Privacy Policy
In short: how we process personal data, which services we use and what rights you have. Lumisphere is a service of RAIN SPHERE.
1. Controller
RAIN SPHERE The controller's name and postal address are shown above as an image to deter automated scrapers. For the text version, please contact us by email at the address below. Email: info@rain-sphere.com
2. Legal bases for processing
We process personal data in accordance with the GDPR and the German BDSG. Our purposes rely in particular on:
- Art. 6 (1) (a) GDPR (consent) — e.g. for statistics and marketing services such as Google Analytics and Google AdSense.
- Art. 6 (1) (f) GDPR (legitimate interests) — e.g. the technical operation and security of the website and the prevention of misuse.
We only use services that require consent after you have given it. You can withdraw your consent at any time via the “Cookie settings”.
3. General handling of personal data
Data minimisation: we collect only the data we need and do not store it longer than necessary. The tools on Lumisphere run entirely in your browser — the graphics you create are not transmitted to us.
Recipients: internal departments, processors (e.g. hosting / IT) and authorities where legally required.
Storage period: until the purpose no longer applies; statutory retention obligations remain unaffected.
Transfers to third countries: only where permitted (e.g. the EU–US Data Privacy Framework or standard contractual clauses) and necessary (see the Google services below).
4. Hosting & server log files
Our website is operated with a hosting provider in the EU. Each time the site is accessed, server log files are created for technical reasons. We process in particular:
- The page/URL visited and the referrer URL
- Date and time of access
- Amount of data transferred
- The browser used and its version
- The operating system used
- IP address (usually stored briefly / shortened)
Purposes: technical operation, security, misuse detection and — in anonymised form — statistical analysis. Legal basis: Art. 6 (1) (f) GDPR. Deletion takes place promptly unless security-relevant events require longer retention.
5. Fonts
Lumisphere loads all fonts locally from our own server (“self-hosted”). No external font services (e.g. Google Fonts) are called, so no data is transferred to third parties for this.
6. Image tools — local processing
Our image tools — such as the Image Converter and the Background Remover — process the files you select entirely locally in your browser. Your image is not uploaded, not transmitted to us or third parties and not stored. Processing happens directly on your device using standard browser features (the Canvas API); no data remains after you close or reload the page. No personal data is sent to a server for these tools. The AI mode of the background remover loads its segmentation model exclusively from our own server (no third-party CDN) and computes the cut-out entirely on your device; here too, your image never leaves the browser.
7. Cookies & consent management
We use consent management. On your first visit we ask for your consent for optional cookies and services (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG for storing and reading information on your device). We store your choice locally in your browser (local storage) so we don't have to ask again on every visit; this entry is technically necessary and contains no personal tracking data.
Essential: the function and security of the website and storing your cookie choice (Art. 6 (1) (f) GDPR).
Statistics and marketing: only with your consent (Art. 6 (1) (a) GDPR).
You can change or withdraw your choice at any time via the “Cookie settings” at the bottom of the page. Cookies can also be disabled in your browser; some functions may then be limited.
8. Google AdSense
To fund this free service we include Google AdSense, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). AdSense is loaded only after your consent via the cookie banner. Google uses cookies or comparable identifiers to deliver ads, cap their frequency, measure ad quality and — where you agree — show personalised ads. Without consent to personalised advertising, non-personalised ads may be delivered that are selected based on the current context rather than your behaviour.
We process in particular device and browser information, a shortened IP address, ad interactions and a unique identifier. Legal basis: Art. 6 (1) (a) GDPR. A transfer to the USA is possible; Google participates in the EU–US Data Privacy Framework, supplemented by standard contractual clauses (SCC). More information in the Google Privacy Policy and under “How Google uses data”. You can withdraw your consent at any time via the “Cookie settings”.
9. Google Analytics 4 (GA4)
If you consent, we use Google Analytics 4, a service of Google Ireland Limited, for reach measurement with IP anonymisation. GA4 is loaded only after your consent via the cookie banner. We process in particular:
- Event and usage data (e.g. page views, clicks, time on page)
- Device and browser information
- A shortened IP address
- Where applicable, an approximate location (based on the shortened IP)
Purpose: reach measurement and usage analysis to improve our website. Legal basis: Art. 6 (1) (a) GDPR. A transfer to the USA is possible (EU–US Data Privacy Framework or SCC). You can withdraw your consent at any time via the “Cookie settings” or prevent collection with Google's browser add-on: tools.google.com/dlpage/gaoptout.
10. Your rights
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent given (Art. 7 (3) GDPR; with effect for the future)
- Complaint to a supervisory authority (Art. 77 GDPR)
To exercise your rights, please contact us using the details in the Legal Notice.
The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, baden-wuerttemberg.datenschutz.de.
11. Changes to this policy
We adapt this privacy policy when new technologies or services, or changes in the law, make it necessary. The version published here at the time always applies.
Last updated: June 2026
