• Home
  • Products
    Nobe OmniScope Live-Pack OmniScope for iPad Nobe Display Nobe LutBake False Color Nobe Color Remap
  • Resources & Support
    License Videos Docs & FAQ
  • Store Downloads Blog Contact

Privacy Policy

Effective date: 28 October 2026

This policy explains how Time in Pixels processes personal data when you visit timeinpixels.com, buy or license our products, contact us, subscribe to communications, or use our desktop and iPad applications, including Nobe OmniScope.

Who controls your data

The controller is Tomasz Huczek, trading as Time in Pixels, Nowy Świat 7a/1, 32-020 Wieliczka, Poland, NIP 5492253464 ("Time in Pixels", "we", "us").

Questions and data-rights requests can be sent to contact@timeinpixels.com.

At a glance

  • We use data needed to provide products, manage licences, support customers, secure our services, meet legal duties and, where you choose, send marketing or collect product analytics.
  • Nobe OmniScope desktop product analytics are optional and off by default. They use a random installation identifier and do not include your media, paths, source names, addresses, URLs, report content, account details or licence key.
  • We do not sell personal data. We disclose it only to service providers, independent controllers such as our merchant of record, professional advisers, authorities when legally required, or a successor to our business.
  • You may have rights to access, correct, erase, restrict, object to or obtain a copy of your data, and to withdraw consent at any time.

What we process and why

Website delivery, security and logs

When you request a page, our hosting and network providers receive technical data needed to deliver and secure it, such as IP address, request date and time, requested URL, referrer, browser, operating system and response status. We use this data to operate the site, diagnose faults, prevent abuse and establish or defend claims.

The legal basis is our legitimate interest in providing a reliable and secure website (Article 6(1)(f) GDPR). Security records may also be processed to comply with a legal obligation (Article 6(1)(c)).

Purchases, subscriptions, invoices and licences

Paddle acts as merchant of record and independent controller for checkout, payment, tax, fraud prevention, billing and transaction support. Paddle may give us the buyer's name, email address, country, product, transaction and subscription details so we can fulfil the order, issue and administer a licence, provide product support and keep business records. We do not receive full payment-card details.

We also process licence keys, activation email addresses, activation status, product and platform details, device or installation records needed to enforce seat limits, and support or reset history. The legal bases are performance of the product licence or steps requested before it (Article 6(1)(b)), legal obligations for accounting and tax records (Article 6(1)(c)), and our legitimate interests in fraud prevention, licence administration and the establishment or defence of claims (Article 6(1)(f)).

For details of Paddle's own processing, see Paddle's privacy policy.

Contact, support, complaints and refunds

If you contact us, we process your contact details, message, attachments, product and licence information, support history and any diagnostic data you choose to send. Please remove personal or confidential material that is not needed to resolve the issue.

We process this data to answer your request, perform a contract, handle complaints or refunds, and establish or defend claims. The legal bases are Article 6(1)(b), Article 6(1)(c) where a legal duty applies, and our legitimate interests in customer support and record keeping under Article 6(1)(f). The website contact form also uses hCaptcha to prevent automated abuse; hCaptcha processes technical interaction and device data under its own privacy policy.

Newsletters and product communications

If you subscribe, we process your email address, optional name, source of signup, consent record, delivery and engagement information, and unsubscribe status. We use Loops, and some legacy forms may use our self-hosted Sendy service, to manage these communications.

The legal basis for promotional email and related tracking is your consent (Article 6(1)(a) GDPR and applicable electronic-communications law). You can withdraw by using the unsubscribe link in any message or contacting us. We may keep a minimal suppression record after withdrawal so we do not contact you again.

Nobe OmniScope for iPad

OmniScope processes camera, network and file media on your iPad to display video and audio scopes. The app does not upload your picture or sound to Time in Pixels. Camera and microphone access are requested for the features that use them. Local Network access is used to discover and receive compatible sources, including NDI, ScreenPort and desktop streams. Accsoon SeeMo provides media through a connected accessory. You can change permissions in iPadOS Settings.

Images, videos and LUTs selected through Files may be copied into the app's local storage for processing. Your originals are not changed. Settings, layouts and source preferences are stored locally; desktop pairing credentials are stored in the iPad Keychain. External file providers, such as iCloud Drive, operate under their own privacy policies.

