Privacy Policy

Effective 14 August 2026

Amberline LLC (“Amberline”, “we”, “us”) builds and sells macOS software, including FCP Relay. This policy explains what personal information we collect through amberline.io and our apps, why we collect it, who else processes it, and what you can require us to do with it. It applies to everyone, wherever you live.

What we collect

If you ask for a download

The trial download is gated on an email address. We collect your email address and which app you asked for. We use it to send you the download link. The form has an optional, unticked box to hear about new releases and new products: asking for a download does not put you on our mailing list — only ticking that box does. If you tick it you get occasional product updates, not a regular newsletter. Every one of those emails has an unsubscribe link, and unsubscribing is immediate and permanent.

If you join the update list

The signup form on our home page collects your email address and nothing else. Same list, same unsubscribe.

If you buy a license

Checkout is operated by Polar as our merchant of record. Polar is the seller of record for the transaction: it collects your name, email address, billing address, and payment details, and it calculates and remits any sales tax or VAT. Your card details never touch our servers and we cannot see them. We can see your name, email, country, and what you bought in the Polar dashboard, which is how we provide support and honour refunds.

Checkout offers you an optional, unticked box to hear about new releases and products. Buying something does not put you on our mailing list — only ticking that box does. If you leave it alone you will get your receipt, your licence key, and nothing further. Either way we record in our email system that you bought, and which app, so that we never send you an invitation to buy what you already own. If you did not tick the box, that record is marked unsubscribed and no marketing email can be sent to it. If you were already on the list from downloading a trial, the choice you made then stands.

When an app checks a license

Our apps validate license keys through our own server so that the app never has to carry a Polar API token. When that happens, the following passes through our server on its way to Polar:

• the license key itself;
• an activation ID, if the key is already activated on that machine;
• on first activation, a device label — your Mac's computer name, so that you can recognise your own machines in your purchase portal and release a seat when you replace one.

We pass these to Polar and return the answer. We do not keep our own copy, and our server deliberately strips the customer name, email, and billing address out of Polar's response before it reaches the app. License keys are masked in our logs.

A license is checked once, when you activate it, and then works offline permanently. Our apps re-check on launch when a network is available, but only so that an explicit revocation can take effect — they do not report your usage, your files, your projects, or anything about your work. FCP Relay reads your folders entirely on your own Mac; the contents of your media, your folder names, and your project structure are never transmitted to us. The tracking described below is on our website only. It is not in our apps.

Server logs

Our website and API run on Vercel, which keeps standard request logs — IP address, timestamp, page or endpoint, and browser user-agent. These exist for security and debugging, they are retained for a short period by Vercel, and we do not use them to build any profile of you.

Cookies, analytics, and advertising

Our website uses a third-party tool. It sets cookies in your browser and sends information about your visit to companies other than us. We would rather tell you exactly what it is than hide it behind a generic sentence.

• Google Analytics 4 — tells us which pages people visit, roughly where in the world they are, and which pages lead to a download or a purchase. It receives your IP address (which Google truncates), your user-agent, and the pages you view.

We use this to work out which of our pages actually work. We do not use it to identify you personally, and we do not upload our email list to it.

Your choices

• Neither tool loads until you agree — wherever in the world you are. We do not apply one standard to Europe and a weaker one to everyone else. Until you choose, your browser never contacts Google or Meta at all, and if you decline it never does. The site works exactly the same either way.
• You can change your mind at any time from the cookie settings link in our footer. Your choice is remembered on that browser and nowhere else — we store it in your browser's local storage, not in a cookie, so there is nothing to consent to in order to record that you did not consent.
• Global Privacy Control is honoured automatically. If your browser sends a GPC signal we treat it as a decline and never even ask.
• Browser-level controls work too: ad blockers and Safari's Intelligent Tracking Prevention all work here and we do not try to defeat any of them. Google also publishes a browser opt-out add-on.

