Prisma Privacy Policy

Effective date: October 3, 2026
Last updated: November 12, 2026

This policy explains what personal information Prisma ("Prisma," "we," "us") collects, why, and what choices you have. Prisma is operated by Chris Hamilton d/b/a Prisma, a Colorado sole proprietor, Colorado Springs, Colorado, USA. Contact: hello@prismascanner.io.

It covers our website at prismascanner.io, the free web tool Prisma Scanner, purchases and licensing, and the downloadable Prisma Hub, plugins, and OS integrations ("the Software").

The short version

• Prisma Hub is local-first. Your profiles, folders, file names, activity log, and settings stay on your computer. We do not receive them. The Software has no account, no telemetry, no launch ping, and no license ping. License files are verified offline on your device.
• Prisma Scanner runs in your browser. The names, paths, and folder trees you enter are analyzed on your device and are not uploaded to us. Scanner does not upload your media.
• We collect very little on the website: basic page-view analytics, and whatever you type into our contact form.
• If you buy, our payment partner Lemon Squeezy handles your payment details. We receive the details needed to deliver your license.
• We do not sell your personal information, and we do not run advertising or cross-site tracking.

1. What we collect

a) Website visits

Our site is hosted by Framer. Its built-in analytics records page views and basic technical details such as the pages you visit, referring site, browser and device type, language/locale, time zone, and approximate region. As of the effective date, this analytics does not set cookies or store identifiers in your browser (see our Cookie Policy). Our hosting provider also processes your IP address and request details to deliver the site and protect it from abuse.

b) Contact form and email

If you use the contact form, we collect your name, the email address or phone number you choose for our reply, the problems and goals you select, and anything you type in the 'Other' boxes. Earlier versions of the form also asked for your studio or company, role, area of interest and a message. If you give us a phone number, we use it only to call or text you back about your inquiry. If you email hello@prismascanner.io, we receive your email address and whatever you write. We use this only to respond to you and to follow up on your inquiry.

c) Purchases and licensing

Purchases are processed by Lemon Squeezy, which acts as the merchant of record. That means Lemon Squeezy sells the license to you, collects your payment details, billing information, and tax information, and handles sales tax/VAT, receipts, subscription management, and payment-related fraud checks under its own privacy policy. We never see your full card number.

From Lemon Squeezy we receive the information needed to fulfill your order: your email address, the product and plan you bought, order and subscription identifiers, order status, and renewal/expiry dates. Our license service uses this to:

• generate your signed .prisma-license file and pasteable key,
• email them to you (through an email delivery provider),
• keep a record of fulfilled orders so licenses are not issued twice, and
• count Founding Studio licenses against the limit of 50.

A .prisma-license file contains: a studio ID, product (SKU), usage limits, feature flags, issue and expiry dates, a license ID, and the order reference, plus a signature. It does not contain your payment details.

d) Prisma Hub, plugins, and OS integrations

The Software runs on your computer and talks to a local service on your own machine (127.0.0.1). Everything it creates or reads, including your naming profile, studio folder paths, file and project names, job activity, undo history, and provenance stamps written into file metadata, stays on your devices. We do not collect it.

Provenance stamps. By default, when Hub names or saves a file (including files saved through the Prisma Chrome extension), it writes the file's original filename and its Prisma name into the file's own metadata and records them in Hub's local activity log. For PNG, JPG and WebP files it uses XMP and a comment; for all files it uses macOS extended attributes. If the original filename is missing or meaningless, Hub tries to take the name from the file's web address. When Save source URL is off, the address is used only for this and isn't kept. The source URL is not saved unless you turn on Save source URL in Hub's Settings. Once it's on, Hub also writes the web address the file came from into the file and its log. This information stays on your device and isn't sent to us. Because it's stored in the file itself, it travels with the file if you share it, and a source URL can reveal private or time-limited links. You can turn off Stamp original name & source into files, or turn Save source URL on or off, in Hub's Settings. These settings apply to files Hub names after you change them; they don't remove stamps already written to existing files.