The iPad app automatically sends crash, hang and interrupted-startup diagnostics to Sentry to help us maintain reliability. Reports include technical details such as app version and build, operating system, device model, stack traces and startup checkpoints. Before sending an event, the app removes user and account identifiers and request fields and suppresses IP-based geolocation. Reports do not attach your video, audio, screenshots or view hierarchy. Automatic UI and network breadcrumbs and performance tracing are disabled. The iPad app does not use the optional desktop product analytics described below or use diagnostics for advertising or tracking.

We process these diagnostics for our legitimate interests in application security, stability and support (Article 6(1)(f) GDPR). Sentry acts as our processor; the diagnostics retention, international-transfer and data-rights provisions below also apply. See Sentry's privacy policy.

iPad subscriptions are purchased and managed through Apple. OmniScope checks verified StoreKit transactions on the device to determine which features are available. We do not receive payment-card details through the app. Apple's payment and account services are governed by Apple's privacy policy. Beta signup and support messages use our website and email services as described elsewhere in this policy.

Desktop crash diagnostics

Release builds of our desktop applications may use Sentry to report crashes and technical failures. A report can include stack traces, application version, operating-system and hardware context, graphics backend, diagnostic breadcrumbs, error time and the email associated with a licence. It is intended for fault diagnosis, not product-usage analytics. Do not include personal information in filenames, paths or other values if you choose to send a manual test or support report.

We process crash diagnostics on the basis of our legitimate interests in application security, stability and customer support (Article 6(1)(f)). Sentry acts as our processor. See Sentry's privacy policy.

Optional Nobe OmniScope desktop product analytics

Nobe OmniScope asks before collecting product analytics. The choice is optional, analytics are off by default, and refusing does not affect the application. If you choose Share usage data, we process the following event data to understand feature adoption and guide product development:

  • feature actions, scope types, input-source types, layout categories and scope counts;
  • QC check families, run status and issue counts;
  • session start, end and duration, plus install and update events;
  • current and previous app version, operating system, GPU backend and debug-build status;
  • licence tier and whether the licence is a trial;
  • event time, consent-notice version and delivery diagnostics, such as delivery delay and dropped-event counts; and
  • a random persistent installation identifier used to group events from one installation.

The app does not send media, media content, file paths, filenames, source or layout names, network addresses, stream URLs, device serial numbers, QC report content, marker text, free-form text, your name, email address, account details or licence key as product analytics.

The installation identifier is not automatically linked to your licence, hardware or account. It is written to the local application log. If you choose to send that log to support, we can use the identifier to match the log to analytics events. For that reason the analytics are pseudonymous, not anonymous.

PostHog, Inc. processes events for us in an EU Cloud project. Project data is stored in Germany. Your connection necessarily exposes its IP address to PostHog and its network provider, Cloudflare, but OmniScope instructs PostHog not to attach the address to the analytics event or derive location from it. PostHog and its subprocessors may process or transmit data outside the EEA using safeguards described under "International transfers" below.

The legal basis is your consent (Article 6(1)(a) GDPR and, where applicable, Article 399 of the Polish Electronic Communications Law). The app stores the notice version and time of your choice locally. You can withdraw at any time in Preferences > Privacy & analytics. Withdrawal immediately stops collection and discards unsent events, but does not automatically erase events PostHog has already received.

Analytics events are retained for 12 months from collection and then deleted. You can request earlier access or deletion by emailing us and including the installation identifier shown in Preferences. Resetting the identifier starts a new event history; it does not delete events already collected under the previous identifier.

Cookies and similar technologies

The site uses essential storage and similar technologies needed for security, navigation, checkout, account or licence functions. These are used where necessary to provide a service you request or on the basis of our legitimate interests in security and operation.

With your consent, the site may use:

  • Google Analytics to measure visits and site use; and
  • Meta Pixel to measure advertising and checkout conversions and help us understand campaign performance.

These providers can receive IP address, cookie or device identifiers, browser and device information, pages viewed, referring campaign, interactions and purchase-conversion information. Google and Meta may act as independent controllers for some processing under their terms. See Google's privacy policy and Meta's privacy policy.

Non-essential analytics and advertising technologies remain disabled until you consent through the site's cookie controls. You can later withdraw there as easily as you consented. You can also delete or block cookies in your browser, although essential site functions may then stop working. Withdrawing does not affect processing already carried out lawfully.

Embedded or linked third-party services, such as Paddle checkout, hCaptcha, YouTube or Discord, may set their own storage when you choose to interact with them. Their own notices govern that processing.

