1. Data Controller
Lilian Bischung, entrepreneur individuel (EI), trade name LIROBI
5 rue de la Haute Vienne, 67510 Lembach, France
SIRET: 942 288 747 00010
Contact: contact@lirobi.com
2. Data We Collect
We collect the following categories of personal data:
Account data
- Name and email address
- Encrypted password
- License and payment status
Website usage data (only with your consent)
- IP address (used to approximate your country/region)
- Pages visited and navigation path on our website, including clicks on the buy buttons
- Device type, operating system, and browser
- UTM campaign parameters (if you arrive via a marketing link)
- A random visit identifier stored in your browser
Visit counting without consent
To count visits, each page load sends the page path and a one-way hash of your IP address and browser, which changes every day. Nothing is stored on your device and you cannot be identified from it.
Extension usage data
The extension sends usage events (for example: preview opened, device changed, Pro offer shown, screenshot exported) with a random installation identifier, the extension and editor versions, the editor name and the operating system. No code, file name or page content is sent. Nothing is sent when telemetry is turned off in your editor settings.
Feature suggestions and problem reports sent from the extension
Only when you click Send in the extension's "Suggest a feature" form: your text, the extension and editor versions, a random installation identifier, and your email address only if you give it for a reply. You may attach a screenshot: it is emailed to us and never stored on our servers. If you leave "Include diagnostic logs" ticked, the extension also sends what it recorded during the last 10 minutes (actions in the preview panel, errors, the device, and the address of the previewed site reduced to its domain). File paths and email addresses are removed before sending, and you can read the exact content in the form before sending. These logs are kept in memory only, on your computer, and are never sent without your click.
Payment data
Payment is processed entirely by Stripe. We do not store card numbers or banking details. We only retain the Stripe payment ID and transaction amount for accounting purposes.
On the Stripe checkout page, you can tick a box to receive news and offers from Mobile Preview. If you tick it and leave without paying, we receive the email address and name you entered, and we send you one reminder with a link to resume your checkout. We never send a second reminder, and none at all if you did not tick the box.
3. Legal Basis for Processing
- Contract performance (Art. 6.1.b GDPR): account management, license delivery, email communications related to your purchase.
- Consent (Art. 6.1.a GDPR): website analytics and navigation tracking. You may withdraw consent at any time via the cookie banner.
- Consent (Art. 6.1.a GDPR): promotional emails (product news, a reminder after sign-up, the one-time reminder about an unfinished checkout), given by ticking the box when you create your account or on the Stripe checkout page. The box is never ticked for you. Every promotional email contains an unsubscribe link, which takes effect immediately.
- Legitimate interest (Art. 6.1.f GDPR): security logging, fraud prevention, service stability monitoring, anonymous visit counting, and extension usage statistics (which you can turn off with your editor's telemetry setting).
- Legitimate interest (Art. 6.1.f GDPR): answering and fixing the problems you report through the extension's suggestion form, including the screenshot and diagnostic logs you choose to send. You can untick the logs and leave out the screenshot before sending.
- Legal obligation (Art. 6.1.c GDPR): retention of accounting records (invoices, payment references) as required by French law.
4. Data Retention
- Account data: retained for the duration of your account, then deleted within 30 days of account deletion.
- License and payment records: 10 years (French accounting obligation).
- Navigation and analytics data: 13 months maximum.
- Security logs: 12 months.
- Unfinished checkout reminders: the email address and date of the reminder, 3 years, so that we never send a second one.
- Feature suggestions sent from the extension: the text, the extension and VS Code versions, and your email address only if you chose to give it for a reply, 3 years. Diagnostic logs sent with a suggestion: 90 days. Screenshots: not stored on our servers, kept only in our support mailbox while the report is handled.
- Promotional emails sent: the email address, the email sent and its date, 3 years, so that we never send the same one twice.
- Unsubscribe list: kept as long as needed to honor your request.
5. Data Sharing and Sub-processors
We do not sell your personal data. We share data only with the following sub-processors, solely to provide the service:
- Stripe, Inc. — payment processing (USA, Standard Contractual Clauses apply)
- PulseHeberg SAS — website and database hosting (France)
- OVHcloud — email delivery (France/EU)
- Vercel, Inc. — test versions of the website (USA, Standard Contractual Clauses apply)
6. Data Security
We implement appropriate technical and organisational measures to protect your data, including: HTTPS encryption in transit, hashed passwords, HTTP-only JWT cookies, CSRF protection, and rate limiting on all authentication endpoints.
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing in certain circumstances
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interest
- Withdraw consent at any time (for consent-based processing)
To exercise any of these rights, contact us at contact@lirobi.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr.
8. Cookies and Tracking
We use a session cookie (auth-token) strictly necessary for authentication, which does not require consent. Analytics tracking (page views, navigation, visit identifier) is only activated if you accept it in our banner; you can change your choice at any time with the “Cookie settings” link at the bottom of every page. See our Cookie Policy for details.
9. Updates to This Policy
We may update this policy from time to time. The date at the top of this page reflects the latest revision. For significant changes, we will notify registered users by email.
10. Contact
For any questions regarding this privacy policy: