Last updated: August 10, 2026
The short version. PhotoTaken does not phone home with your usage data, does not track you between sessions, and does not send your photographs anywhere. We collect your email address when you buy a license, and a per-computer identifier when you activate the software. Most of the website uses privacy-preserving analytics that set no cookies, our pages include the Meta (Facebook) Pixel, which we use to measure our advertising, and when you start a free trial or buy, our server also reports that one event to Meta with your email address in a scrambled, one-way form. We never make that data public, and we do not sell data, ever.
LorMarSoft, LLC ("LorMarSoft", "we", "us") is the publisher of PhotoTaken and the controller of any personal data described in this policy. You can reach us at support@lormarsoft.com.
Your purchase is processed by Paddle.com Inc. as the merchant of record. Paddle collects your billing details (name, email address, billing country, payment method) directly; we receive a notification from Paddle confirming the sale, along with your email address and an opaque order identifier. We do not receive or store your credit card number, full card details, or banking information.
To activate your license, PhotoTaken sends a single request to our activation server containing your email address and a per-computer identifier derived from a stable machine identifier (the Windows MachineGuid or macOS IOPlatformUUID, salted and hashed). We store these so we can enforce the two-computer activation limit and let you deactivate computers from within the application. We do not collect your computer's hostname, MAC address, IP address (beyond what Cloudflare temporarily uses to deliver the response), files, photographs, or any other identifying information.
PhotoTaken does not include analytics, telemetry, or automatic crash reporting. Nothing about how you use the application is sent anywhere on its own; the one way information reaches us is when you deliberately write and send a message (see 2.4). Your photographs, tags, ratings, and project files stay entirely on your computer. The only network requests the application makes during normal use are: (a) the activation request above (once per computer), (b) a periodic check for software updates, which fetches a small public manifest file and does not include any identifying information, and (c) a message you choose to send us through Contact Us (see 2.4 below). The update check can be turned off in Preferences.
PhotoTaken has a Contact Us window for bug reports, feedback, and feature requests. Nothing is sent unless you write a message and press Send. When you do, we receive what you typed, the kind of message you chose, the application version, and your operating system name and version. If you enter an email address we receive that too, and use it only to reply to you.
You may optionally tick Include my log file. The log records what the application did, which includes the names of folders and files you opened. It never contains your photographs themselves. The box is off by default, and the window has a button that shows you the exact text that would be sent before you send it.
Messages are submitted to a Google Form we own, so they arrive in a Google Sheet in our Google account and we are notified by email. Google acts as our processor for that data and it is subject to Google's own privacy terms. We keep messages for as long as they are useful for support and product decisions. We do not collect your IP address. If the form cannot be reached, PhotoTaken offers to open your email application instead, and nothing is sent until you send it yourself.
The website uses Cloudflare Web Analytics, a privacy-preserving analytics service. It does not set cookies, does not store IP addresses, and does not build user profiles. It collects aggregate counts of page views and approximate visitor geography by country. We use this only to understand which pages people read.
Our pages also include the Meta Pixel, a tool from Meta Platforms, Inc. (Facebook and Instagram). It loads code from Meta and reports your page views, and in the checkout flow when you view pricing, begin checkout, or complete a purchase (including the order value and currency), to Meta. Meta uses this to measure how our advertising performs and to show our ads to relevant people, which can involve matching your activity to your Meta account and adding it to Meta's advertising profile of you. The Meta Pixel may set cookies. To limit it, use a browser or extension that blocks the Meta Pixel, or adjust the ad settings in your Meta account.
When you complete a purchase, our own server also reports that one purchase to Meta directly, alongside the browser report described above. This is the same information (that a purchase happened, its value, and its currency) plus a scrambled, one-way form of your email address, which lets Meta recognise the sale as belonging to a Meta account without us handing over the address itself. We send the two reports with a shared reference so Meta counts the purchase once rather than twice. We do this because the browser report is often blocked or lost, which leaves us unable to tell which advertising actually works. Blocking the Meta Pixel in your browser does not stop this server report, because it does not come from your browser.
Starting a free trial sends a second, separate report of the same kind. When you start a trial in the application, our server tells Meta that a trial started and includes the same scrambled, one-way form of your email address. That report carries no money figure, because a trial is not a sale. We do this because a trial can begin weeks before a purchase does, so the trial start is usually the only step Meta can still connect back to the advertisement you saw. It comes from our server rather than from your browser, so blocking the Meta Pixel does not stop it either.
A completed purchase and a started trial are the only two things our server ever reports to Meta. Neither one happens from browsing the site, and nothing else about your use of the application is ever reported: not when you open it, not what you do in it, and not how long you use it.
The "Ask PhotoTaken" chatbot on the documentation pages runs on a Cloudflare Worker we operate. When you ask a question, we store the question text, a short topic label, and the timestamp for up to 90 days, so we can improve the documentation. We do not store your IP address, user agent, browser cookies, the model's answer, or any other identifying information alongside the question. Chat history within a single browser tab is kept in your browser's sessionStorage and is discarded when you close the tab.
If you email support@lormarsoft.com, we keep your email address and the contents of the conversation for as long as needed to support you and to improve the product. We do not use support email for marketing.
Activation data and Cloudflare Web Analytics are processed by Cloudflare, Inc. and stored in Cloudflare's global infrastructure. Advertising-measurement data, from the Meta Pixel and from the two server-side reports described in section 2.5, one when a purchase completes and one when a trial starts, is processed by Meta Platforms, Inc. Payment data is processed and stored by Paddle.com Inc., which acts as the merchant of record. Customer support email is stored in our email provider's systems. These providers act as data processors on our behalf and are bound by their own published privacy commitments.
Depending on where you live, you may have the right to access, correct, export, or delete personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email support@lormarsoft.com from the address associated with your license, and we will respond within 30 days. You can also deactivate a computer directly from PhotoTaken's Preferences screen at any time.
If you are in the European Economic Area, the United Kingdom, or Switzerland, the lawful basis for our processing is the performance of the license contract (sections 2.1 and 2.2), our legitimate interest in operating the website and product (sections 2.3, 2.4, and 2.5), and your consent where applicable. You have the right to lodge a complaint with your local supervisory authority.
If you are a California resident, we do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act.
PhotoTaken is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be announced in the application's release notes and on this page.
For any privacy question, write to support@lormarsoft.com, or by mail to:
LorMarSoft, LLC
3829 Pleasant Springs Dr.
Naples, FL 34119
United States