Prisma Chrome extension. The Prisma extension for Google Chrome works with Prisma Hub on your Mac. Everything it handles goes only to Prisma Hub on your own computer (127.0.0.1). It doesn't send anything to us or to anyone else, and it doesn't use analytics.

• What it reads, and when. The extension shows a small "P" button on supported sites (Runway (runwayml.com), Higgsfield (higgsfield.ai), Kling (klingai.com), Kuaishou (kuaishou.com), Luma (lumalabs.ai, luma.ai), Pika (pika.art, pika.inc), Krea (krea.ai), Leonardo (leonardo.ai), Adobe Firefly (firefly.adobe.com), ChatGPT (chatgpt.com, chat.openai.com), OpenAI (openai.com), Sora (sora.com), Grok (grok.com), x.ai, Midjourney (midjourney.com), Frame.io, CapCut (capcut.com), MiniMax (minimax.com) and Hailuo (hailuoai.com)). It doesn't read pages when they load. Only when you click "P", use a Prisma right-click item or save from the extension's popup, it reads up to 80 characters from the page's text box. If the box is empty, it reads up to 80 characters of the page title instead. When you click "P", it also notes the page's address. Titles and text boxes can describe what you're working on, so they may contain personal or confidential details. Prisma keeps the details from your last "P" click only for the current browser session. It uses them only to describe files in the names Prisma Hub suggests, including downloads from supported sites that Prisma names as they save (you can turn this off in the popup).
• When you save a file, the extension downloads it from the site that hosts it and sends Prisma Hub the file or its details: the file name, file type and up to 80 characters of page text. The file's web address and the page it came from are sent to Hub only if you've turned on Save source URL. Chrome asks before the extension reads files hosted on other sites.
• Original name and Prisma name saved inside your files (on by default). Prisma Hub saves each file's original name and its Prisma name inside the file. For PNG, JPG and WebP files it uses fields such as XMP and a comment; for all files it uses macOS file attributes. Hub also records them in its activity log on your Mac (with no web address unless Save source URL is on). If the original name is missing or meaningless, Prisma tries to take the name from the file's web address. When Save source URL is off, the address is used only for this and isn't kept. These details stay in the file, so they go with it whenever you share, upload or send it. To stop this, turn off Stamp original name & source into files in Prisma Hub Settings.
• Source address (off by default). If you turn on Save source URL in Prisma Hub Settings, Prisma Hub also saves the web address each file came from inside the file and in its log. Once it's on, the address goes with the file whenever you share it. It can show where you found a file, including private or time-limited links. You can turn it off again in Prisma Hub Settings.
• Both settings apply to files named after you change them. They don't remove details already saved in existing files.
• Kept on this computer. The extension keeps its settings, its pairing with Hub, the last suggested name (with its web address and original file name) and the last error in Chrome's storage on this computer.
• To stop, turn off naming in the popup, remove site access in Chrome's extension settings, or remove the extension. Hub's activity log stays on your Mac until you delete it.

Google Chrome is a trademark of Google LLC.

The Software connects to the internet only when you ask it to or configure it to, for example:

• Check for updates / Download update. Only when you click. Hub requests our release information and, if you choose, the installer. Our servers can see standard connection data such as your IP address, the Hub version in the request, and your operating system. There is no automatic check on launch.
• Project notifications. If you set up an outgoing notification address, Hub sends project-created notices to the address you choose, not to us.
• Adobe and other host apps. Plugins run inside those apps and talk to Hub locally. Adobe's own data practices are governed by Adobe's policies.

The 14-day Paid unlock uses your computer's local clock and is stored on your device. Nothing is sent to us when you start it.

e) Prisma Scanner (web)

Scanner runs in your browser. What you type or select is processed on your device. Scanner's tree extraction reads folder and file names only, in your browser. Please do not select folders containing sensitive or confidential client material.

• To grade filenames, Scanner downloads scoring profile data from a published Google Sheet. That request goes to Google (your IP address and browser details are visible to Google, as with any web request). None of your inputs are included.

f) Information we do not collect

We do not collect your files, your media, your project contents, your folder contents, or your Hub activity. We do not use advertising trackers, social media pixels, or session-replay tools.

