changes and change the date at the top. Significant changes are announced in the apps before they take effect.