Halobloom Privacy Notice

Last updated: 4 October 2026

This notice explains what happens to your personal data when you visit gethalobloom.com or use the Halobloom Photoshop plugin.

Who is responsible

Veralcin Studio, owner Juan Pablo Verni Albarracin (full address in the Impressum at gethalobloom.com/impressum)
[email protected]

This notice is written to comply with the EU General Data Protection Regulation (GDPR), since Halobloom is operated from Germany.

What data we collect, and why

The website itself

Visiting gethalobloom.com does not set any tracking or analytics cookies, and the page loads no fonts, scripts, or trackers from Google or any other third party — everything (fonts, images, video) is self-hosted, and we do not run any analytics tool (e.g. Google Analytics, Meta Pixel, Plausible, etc.) anywhere on the site.

Our hosting provider, Cloudflare (Cloudflare Pages), automatically processes standard web server logs to deliver the site and protect it from abuse — this typically includes your IP address, browser type, and the pages you requested, kept for a limited period (Cloudflare does not publish an exact figure). Cloudflare acts as our processor under its data processing agreement; see Cloudflare's privacy policy for details. Legal basis: our legitimate interest in delivering and securing the website.

The contact form

If you use the "Need help or found a bug?" form, we collect the name, email address, and message you enter. The form is processed by Web3Forms (operated by Web3Creative from India), which relays the submission to our support inbox. Web3Forms hosts its service with Amazon Web Services, Cloudflare and Hetzner, uses spam-filtering services (CleanTalk and Akismet) that see the submission, and keeps submissions for up to three years before deleting them automatically. See Web3Forms' privacy policy for details.

Our support address ([email protected]) forwards email through Cloudflare Email Routing to a Gmail inbox operated by Google. This applies to any email you send us, whether or not it comes from the form.

We use your data solely to respond to your message. Legal basis: our legitimate interest in providing customer support, or steps you ask us to take before or under a purchase contract.

Buying Halobloom

We sell Halobloom through Gumroad, not through our own checkout. When you buy there, Gumroad collects and processes your payment and order data (name, email, payment details, country) under its own privacy policy, and it handles your payment details; we never see them:

Gumroad also passes us order information (for example your name, email address and country) so that we can deliver support and keep sales records. We use it only for that and to meet our accounting and tax obligations, and we keep it for as long as German tax law requires us to keep business records. Legal basis: performance of the purchase contract and legal obligations. If we later sell through other marketplaces, we will add them to this notice.

The plugin itself

Halobloom runs locally inside Adobe Photoshop. It does not collect usage analytics and does not transmit your images or any other files anywhere.

The plugin makes one small network request: when the panel opens, it downloads a tiny file from gethalobloom.com that contains the latest version number, so it can show you whether an update is available. The plugin sends no personal data, account details or identifiers with this request, and it stores nothing about you. As with any web request, your IP address and technical request data reach our hosting provider Cloudflare, which processes them as described under "The website itself" above. We do not use this to identify you. Legal basis: our legitimate interest in telling users about available updates. If you are offline, nothing happens.

Links inside the plugin (to our website and Instagram) open in your web browser only when you click them.

Your rights

Under GDPR, you have the right to request access to, correction of, or deletion of your personal data, to object to or restrict our processing of it, and to data portability, and the right to lodge a complaint with a data protection authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin (datenschutz-berlin.de); you may also complain to the authority in your own country or state. To exercise any of these rights, email [email protected].

Data retention

We don't delete support emails and contact-form messages on a fixed schedule. If you'd like your message and any related correspondence deleted, email [email protected] and we'll delete our copies, and ask Web3Forms to delete theirs, unless we need to keep something for a legitimate reason (for example, records tied to a purchase or refund that we're required to retain for accounting purposes). Web3Forms deletes submissions automatically after three years at the latest. We do not control retention of purchase data held by Gumroad — see its policy.

International transfers

Some of the providers above process data outside the EU/EEA. Cloudflare and Google are US companies; Cloudflare is certified under the EU-US Data Privacy Framework and also relies on Standard Contractual Clauses. Web3Forms operates from India and transfers data under Standard Contractual Clauses set out in its data processing agreement. Gumroad is a US company and handles your purchase data under its own privacy policy.

Changes to this notice

We may update this notice as the site or plugin changes. The current version is always at gethalobloom.com/privacy, with the "Last updated" date above.

Contact

Questions about this notice or your data: [email protected]