Your data, said plainly.

Last updated: 7 October 2026 · Version 2.1

1. Who is responsible

The data controller is Vlad TUDOR, trading as V LAB, 119 avenue Gabriel Péri, 92260 Fontenay-aux-Roses, France. Contact for anything privacy-related: support@vlab-studio.com.

This policy covers the website vlab-studio.com, orders and V LAB Club subscriptions, our email lists, emails with us, and the V LAB Studio plugin. It is written for the EU General Data Protection Regulation (GDPR) and the French Loi Informatique et Libertés.

2. Visiting this website

• Hosting. Our hosting provider, Cloudflare (named in the Legal notice), receives the technical data every website visit sends: your IP address, browser and device type, the page requested, the referring page and the time. It uses this to deliver the site and protect it from abuse. Legal basis: our legitimate interest in running a secure website.
• Fonts. The pages load their typefaces (Archivo and JetBrains Mono) from Google Fonts. Your browser therefore connects to Google's servers (fonts.googleapis.com and fonts.gstatic.com), which receive your IP address and browser details. Google's privacy policy applies. Legal basis: our legitimate interest in showing the site as designed.
• Animation library. The home page loads the GSAP animation library from cdnjs.cloudflare.com, a public code library run by Cloudflare. Your browser connects to it, which reveals your IP address and browser details to Cloudflare. Legal basis: our legitimate interest in showing the site as designed.
• Videos and the live template. The videos and the live template are served from this website. What you type into the live template stays in your browser. It isn't sent to us or to anyone else.
• Ad campaign tags. If you arrive from an ad link carrying campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the page keeps them in your browser's session storage (vlab_utm) and adds them to the checkout link, so we can tell which campaign led to an order. They contain no identifier, and the browser deletes them when you close the tab.

3. Ad pixels and your consent

When we run ads, the site can use the Meta Pixel (Meta Platforms Ireland Ltd.), the TikTok Pixel (TikTok Technology Limited, Ireland) and the Reddit Pixel (Reddit Netherlands B.V., the Netherlands, for people in the EEA and Switzerland; Reddit, Inc., USA, elsewhere) to see which ads bring people here and to measure our campaigns. They load only after you tap "Accept" on the cookie banner. Until then, nothing from Meta, TikTok or Reddit loads. The banner only appears while a pixel is switched on.

• What they collect once accepted: the pages you view, the referring page, your IP address, browser and device information, and these events: a page view, the pricing section coming into view, a tap on an edition's pre-order button or on a Club button (which one, and its price), a tap on a sign-up link, and a purchase (below). We switch off the Meta Pixel's automatic event detection, so it doesn't record other clicks. They set cookies in your browser, such as _fbp and _fbc (Meta), _ttp (TikTok) and _rdt_uuid (Reddit, plus _rdt_cid if you came from a Reddit ad), and keep a few values in your browser's storage for this site (for example TikTok's tt_sessionId and Reddit's _rdt_cfg). Their lifetimes are set by Meta, TikTok and Reddit and can run to several months.
• A purchase, on the thank-you page: after checkout, Lemon Squeezy sends you back to our thank-you page. If you accepted the pixels on this device, that page loads them once and tells them about your purchase: which edition and its price, in US dollars. It counts each order once: it takes the order number out of the page address before any pixel loads, and remembers in your browser's local storage that this order was counted (vlab_purchase_ followed by the order number), so a reload or a second visit doesn't count it again. The order number itself isn't sent to Meta, TikTok or Reddit. If you didn't accept, or rejected, the thank-you page loads no pixel at all.
• Legal basis: your consent (article 6(1)(a) GDPR and article 82 of the Loi Informatique et Libertés).
• Who decides what: for collecting this data on our site and sending it, we act jointly with Meta, with TikTok and with Reddit. What they do with it afterwards is governed by their own policies: Meta Privacy Policy, TikTok Privacy Policy and Reddit Privacy Policy.
• Your choice is remembered on this device for 6 months, in your browser's local storage (vlab_consent, which holds your answer, its date and which pixels it covers). After 6 months, or if you clear your browser data, we ask again. If we add a pixel later, we ask again before it loads. Storing this choice needs no consent, because it only remembers your answer.
• Changing your mind: use "Cookie choices" at the bottom of the home page, or the button below. Rejecting deletes the Meta, TikTok and Reddit cookies and stored values on this site and, if the pixels were running, reloads the page without them. From then on, the thank-you page doesn't load them either.

