Privacy

Who we are

Lucille and this site are made by Apple Eyes, run by Matthew Walker, in the UK. We decide what's collected and why. Questions or requests: privacy@weareappleeyes.com.

Lucille's daily check-in

Once a day, Lucille tells us it's installed so we can count how many people use it, and on which systems. It sends these six things, plus a format number (always 1), and nothing else:

• Nothing is sent until Lucille's welcome card has shown you the switch, so you can turn it off before anything leaves your computer.
• Like any web request, it carries a User-Agent header. Lucille sets it to just "Lucille" on macOS (Windows sends "juce"), so it doesn't name your DAW or its version.
• Turn it off any time in Lucille: Settings → Privacy. Scanning Lucille in a DAW never sends anything.
• We scramble the install ID before storing it, and we never read or keep your IP address. We keep one row per install, and delete it once that install hasn't checked in for 13 months.
• Our reason (lawful basis) is legitimate interest: knowing how many people use Lucille, and on what, tells us what to support. The data is only used for counting and is never shared or sold.

Checking for new songs and updates

Since 12 October 2026 (Lucille 1.0), Lucille fetches two small public files from this site once a day while its window is open: the latest Lucille version and the list of Apple Eyes songs. The request carries no ID and nothing about you. Like any web request, Cloudflare sees your IP address to answer it, but nothing is kept. It's a separate switch in Settings → Privacy.

This website

No cookies and no visitor logs. We count page views, downloads and clicks on streaming links, never per visitor. A download or click is recorded with only what was clicked (the system, the version, the song or service), whether it came from this site, from Lucille or from its manual, and which post or listing linked here, if any. Nothing about you is recorded. We read these as daily totals (for example "120 macOS downloads on Tuesday"), and Cloudflare deletes the records after about three months. The site runs on Cloudflare, which acts as our processor: it handles your requests on our behalf and doesn't keep them for us.

Reports you send us

When you send a bug report or feature request from Help, it becomes an issue in our private tracker on GitHub, which is based in the United States. The issue holds what you wrote, the system details you gave (your system and Lucille version, if you filled them in) and, from Lucille, your current sound if you chose to attach it, and says only whether we can reply to you.

• Your email address is optional. If you leave it, it's kept on this site's database at Cloudflare, only so we can email you about your report: a receipt when it arrives, our replies, and a note when it's fixed. It isn't put on the GitHub issue.
• To send those emails, we pass your address and the email to Resend, the service that delivers them for us. Resend acts as our processor: it handles them only on our behalf. It's based in the United States, so they may be stored there, under Resend's data protection terms.
• Alongside it we keep the report's reference, its issue number, a random code that lets your replies find the report, and when it was sent and closed.
• A report sent from inside Lucille can also carry your current sound (the settings of the patch you're playing), but only if you tick Attach my current sound. It's off unless you tick it. The sound goes on the GitHub issue with the rest of the report.
• A report sent from inside Lucille also carries Lucille's random install ID, the one its check-in uses, so that one copy of Lucille can send at most 5 reports a day. We keep only a keyed hash of it, never the ID itself, and only for the 5-a-day limit: we delete the hash the day after the report is sent (UTC), so the report can't be linked to the check-in's record.
• If you reply to one of our emails, your reply is added to the issue, without the email you quoted and without your address.
• We delete your address 90 days after your report is closed. If we reopen it, we keep the address, and the 90 days start again when it's closed again. The issue itself stays in the tracker, without it.
• Before a report is sent from this site, Cloudflare Turnstile checks in your browser that a person is sending it. It loads only once you start filling in the form, and all we get back is whether the check passed.
• As with the rest of the site, we record no IP address, user agent or cookies with a report.
• Our reason (lawful basis) is legitimate interest: fixing what you report, and answering you if you asked us to.

The mailing list

If you ask to be emailed when a new Apple Eyes song comes out, your email address goes to Kit, the service that sends our emails. Submitting the form is your consent. Kit then sends a confirmation email, and you're only on the list once you've clicked it. We only email you when a new song and its patches are out, and every email has an unsubscribe link. Kit is based in the United States, so your address may be stored there, under Kit's data protection terms.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, or to stop using it, by emailing privacy@weareappleeyes.com. Because the install ID is scrambled, we usually can't find a check-in from your request alone; switching the check-in off stops it, and the row is deleted after 13 months. If you're unhappy with how we handle your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

For help with Lucille itself, see Help.