Privacy Policy

This page explains what data ls.graphics collects, why, who else handles it, and what you can do about it. In force from 21 October 2026; last updated 21 October 2026.

Who we are

ls.graphics is run by SP Latypov Ruslan, a sole proprietor in Armenia (founder: Ruslan Latypov), for visitors from all over the world. We decide why and how your data is used, which makes us the controller. Write to info@ls.graphics with any question or request about your data.

We follow the law of the Republic of Armenia on the protection of personal data. For visitors in the European Economic Area and the United Kingdom we also follow the GDPR and the UK GDPR.

What we collect

Account data: your email, your name and picture if you add them or sign in with Google, a user ID, and your password if you sign up with email.
Plan and payment data: your plan, your orders, team membership and a payment customer ID. Card details go to Paddle, not to us.
Your work: the scenes you save in the editors and the pictures and videos you add to them.
What you send us: your messages in the chat and by email, and your email if you subscribe to the newsletter.
Usage data: pages you view, clicks, device, browser, approximate location and IP address, collected by the analytics services below and by our hosting.

We get this from you, from your browser, and from the services below. We do not collect more than the site needs to work.

Why we use it, and on what basis

To provide your account, the editors and your subscription, and to take payments. Basis: the contract between you and us.
To keep the site secure, prevent abuse and answer your messages. Basis: our legitimate interest.
To see how the site is used (Google Analytics, Yandex Metrica) and to measure our ads (Pinterest). Basis: our legitimate interest in understanding and improving the site and our advertising. You can object, see Cookies and Your rights. We do not show a cookie banner today.
To send our newsletter. Basis: your consent, which you give by subscribing and can withdraw at any time with the unsubscribe link or in your profile.
To keep tax and accounting records and meet other legal duties. Basis: legal obligation.

An account and the data for the contract are needed to sign in and buy; without them we cannot provide those. Everything else is optional. We make no decisions about you by automated means that have legal or similarly significant effects.

Services that handle your data

These services process data for us or alongside us. Each has its own policy, linked below.

Firebase Authentication (Google)

Data: Your email address, your name and picture if you add them or sign in with Google, a user ID, and your password if you sign up with email. A copy of who is signed in is kept in your browser.

Why: To create your account and sign you in. Your account record (plan, orders, team) is kept in Google's Firestore database.

Transfers: Google says it follows the EU-US, UK and Swiss Data Privacy Frameworks. Firebase Authentication runs from data centres in the United States.

Paddle

Data: Your payment details, billing address and email at checkout, which Paddle handles; we receive your subscription and order status and a customer ID. Paddle also runs the reminders about failed payments and cancellation (Paddle Retain).

Why: To take payments, issue invoices and manage subscriptions. Paddle sells to you as the reseller (merchant of record) and handles tax and invoices.

Transfers: Paddle says it uses Standard Contractual Clauses for transfers from the UK and the EEA.

Google Analytics 4

Data: Pages you view, what you click, your device, browser and approximate location, and an identifier stored in a cookie.

Why: To see how the site is used and to improve it.

Yandex Metrica

Data: Pages you view, clicks, scrolling and link clicks, your device, browser and approximate location, and an identifier stored in a cookie. With Webvisor on, also a recording of how you use the page: mouse movement, clicks, scrolling and what the page showed. Counter 32296809.

Why: To see how the site is used, which pages work, and where visitors get stuck.

Transfers: Yandex says it uses Standard Contractual Clauses for data of EEA users sent to Russia.

Pinterest tag and Conversions API

Data: That you visited a page or signed up, a Pinterest click ID, your IP address and browser details, and your email and user ID as a SHA-256 hash.

Why: To measure our Pinterest ads.

Transfers: Pinterest says it is certified under the EU-US, UK and Swiss Data Privacy Frameworks and uses Standard Contractual Clauses.

Rewardful

Data: A cookie that remembers the referral link you arrived from, and your purchase if you buy after it.

Why: To credit the person who recommended us in our referral program.

Sendy

Data: Your email address and whether you are subscribed.

Why: To send you our newsletter if you subscribe, and to unsubscribe you. Sendy is software that runs on our own server, so no outside company receives your email for this.

SendGrid

Data: The email addresses of the team owner and of a person invited to a team, and the invitation text.

Why: To send team invitations by email.

Chaport

Data: What you write in the chat and any contact details you give there, plus technical details Chaport collects. It loads only when you open the chat.

Why: To answer your questions in the support chat.

Bunny CDN

Data: Your IP address and browser details when it delivers images and videos to you.

Why: To load pictures and videos fast.

Directus

Data: Your IP address and browser details when the site loads its content and files. It holds our catalog and articles, not your account.

Why: To store and serve the catalog, guides and articles.

