Legal
Last updated 15 August 2026
The short version. This website has no accounts, no contact forms, no advertising and no analytics. We set no cookies. The QUAY plugins run entirely on your own Mac and send us nothing about your projects or your footage. When you buy, our payment provider — not us — handles your payment details.
The controller for the processing described here is:
This policy covers the website at quayfleet.com and the QUAY plugins (Anchor, Swell and Trace).
This site is hosted on Cloudflare's network. Like any web host, Cloudflare processes technical request data — your IP address, the time of the request, the page requested, your browser's user-agent string and referring page. This is unavoidable in serving a website and is used to deliver pages and to protect against attacks and abuse.
The legal basis is our legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR; the corresponding provisions of the Swiss FADP). We do not use these logs to build profiles or to identify individual visitors. Cloudflare acts as our processor and retains this data for a limited period under its own retention rules.
We set no cookies and use no local storage for tracking. There is no consent banner on this site because there is nothing to consent to.
The site currently loads its typefaces from Google Fonts. This means your browser requests those font files from Google's servers, and your IP address is transmitted to Google in the process. No cookies are set by this request, but the connection itself is a disclosure to a third party, and we would rather it weren't. We intend to serve these fonts from our own domain, which will remove this entirely; this section will be updated when that happens.
We currently run no analytics of any kind. If that changes we will use a privacy-respecting, cookie-free tool and update this policy before switching it on.
Purchases are handled by a third-party payment provider acting as merchant of record. That provider collects and processes your payment details directly — we never see or store your card number. The provider is an independent controller for that processing and applies its own privacy policy, which is linked at checkout.
From a completed purchase we receive a limited set of order data: your name, your email address, your country (needed for tax), the product bought, and the licence key issued. We use it to:
The legal basis is performance of a contract for the first four, and legal obligation for the last.
When a QUAY plugin checks that your licence is valid, it sends your licence key and a device identifier to the licensing service, so that the two-machine limit can be enforced. It does not send your project files, your media, your file paths or anything about the work you are doing.
This matters more than the rest of this document, so it gets its own section. Anchor, Swell and Trace operate entirely on your own machine. They do not upload your footage, your project files, your folder structure, your timeline or your file paths anywhere. Trace reads paths from your disk in order to find missing media, and everything it learns stays on your computer.
If you email support@quayfleet.com, your message and address are processed to answer you. Mail to that address is forwarded through Cloudflare Email Routing to a Google-hosted mailbox, so both act as processors. We keep support correspondence as long as needed to resolve the matter and to handle any follow-up.
We do not sell personal data and do not share it for advertising. It is disclosed only to the service providers needed to run the business — hosting, payment processing, licensing and email — and to authorities where the law requires it.
Some of these providers are based in the United States, which means data may be transferred outside Switzerland and the EEA. Those transfers rely on Standard Contractual Clauses or an equivalent recognised safeguard.
Under the Swiss Federal Act on Data Protection and, where it applies, the GDPR, you can ask us to:
Email support@quayfleet.com and we'll answer within 30 days. There's no charge. Note that purchase records we're legally required to retain can't be deleted on request until that period expires.
If you think we've handled your data badly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or to the supervisory authority where you live if you're in the EEA or the UK.
If this policy changes materially, the date at the top changes and, where the change affects existing customers, we'll say so by email.