What we don't do

• We do not sell your personal information for money. Ever.
• No tracking inside our apps. The analytics above is on this website only. Our software contains no analytics SDK and reports nothing about your work.
• No profiling with legal effect. We make no automated decisions about you that produce legal or similarly significant consequences.
• No sensitive data. We do not ask for or process special-category data — health, biometrics, race, religion, precise geolocation, or anything comparable.
• No accounts. There is nothing to sign up for and no password to lose.
• No list swapping. We do not rent, trade, or hand our email list to anyone.

Who else processes your information

This list is complete. Each is a processor acting on our instructions, except Polar, which is an independent controller for the payment itself as merchant of record, and Google, which acts as an independent controller for its own purposes.

We may also disclose information if the law genuinely requires it — a valid legal process — or to establish or defend a legal claim. If Amberline is ever sold or merged, customer records would transfer with the business; we would say so here first.

Legal bases (EEA, UK, and Switzerland)

• Contract — processing your purchase, issuing and validating your license key, and providing support. Without this we cannot sell you software that works.
• Consent — product-update emails, and the analytics and advertising cookies described above. You gave it at the form or the cookie banner, and can withdraw it at any time with no effect on anything else.
• Legitimate interests — keeping short server logs to secure our service against abuse, and preventing fraudulent purchases. We have weighed this against your rights and it is limited to what security requires.
• Legal obligation — retaining transaction and tax records for as long as tax law requires.

How long we keep it

• Email list: until you unsubscribe or ask us to delete it. We do not expire the list on our own.
• Purchase and license records: for as long as your license is live, so that we can support you and honour your key — then as long as tax and accounting law requires us to keep the transaction record.
• Analytics and advertising data: held by Google and Meta under their own retention schedules. We keep no copy of it ourselves.
• Server logs: a short window set by Vercel, typically measured in days, then discarded automatically.

Your rights

Wherever you live, you may ask us to show you what we hold about you, correct it, or delete it. You may also ask for a portable copy, ask us to restrict or stop a particular use, and object to processing we base on legitimate interests. If you are in the EEA, UK, or Switzerland you may also complain to your local data protection authority, and if you are in Switzerland, to the Federal Data Protection and Information Commissioner.

If you are a resident of California, Colorado, Connecticut, Texas, Virginia, or another US state with a comprehensive privacy law, you have the right to know, access, correct, delete, and obtain a copy of your personal information, and to opt out of its sale, of sharing for targeted advertising, and of profiling. We do not sell your information, share it for targeted advertising, or profile you. The analytics above measures our own pages; it does not feed advertising. You can switch it off at any time from the cookie settings link in our footer.

How to exercise any of it: email support@amberline.io. There is no form and no portal. We will respond within 30 days, and we may need to verify that the request comes from you — usually by replying from the address we hold. An authorised agent may act for you; we will ask for proof of that authority.

International transfers

We are based in Idaho, USA, and our processors are primarily US-based. If you are outside the United States, your information is transferred to and processed there. Our processors provide for these transfers through the European Commission's Standard Contractual Clauses or an equivalent approved mechanism, and their policies, linked above, set out the detail.

Security

Our API tokens are held server-side only and never reach your browser or our published files; our build fails outright if a secret is ever detected in the published site. License keys and email addresses are masked in our logs. Everything is served over HTTPS. That said, no method of transmission or storage is completely secure, and we cannot guarantee absolute security — anyone who tells you otherwise is overselling.

Children

Our software is professional video and audio tooling, and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, write to support@amberline.io and we will delete it.

Changes to this policy

If we change this policy we will update the effective date at the top. If a change materially affects how we handle your information — adding analytics, say, or a new processor — we will say so prominently on this site, and email the list if the change affects it. We will not quietly broaden what we collect.

Contact

Questions about this policy, or a request about your data, go to the same place and a human answers:

Amberline LLC
support@amberline.io
9169 W State St # 2719, Garden City, Idaho 83714-1733, United States
Idaho, USA