Vercel

Data: Your IP address, browser details and the pages you request, in server logs.

Why: To host the site and keep it secure and running.

Transfers: Vercel says it is certified under the EU-US, UK and Swiss Data Privacy Frameworks and uses Standard Contractual Clauses where required.

Our servers and mckp.live

Data: Your user ID and email, your plan and purchases, the scenes you save in the editors and the pictures and videos you add to them.

Why: To run your account, your subscription and the editors (Static, Live Mockups, 3d Studio and the Figma plugin).

We share your data only with these services and where the law requires it. We do not sell your personal information and we do not share it for cross-context behavioural advertising, other than the Pinterest ad measurement described above.

Cookies and local storage

The site keeps a few things in your browser to work. The analytics, advertising and referral services above add their own cookies and identifiers; see their policies. We do not show a cookie banner at the moment. To refuse them, block cookies and site data in your browser or use a tracking blocker, and the site stays usable, though staying signed in then stops working. Each service also offers its own opt-out, and you can ask us at info@ls.graphics.

theme (local storage): Light or dark mode.
lsAuthUser (local storage): Who is signed in (ID, email, name, picture, sign-in method), so the header shows you at once.
Firebase session (firebaseLocalStorageDb, firebase:authUser…) (IndexedDB or local storage): Your sign-in session, set by Firebase.
cachedAvatarUrl, cachedAvatarData (local storage): A copy of your profile picture.
resetPasswordEmail (local storage): The email you asked a password reset for, while you finish it.
catalog:featured (local storage): Whether the catalog shows Featured.
tabs:…, tab:… (local storage): The catalog tab you last chose.
lsConnectToolsModalShown:… (local storage): That the connect-your-tools note was shown to your account.
pastDueBanner:dismissed, lsDialogChunkReload (session storage): That you closed a payment notice, and that a dialog was reloaded once. Both end with the tab.
_epik (cookie, 30 days): The Pinterest click ID, if you arrive from a Pinterest ad.

We do not use Yandex Metrica's Webvisor session recording. Page views, goals, click maps and link tracking run on every page.

How long we keep it

Account and plan data: while your account is open, and deleted when you delete the account (see below).
Payment, invoice and tax records: kept by Paddle, as the reseller, for as long as it needs them for its relationship with you and the law; we keep the order records we need for our accounts as long as the law requires.
Newsletter: until you unsubscribe or delete your account, which unsubscribes you.
Chat and email messages: for as long as needed to answer you and deal with any follow-up.
Google Analytics: for the period set in our property, 2 or 14 months. Yandex Metrica and Pinterest keep data under their own policies; Pinterest says it keeps log data for about 25 months.
Server logs at our host: for the time Vercel keeps them under its policy.

International transfers

We are in Armenia and our providers work in other countries, including the United States and, for Yandex, Russia. When we or they move data of people in the EEA or the UK out of it, the safeguards are the ones each provider states, shown on its card above: the EU-US, UK and Swiss Data Privacy Frameworks for Google, Pinterest and Vercel, and Standard Contractual Clauses for Paddle, Pinterest, Vercel and Yandex. For other providers, see their own policies.

Your rights

You can ask us for a copy of your data, to correct it, to erase it, to restrict how we use it, to receive it in a portable format, and to object to our use of it, including for analytics and advertising measurement. Where we rely on your consent, such as the newsletter, you can withdraw it at any time. If you are in the EEA or the UK you can also complain to your data protection supervisory authority; in Armenia, to the authority for personal data protection. We will answer your request within 30 days. Email info@ls.graphics.

If you live in California, you have the right to know what we collect and why (this page is that notice), to correct and delete it, and to opt out of its sale or sharing. We do not sell personal information, and we do not treat people differently for using these rights.

Deleting your account

You can delete your account in your profile. When you do, we cancel your active subscriptions at once, delete your sign-in account (email, name, picture), delete your account record (plan, orders, team membership and invitations, and referral records), release your seat in a team you belong to, unlink the members of a team you own, and unsubscribe your email from the newsletter.

This does not erase what others hold: Paddle keeps payment and invoice records as the reseller and the law requires; scenes and files you saved on mckp.live stay there; and the analytics services, the chat, and the unsubscribed entry of your email in our newsletter software keep what they have until they remove it under their own policies and our requests.

To have everything else erased, write to info@ls.graphics and we will do it within 30 days, except what we must keep by law.

Children

ls.graphics is not directed to anyone under 16. We do not knowingly collect data from them. If you think a child has given us theirs, write to info@ls.graphics and we will delete it.

Changes

When this policy changes we update this page and its date. For a big change we will tell you in the way we can reach you.

Contact

SP Latypov Ruslan, Armenia. Email: info@ls.graphics.