Privacy Policy

What Data We Collect

When Using the StylusX Application

StylusX is an offline drawing application. We do not collect or store any personal data from users within the software itself.

There is no account creation or login required to use StylusX.

Full Trust Capability

StylusX requires the Microsoft Store “Full Trust” capability to enable certain core features, including:

• Reading and writing files in user-selected locations outside the standard app sandbox.
• Accessing system-level performance APIs for better graphics rendering and resource management.
• Ensuring seamless local auto-save and recovery of artwork files in case of unexpected shutdowns.

This extended access is used solely to improve the application’s functionality and user experience. StylusX does not use Full Trust to collect personal data, monitor user activity, or perform any action unrelated to its drawing features.

Local Auto-Save

StylusX automatically saves your artwork locally on your device at regular intervals to prevent data loss. These auto-saved files remain on your device only and are never uploaded or transmitted to any server.

Error and Crash Reporting (Sentry)

We use a third-party service called Sentry (operated by Functional Software, Inc., USA) to automatically detect and log software errors or crashes.

This service may collect the following anonymous technical data for diagnostic purposes:

• Device type and model, CPU and GPU details (including supported features), RAM size and usage.
• Operating system name, version, and build.
• Language and region settings, time zone.
• Battery and power status (if applicable), screen resolution, and display parameters.
• Technical runtime and environment details (e.g., Unity version, rendering settings, thread information).
• Anonymous session or event IDs for troubleshooting purposes.
• Approximate location (country/city) based on IP address.

No personally identifiable information (PII) such as name, email address, stored files, or artwork content is collected or transmitted to Sentry automatically.

Sentry complies with GDPR. When applicable, data is processed within the EU data region. For more information, please refer to Sentry’s Privacy Policy: sentry.io/privacy/

Manual Error Reporting

If the user chooses to submit a manual report from within the application, they may optionally provide:

• Email address (for follow-up communication) — collected only if the user actively checks the consent box and enters their email.
• Screenshot or image (for technical context) — collected only if the user actively checks the consent box and uploads an image.

Both the email address and any uploaded images are transmitted securely and used solely for troubleshooting the reported issue. These items are never collected automatically and are deleted once they are no longer needed for resolving the issue.

When Using Our Website

• We use Google Analytics, a web analytics service provided by Google LLC, to collect and analyze information about how visitors use our website. Google Analytics uses cookies to gather data such as your IP address (anonymized before storage), browser type, device information, and pages visited. This information is used solely for statistical purposes to improve our website and is not used to identify you personally. The use of Google Analytics is based on your consent under Article 6(1)(a) GDPR, which you can withdraw at any time via the cookie settings on our website.
• Google Tag Manager – We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage the tracking codes on our website. Google Tag Manager itself does not set cookies. The statistics tags it manages only run after you give your consent in the cookie banner.
• Microsoft Clarity – With your consent, we use Microsoft Clarity (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) to understand how visitors use our website. Clarity records interactions such as clicks, scrolling and mouse movements, and creates heatmaps and session recordings. Text you type into fields is masked. Clarity uses cookies (for example _clck, _clsk and CLID). Data may be transferred to Microsoft Corporation in the United States, which is certified under the EU–US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time via the cookie settings.
• Information submitted voluntarily by users via the contact form (such as name, email address, and message content), used solely to respond to inquiries.
• Google Analytics (analytics.google.com) – to analyze website traffic and usage patterns. Google Analytics collects anonymized usage data to help us improve the performance and usability of our website. Data may be transferred to servers in the United States, and Google is certified under the EU–US Data Privacy Framework.
• LiteSpeed Cache – This site utilizes caching to facilitate a faster response time and better user experience. Caching potentially stores a duplicate copy of every web page that is on display on this site. All cache files are temporary and are never accessed by any third party, except as necessary to obtain technical support from the cache software vendor. Cache files expire on a schedule set by the site administrator, but may easily be purged by the administrator before their natural expiration, if necessary. We may use LiteSpeed Cache services, which may store temporary data in visitors’ browsers to improve website performance.
• Elementor – This site uses Elementor, a website builder plugin for WordPress, to create and manage the layout and design of the site. Elementor may collect technical and usage data such as browser type, device type, and interactions with the site in order to ensure proper functionality and improve the user experience. Some Elementor features may use cookies or local storage in the visitor’s browser. No personal data is stored by Elementor unless explicitly provided by the user.
• Public IP Usage for Price Display – To show a price in your local currency, your browser sends a request to the IP geolocation services ipwho.is and ipapi.co (Kloudend, Inc., USA). These services receive your IP address and return only your country or region. We do not store the result or link it to other data, and it is not kept after your visit. The legal basis is our legitimate interest in showing correct local prices (Art. 6(1)(f) GDPR). For ipapi.co, data may be processed in the United States.
• Burst Statistics (cookieless) – stylusx.com also uses Burst Statistics without cookies. See the description in the support site section below.