Who receives data

Depending on the service you use, recipients may include:

  • hosting, content-delivery, security and email infrastructure providers, including Zenbox and Cloudflare;
  • Paddle as merchant of record and independent controller;
  • support, newsletter and communications providers, including Loops;
  • analytics, advertising and diagnostics providers, including PostHog, Google, Meta and Sentry;
  • accounting providers, professional advisers and insurers;
  • public authorities or courts when disclosure is required by law; and
  • a buyer or successor in connection with a merger, reorganisation or sale, subject to appropriate safeguards.

Processors may use approved subprocessors to provide their services. We require processors to protect personal data and act only on documented instructions. Independent controllers determine their own processing under their privacy notices.

International transfers

Some providers or their subprocessors are outside the EEA, including in the United States. Where personal data is transferred to a country without an adequacy decision, we use an applicable safeguard such as the European Commission's Standard Contractual Clauses. A provider may also rely on the EU-US Data Privacy Framework where it is currently certified. We assess supplementary measures where required.

PostHog's EU Cloud stores project data in Germany, but its service can still involve processing or network transit outside the EEA. The same distinction may apply to other global providers. You may contact us for information about the safeguard relevant to your data.

How long we keep data

  • Orders, invoices and tax records: for the period required by tax and accounting law, generally five years calculated under the applicable statutory rules.
  • Contracts, licences and transaction records: while needed to provide the product or licence and until the relevant limitation periods and dispute obligations expire.
  • Support and correspondence: normally up to three years after the matter closes, or longer where needed for an active contract, complaint or claim.
  • Newsletter data: until consent is withdrawn, followed by a minimal suppression record for as long as needed to honour the opt-out and demonstrate compliance.
  • Nobe OmniScope product analytics: 12 months from collection, unless you successfully request earlier deletion.
  • Crash diagnostics: normally up to 90 days, unless a specific report must be retained longer to resolve an active security or support issue.
  • Server and security logs: only as long as needed for operation, security and incident response, normally no more than 90 days unless an incident or legal claim requires longer retention.
  • Cookie and advertising data: according to your consent, our configured limits and the relevant provider's retention controls; identifiers are removed or reset when no longer needed for the stated purpose.

When a retention period ends, we delete or anonymise the data unless the law requires us to keep it. Backups are isolated from routine use and expire on their normal rotation.

Your rights

Subject to the conditions and exceptions in data-protection law, you may request:

  • access to your personal data and a copy of it;
  • correction of inaccurate or incomplete data;
  • erasure or restriction of processing;
  • portability of data you provided where processing is automated and based on consent or contract;
  • objection to processing based on legitimate interests, including an absolute right to object to direct marketing; and
  • withdrawal of consent at any time, without affecting earlier lawful processing.

Send requests to contact@timeinpixels.com. We may ask for information needed to verify your identity and locate the data. For pseudonymous OmniScope analytics, include the installation identifier shown in Preferences; without it we may be unable to identify events as yours.

You may complain to the President of the Personal Data Protection Office (UODO) in Poland or, where applicable, your local supervisory authority. We encourage you to contact us first so we can try to resolve the issue.

Automated decisions and data sources

We do not make decisions producing legal or similarly significant effects about you solely through automated processing. Paddle and other independent controllers may use automated fraud-prevention tools under their own policies.

We usually obtain data directly from you, your device or your use of our services. We may also receive purchase and subscription data from Paddle, licence information from an organisation that provides you access, and technical data from our service providers.

Security, children and changes

We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit, provider due diligence, data minimisation and retention limits. No system is completely secure, so please use appropriate care when sending diagnostic files or other sensitive material.

Our products and site are intended for professional and general audiences, not for children under 16. We do not knowingly collect a child's personal data. Contact us if you believe a child has provided data so we can investigate and delete it where appropriate.

We may update this policy when our services, providers or legal duties change. We will change the effective date above and provide an additional notice where a change materially affects existing processing or consent. A material change to Nobe OmniScope product analytics will require a new affirmative choice in the app before collection continues under the revised notice.

time in pixels

Professional color grading tools. We develop software for colorists, DITs and post-production professionals — video scopes, display calibration, false color and more.

Products

  • Nobe OmniScope
  • Live-Pack
  • OmniScope for iPad
  • Nobe Display
  • Nobe LutBake
  • False Color
  • Nobe Color Remap
  • Store

Support

  • FAQ
  • Docs
  • My account
  • My license

Company

  • Affiliates
  • Merch
  • Contact
  • Company details
  • Terms and conditions
  • Privacy policy
© 2026 Time in Pixels. All rights reserved.