Privacy policy
Last updated: 29 October 2026. This policy covers Action Converter (“the service”) at senyilabs.com/action-converter, made by Senyi Labs.
Who we are
Senyi Labs, Norway, is the controller of the personal data described here. Contact: the contact form (topic Privacy).
The short version
- Your actions files are converted in memory and never stored. We keep only a fingerprint (SHA-256 hash) of files you converted, so you can download them again for free.
- You sign in with a code sent to your email address. There is no password.
- Payments are handled by Stripe. We never see card details.
- To stop licences being shared, we record roughly where sign-ins come from: a scrambled (hashed) form of your network address and your country, kept for 8 days.
- No advertising, no tracking cookies, no selling of data.
What we store, and where
Everything is stored on Cloudflare, in Senyi Labs’ account (Cloudflare Workers and Durable Objects).
| Data | Why | How long |
|---|---|---|
| Your email address and the date you first signed in | Your account and licence | Until you ask us to delete it |
| Fingerprints (SHA-256 hashes) of the files you converted, the date, and which purchase or plan paid for each | Free re-downloads, and so each $9 purchase pays for one file | Until you ask us to delete your account |
| Sign-in sessions: a hashed session token and when it was last used (in a cookie in your browser, the token itself) | Keeping you signed in; at most 3 browsers per licence | Until you sign out, or 90 days without use |
| Sign-in codes (hashed), valid for 15 minutes | Signing in | Deleted when used or expired |
| Activity records: code requests, sign-ins and conversions, each with a hash of the network part of your IP address (not the address itself) and your country | Detecting licence sharing and abuse; rate limits | 8 days |
| Your plan as last checked with Stripe | So the page doesn’t ask Stripe on every request | Refreshed at least hourly; kept with your account |
| Sharing alerts sent to us (for example “sign-ins from 7 networks in 7 days”) and your licence ID | Reviewing possible licence sharing | Until resolved, at most 1 year |
Who receives data
- Cloudflare (hosting): runs the service and stores the data above. Cloudflare may process it in the regions where its network runs.
- Google (Google Workspace): sign-in codes and our internal alerts are sent from our senyilabs.com email account, so your email address and the code pass through Google’s mail service.
- Stripe (merchant of record through Stripe Managed Payments and Link): handles purchases, payment details, receipts and taxes under its privacy policy. To check your purchases and plan, we look up your email address in Senyi Labs’ Stripe account.
Cookies
One cookie, ac_session, keeps you signed in. It is needed for the service, is only sent to senyilabs.com/action-converter, and is removed when you sign out. No analytics or advertising cookies.
Logs
Cloudflare keeps short-lived request logs (for example which address was called and when, and error messages), which Senyi Labs can read to fix problems. They are kept for a few days.
Your rights
You can ask for a copy of your data, for corrections, or for your account to be deleted, under the GDPR. Use the contact form with the topic Privacy. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).
Changes
We’ll update this page when the service’s data handling changes, and note the date at the top.