4. Checkout, orders and the Club

Checkout is run by Lemon Squeezy (Link, LLC, formerly Lemon Squeezy LLC, USA), our merchant of record and reseller. Lemon Squeezy collects your name, email address, billing country and address, payment details and, if you give one, your tax number. It processes them under its own Privacy Policy, to take payment, charge Club renewals, run the customer portal where you manage your subscription, prevent fraud and meet its tax obligations. We never see your card details.

Lemon Squeezy shares the order with us: your name, email address, country, the edition or Club option, the amount, your licence key and its activations, the status and renewal dates of a Club subscription, and the campaign tags described in section 2 if there were any. We use this to deliver V LAB Studio and Club packs, send you the delivery and service emails about your order (including a date change, if one happens), answer support requests, handle refunds and cancellations, and keep our accounts. Legal basis: performing our contract with you, and our legal obligations for accounting and tax.

Cancelling or withdrawing online

If you use the online form on the Refund policy page, we store five things: your name, the email address you used at checkout, your order number if you give it, what you're cancelling (your edition or the Club) and the date and time we received it. They are stored in Cloudflare Workers KV, a database run by Cloudflare, Inc., our hosting provider. The form sets no cookies and loads no pixels.

• What we use it for: to find your order, cancel it and refund it, to confirm by email that we received your request, and to be able to show when we received it. Nothing else.
• Legal basis: our legal obligation as a seller to accept a withdrawal and acknowledge it without delay (article 6(1)(c) GDPR), and performing our contract with you (article 6(1)(b) GDPR).
• How long: 5 years from the day we receive it, the general limitation period for claims under French law (article 2224 of the Code civil), then we delete it. The refund itself becomes part of your order record, kept as described in section 10.
• If you withdraw by email instead, your email is handled like any support email (section 6).

5. Our email lists: the Prompt Drop

If you sign up for the Prompt Drop on this website, we store three things: your email address, the date and time you signed up, and the consent text you agreed to, word for word, so we can show what you said yes to. They are stored in Cloudflare Workers KV, a database run by Cloudflare, Inc., our hosting provider.

• What we use it for: only to send you the Prompt Drop. We don't use your address for anything else, and we don't sell it or share it with advertisers.
• Sending: the emails are sent through an email-delivery service that acts on our instructions and receives your address only to deliver them.
• Unsubscribing: every email has an unsubscribe link. One click is enough.
• Deletion: we delete your address when you unsubscribe, or when you ask us at support@vlab-studio.com.
• Windows list: if you ask to hear when V LAB Studio runs on Windows, the same applies: we store the same three things and use them only to tell you when it does.
• Legal basis: your consent (article 6(1)(a) GDPR and article L34-5 of the French Code des postes et des communications électroniques). You can withdraw it at any time.

6. Support emails

When you write to support@vlab-studio.com or reply to a receipt or one of our emails, we receive your email address, your message and anything you attach. Mail to this address is forwarded by Cloudflare Email Routing (Cloudflare, Inc.) to a mailbox hosted by Google (Gmail). We use it to answer you. Legal basis: performing our contract, or our legitimate interest in answering questions.

Order and service emails (your download link, a date change, Club receipts and renewals) are part of your purchase, not marketing. We only send other emails if you've signed up for them (section 5).