When Using Our Support Site (support.stylusx.com)

• Contact form and problem report – When you send us a message or report a problem, we process the details you enter: your name, email address, topic or StylusX version, device and pen, the description of the problem, the steps to reproduce it and, if you choose to attach one, a screenshot. We use this data only to answer your request and to fix the problem. Your message is stored in our website database and sent to our mailbox (info@stylusx.com for messages, support@stylusx.com for problem reports). You also receive an automatic confirmation email. The legal basis is Art. 6(1)(b) GDPR (answering your request) and Art. 6(1)(f) GDPR (our legitimate interest in improving StylusX).
• Google reCAPTCHA – To protect our forms from spam and bots, we use Google reCAPTCHA v3 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA only loads after you allow it in the cookie banner (category “Marketing”) or by clicking the notice in the form. It then checks in the background whether the form is filled in by a person, using data such as your IP address, browser and device information, the time you spend on the page and mouse movements, and it sets the _GRECAPTCHA cookie. This data is sent to Google and may be transferred to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time via the cookie settings. Without your consent you cannot send the form, but you can always write to us directly at support@stylusx.com. More: Google Privacy Policy.
• Burst Statistics (cookieless) – We count visits to stylusx.com and support.stylusx.com with Burst Statistics, which runs on our own servers. It works in cookieless mode: it stores nothing on your device and does not use a fingerprint. Visits are grouped with an anonymous daily hash, so you are not recognised across days. No data is sent to third parties. The legal basis is our legitimate interest in understanding how our websites are used (Art. 6(1)(f) GDPR).
• Local storage in the Documentation – The Documentation remembers which articles you have already opened. This list is saved only in your browser (local storage) and is never sent to us. You can delete it at any time by clearing your browser data.
• Fonts and content – All fonts are hosted on our own server. Apart from Google reCAPTCHA on the forms (only with your consent), the support site does not load content from third parties and does not use advertising cookies.
• Cookie consent – Your cookie choice is saved for stylusx.com and support.stylusx.com together, so you only need to choose once.

Hosting and Server Log Files

Both websites are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit them, the server automatically logs technical data such as your IP address, the date and time, the page requested, the referring page, and your browser and operating system. This is necessary to deliver the websites and keep them secure (Art. 6(1)(f) GDPR). Log files are deleted automatically after a short period.

Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) – for statistics cookies and tools (Google Analytics, Microsoft Clarity) and for Google reCAPTCHA on our support forms. You can withdraw your consent at any time via the cookie settings.
• Contract and requests (Art. 6(1)(b) GDPR) – to answer your messages and support requests.
• Legitimate interest (Art. 6(1)(f) GDPR) – to keep our websites and app secure and working, to fix errors, to count visits without cookies, and to show local prices.
• Strictly necessary storage (§ 25(2) No. 2 TDDDG) – for cookies and local storage that are needed for a feature you use, such as saving your cookie choice, your language or your reading progress in the Documentation.

Data Storage and Retention

• No user profiles or databases are maintained.
• Error reports collected via Sentry are anonymized and automatically deleted after a limited period.
• Emails sent via the contact form are stored only as long as necessary to respond to the inquiry.
• Messages and problem reports sent via the support site are stored in our website database and mailbox only as long as needed to resolve the request, unless legal retention periods apply.
• Burst Statistics data on both websites is anonymous and stays on our own servers.

Your Rights Under GDPR

As a data subject, you have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erase data (“right to be forgotten”) (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7 GDPR)

Lodge a complaint with the relevant supervisory authority

To exercise your rights, contact: info@stylusx.com

Third-Party Services

We use the following third-party services:

• Sentry (sentry.io) – for error tracking and crash reporting
• FreeImage This product uses FreeImage, © 2003–2021 by the FreeImage team, licensed under the FreeImage Public License v1.0. freeimage.sourceforge.io
• Google Analytics and Google Tag Manager (Google Ireland Limited) – website statistics, only with your consent
• Microsoft Clarity (Microsoft Ireland Operations Limited) – website statistics and heatmaps, only with your consent
• ipwho.is and ipapi.co – country detection for local prices
• IONOS SE – website hosting
• Google reCAPTCHA (Google Ireland Limited) – spam protection on the support forms, only with your consent

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL encryption for all data transmission
• Access controls to limit who can access data
• Regular system updates and backups

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. The latest version will always be available at: stylusx.com/privacy-policy

Microsoft Store

StylusX is distributed exclusively through the Microsoft Store. Any personal information related to purchases, billing, or Microsoft accounts is handled directly by Microsoft and is subject to Microsoft’s Privacy Policy.

We do not receive or process any personal data from Microsoft related to your identity, payment details, or account activity.

For more information, please refer to: privacy.microsoft.com

Data Retention

• No user profiles or centralized databases are maintained.
• Error reports (Sentry): deleted automatically after a limited period.
• Contact form emails: retained only as long as necessary to respond to the inquiry.
• Analytics data: retained according to the retention period set in Google Analytics, as per your consent.
• Support messages and problem reports: retained only as long as necessary to resolve the request.
• Microsoft Clarity: retained according to Microsoft’s retention period, as per your consent.
• Server log files: deleted automatically after a short period.

Operator Information