This policy describes how Blackhateditors LLC (the "Company," "we"), publisher of the Black Hat Editor Tools plugin for Adobe Premiere Pro (the "Plugin"), processes your personal data, in compliance with Regulation (EU) 2016/679 (the "GDPR") and applicable data protection laws.
Scope. This policy covers the blackhateditors.com website,
the Plugin, and its license API (license.blackhateditors.com).
The training platform available on blackhateditors.com is a separate service with its own terms.
| Data | Details | Purpose |
|---|---|---|
| License Key | Stored hashed (SHA-256) on our servers; the plain key is shown only once when issued | Verify your right to use the Plugin |
| Machine fingerprint ("machineId") | A pseudonymous hexadecimal identifier derived from hardware characteristics — it does not directly identify you | Limit machines per license, tie activation to your device |
| Email address | If provided (purchase or trial) | Key delivery and recovery, license-related communications |
| License tier, activation dates, operating system, Plugin version | Support, anti-abuse, compatibility |
Legal basis: contract performance (Art. 6(1)(b) GDPR).
Retention: license lifetime, then 12 months. Invoices fall under legal accounting obligations (up to 10 years).
To prevent free-trial loops, when you request a trial we compute salted hashes (the salt never leaves our server) of your machine components, plus a "virtual machine" indicator. A machine already known is denied a second trial. These hashes are irreversible and serve no other purpose.
Legal basis: legitimate interest (fraud prevention, Art. 6(1)(f) GDPR).
Retention: maximum 24 months.
If you choose to link your license to a Google, Apple, or Facebook account: email, technical ID from the provider, and session tokens (session duration: 90 days). We never receive your password, contacts, or account content.
Legal basis: contract performance.
Retention: deleted upon your request; expired sessions purged automatically.
On first launch, the Plugin asks your consent. Without explicit positive response, nothing is sent. You can change your mind at any time in Settings → Privacy.
If you consent, every 30 minutes we receive an aggregated summary: names of tools opened and usage count over 7 days, your pseudonymous machine fingerprint, license tier, Plugin version. Never: content, transcriptions, sequence or project names, file paths, or addresses.
Legal basis: consent (Art. 6(1)(a) GDPR) — withdrawable at any time, with no effect on Plugin operation.
Retention: 24 months.
If you send us feedback via the built-in widget: your rating, category, message, and your email if you enter it (optional), your Premiere Pro version, and the ~250 last lines of the Plugin's technical log to help us diagnose. These logs may contain local file paths from your machine — do not send feedback if that concerns you, or contact us to request deletion.
Legal basis: consent (submission is a voluntary act).
Retention: 24 months.
At startup, the Plugin queries our server to check for a new version. This request contains no personal data; like any web request, your IP address briefly appears in our hosting provider's technical logs (short duration, managed by Hostinger).
Payments are processed by a third-party payment provider, identified on the purchase page at the time of purchase. We never see your card number — it is entered directly with the provider. We receive only your email, the product purchased, and a transaction reference, so we can issue your license key.
Depending on the provider chosen, they act either as official reseller ("Merchant of Record" — they are then the seller and handle billing and tax) or as a simple payment processor (billing then handled by us). Their identity, exact role, and link to their privacy policy are specified on the purchase page.
The site distinguishes three data uses, and none occur without your knowledge.
a. Local storage, no cookies or third parties. The site stores in your browser (localStorage)
your display language, your client-area session if you log in, your cookie choice, and the source through which you first
arrived (utm_* parameters, gclid, fbclid, or referrer domain). This data never leaves your browser and is read by no
third party.
Legal basis: legitimate interest (site operation and security); contract for the session.
Retention: 90 days for arrival source.
b. Audience measurement without cookies. We use Umami, a self-hosted analytics solution
on our own servers. It sets no cookies, creates no persistent identifiers, and does not allow cross-site
tracking. It counts page views and actions ("a visitor clicked Free Trial"), nothing more.
Legal basis: legitimate interest — strictly necessary audience measurement, exempt from consent per CNIL guidelines.
Retention: 13 months.
c. Advertising measurement — subject to your consent. If we run ads, we need to know which ad led to a purchase. This uses Google Analytics 4 and the Meta pixel, which set cookies and transmit data to Google LLC and Meta Platforms Inc. None of these scripts load until you click "Accept" in the banner shown on your first visit. Refusing is a click, exactly like accepting, and has no consequence for site or Plugin use.
We also transmit to these platforms, from our server, that a purchase occurred, with your email in
hashed form (SHA-256) — never plaintext — to tie the sale to the relevant campaign. This transmission only
happens if you have consented.
Legal basis: consent (Art. 6(1)(a) GDPR), withdrawable at any time via the "Cookies" link at the bottom of this page.
Retention: per Google and Meta policies (13 to 24 months).
Finally, like any web request, your IP address briefly appears in our hosting provider's technical logs. The site's fonts are loaded from Google Fonts, which exposes your IP to Google LLC during the load.
The Plugin's AI functions (transcription, B-roll generation, images, videos, asset search) use your own accounts with third-party providers (e.g., OpenAI, Azure, Google, Anthropic, KIE, Pexels, Pixabay, GIPHY…).
Possible evolution. If we one day offer a "credits included" plan where AI calls would pass through our infrastructure, this policy will be updated before that option is enabled, and it will be clearly presented as such. Nothing will change silently.
| Provider | Role | Location |
|---|---|---|
| Hostinger International Ltd | Hosting the website, license API, and database | Servers in Paris, France (EU) |
| Google LLC | Google login if you use it (§ 1.3) · website fonts (§ 1.8) | Standard contractual clauses |
| Apple Inc. · Meta Platforms Inc. | Only if you use Apple or Facebook login (§ 1.3) | Standard contractual clauses |
| Resend | Sending emails related to your license and account | Standard contractual clauses |
| Payment provider (third-party) | Purchase transactions (§ 1.7) | Specified on purchase page |
| Google LLC · Meta Platforms Inc. | Only if you have consented: advertising measurement on the site (§ 1.8c) | Standard contractual clauses |
No data is sold or rented. No third-party analytics tool is integrated into the Plugin — the advertising measurement described in § 1.8c concerns only the website, and only after your consent.
Transfers outside the EU: we make none for license and telemetry data. AI providers you configure yourself (§ 2) are your direct relationship.
In case of a data breach posing risk to your rights, we will notify the CNIL within 72 hours and affected individuals shortly thereafter (Arts. 33 and 34 GDPR).
Under Articles 15–21 of the GDPR, you have rights of access, rectification, erasure, restriction, portability (JSON export on request), objection to legitimate-interest processing, and withdrawal of consent at any time (telemetry: directly in Plugin Settings).
To exercise them: privacy@blackhateditors.com. We respond within 30 days. Erasing license data renders the license unusable (with no implicit refund — see the Terms).
You may also file a complaint with the CNIL (www.cnil.fr) or your country's data protection authority.
The Plugin uses no cookies. The license API uses none for end users (only our internal admin tool, non-public, uses a technical session cookie).
On the website, Umami audience measurement works without cookies. The only cookies set are from Google Analytics 4 and the Meta pixel, and only after you click "Accept" (§ 1.8c). Unless you have responded or refused, these scripts are never loaded.
You can change your choice at any time:
The Plugin is intended for professionals and creators; it is not designed for anyone under 15, and we do not knowingly collect data about minors.
For material changes to this policy, active license holders will be notified by email and/or via the Plugin before the change takes effect, and version history will remain accessible.
Privacy: privacy@blackhateditors.com
Support: support@blackhateditors.com