7. The plugin on your Mac

V LAB Studio runs locally. Rendering, caption transcription and sound happen on your Mac, and your projects and videos are saved in folders on your Mac. With Edit my video, your clip is transcribed on your Mac: V LAB Studio doesn't upload it. We don't receive your prompts, your files or your videos, and the plugin contains no analytics or tracking. Here is everything that does leave your Mac, and where it goes:

• Your Claude conversation, to Anthropic. Anything you type or attach in Claude Desktop goes to Anthropic, as in any Claude conversation. So does what V LAB Studio's tools give back to Claude: for example preview frames of your video, the frames the AI art director checks before a render, with Edit my video the transcript of your clip (the words you said) and the clip's file path on your Mac, and, when Claude looks for an image you mentioned, small thumbnails of your most recent images in your screenshots folder, Desktop, Downloads and Pictures. This runs under your own Claude account and your own agreement with Anthropic (see Anthropic's Privacy Policy). We don't receive any of it.
• The licence check, to Lemon Squeezy. The first time you use V LAB Studio on a Mac, the plugin sends your licence key and a random instance name (for example vlab- followed by 8 random characters, never your Mac's name) to Lemon Squeezy's License API (api.lemonsqueezy.com) to activate it. After that, it sends your licence key and that activation's ID at most once a day to check it, and when you ask it to free the Mac. If you're in the Club, your Club key is checked the same way. Lemon Squeezy replies with the status of the key, your edition and details of the order. Legal basis: performing our contract (enforcing the activation limit of your edition).
• What the plugin keeps on your Mac: only what it needs. That is the activation ID and its random name, your edition, the key's status and the date of the last check, a one-way fingerprint of the key (never the key itself) and a one-way fingerprint of your Mac's hardware ID, so the activation can't be copied to another Mac. The fingerprints never leave your Mac. It doesn't keep your name or email address.
• Club packs. If you're in the Club, the plugin downloads each new pack over the internet. Like any download, this reveals your IP address to the server that hosts the packs. It sends none of your content.
• First-run setup. The first time it runs, the plugin may download the open-source components its render engine needs (for example the engine's packages and the headless browser it renders with) from their public download servers. Like any download, this reveals your IP address to those servers. It sends none of your content.

Your licence key (and your Club key, if you have one) is stored by Claude Desktop in its extension settings on your Mac.

8. Who receives data

• Cloudflare (hosting, the animation library, email forwarding, and the storage of our email lists and of online withdrawal requests) and Google (fonts, our mailbox), as service providers;
• the email-delivery service that sends the Prompt Drop, if you sign up;
• Lemon Squeezy, as merchant of record, for Club subscriptions and for licence checks;
• Meta, TikTok and Reddit, only if you accept the pixels (including the purchase event on the thank-you page);
• authorities, when the law requires it.

Anthropic receives data from you directly, under your own agreement with it, not from us. We don't sell or rent personal data.

9. Transfers outside the EU

Some of these providers are based in, or process data in, the United States or other countries outside the European Economic Area. These transfers rely on the safeguards the providers offer, such as the EU-U.S. Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses.

10. How long we keep data

• Order and subscription records: for as long as your licence or Club subscription is in use, and as long as French accounting and tax law requires (up to 10 years for accounting records).
• Online withdrawal requests: 5 years from the day we receive them, then deleted (section 4).
• Email lists: until you unsubscribe or ask us to delete your address.
• Support emails: up to 3 years after our last exchange.
• Your consent choice: on your device, for 6 months, unless you change it or clear your browser data first.
• Which order the pixels already counted (only if you accepted them): on your device, until you clear your browser data.
• Campaign tags: until you close the browser tab.
• Hosting logs and pixel data: for the periods set by those providers.

11. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, without affecting what was done before. For our emails, the unsubscribe link does it in one click. You can also give instructions on what happens to your data after your death. Write to support@vlab-studio.com. We'll answer within one month.

You can also complain to the French data protection authority, the CNIL, or to the authority in your own country.

V LAB Studio is not meant for children under 16.

12. Changes

If we change how we use data, we'll update this page and its date. If a change matters for something you've agreed to, we'll ask again.