Download sign-up (email before download)

To download Prisma Hub for Mac, you give us your email address. Adding your first name is optional. We send you an email with a link to confirm your address and deliver your download.

What we collect: your email address, your first name if you add it, whether you ticked the product-updates box, and a record of your choice. That record holds the time you signed up, the exact wording of the checkbox, whether it was ticked, and when you clicked the confirmation link. We don't store your IP address with your sign-up. Our server checks it briefly to limit repeated attempts and keeps that check only in memory for up to 10 minutes. Our hosting provider, Fly.io, may keep standard server logs that include IP addresses.

How we use it: to confirm your address, send your download link, and prevent spam sign-ups. We send Prisma product updates only if you ticked the box. The box is unticked by default. Every update email has an unsubscribe link, and you can unsubscribe at any time.

Who handles it: we send emails through Resend, our email provider. We store sign-ups on our license server (license.prismascanner.io, hosted on Fly.io) and in a Google Sheet in our Google Workspace account, and only Prisma can access that sheet. These providers process the data only on our behalf.

How long we keep it: if you don't confirm your address, we delete it after 30 days. If you confirm, we keep your email until you unsubscribe or ask us to delete it. When you unsubscribe, we delete your sign-up record and keep only your email address on a do-not-email list, so we don't email you again. If you never opted in to updates, we keep it for up to 2 years after your last download. We keep the consent record for as long as we keep your sign-up record. When we delete a sign-up from our server, we also delete its copy in our sign-up spreadsheet. If you ask us to delete your data, we remove everything except the do-not-email entry within 30 days.

We don't sell your information. We don't share it with anyone for their own marketing.

Your choices: to unsubscribe, use the link in any update email. To see, correct, or delete your sign-up data, email hello@prismascanner.io.

2. How we use information

• To provide and secure the website and tools.
• To respond to inquiries and provide support.
• To process orders, deliver and renew licenses, and prevent duplicate or fraudulent issuance.
• To understand which pages are useful and improve the site (aggregate analytics).
• To meet legal, tax, and accounting obligations.
• To send transactional messages about your purchase, license, or renewal. We do not send marketing email unless you ask us to.

Legal bases (EEA/UK visitors): performing a contract with you (orders and licenses); our legitimate interests (running, securing, and improving the site and responding to inquiries); compliance with legal obligations (tax and accounting); and consent where we ask for it (for example optional analytics tools).

3. Who we share information with

We share information only with service providers who help us run Prisma, and only as needed:

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, sale, or financing (with notice where required). We do not sell personal information and we do not "share" it for cross-context behavioral advertising.

4. International transfers

We and our providers are based in or operate from the United States and other countries. If you are in the EEA, UK, or Switzerland, your information may be transferred to countries with different data protection laws. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or our providers' certifications.

5. How long we keep it

6. Your rights and choices

Depending on where you live (for example the EEA, UK, California, Colorado, and other US states), you may have the right to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; and not be discriminated against for exercising your rights. You can also lodge a complaint with your local data protection authority or state attorney general.

To exercise a right, email hello@prismascanner.io from the address on file. We may verify your identity first and will respond within the time the law requires (generally 30-45 days). For payment, billing, and subscription data held by Lemon Squeezy, you can also contact Lemon Squeezy directly.

We do not sell or share personal information for targeted advertising, so there is nothing to opt out of in that respect. We honor browser-level opt-out signals such as Global Privacy Control for optional analytics tools we load through our cookie settings.

7. Children

Prisma is a professional tool and is not directed to children under 16. We do not knowingly collect their information. Contact us if you believe a child has sent us personal information and we will delete it.

8. Security

We use reasonable technical and organizational measures, including HTTPS on our website, signed licenses, and keeping product data on your device rather than on our servers. No method of transmission or storage is perfectly secure.

9. Changes

We will post updates on this page and change the "Last updated" date. For material changes affecting data we hold, we will give additional notice, for example by email to purchasers.

10. Contact

Chris Hamilton d/b/a Prisma, a Colorado sole proprietor
Colorado Springs, CO, USA
Email: hello@prismascanner.io