Download

Privacy

Effective 28 October 2026.

In short

  • Your artwork, your brand data and your files stay on your Mac. Linyal reads and measures them inside Illustrator and sends none of it anywhere.
  • The panel talks to one server, Linyal’s licence server. It asks for the trial date and the Free and Pro settings when it starts, activates and checks a Pro licence if you have one, and sends usage counts, which you can turn off in Settings. The licence server keeps no IP address.
  • The guideline websites and PDFs Linyal writes ask no server for anything but their own files. Nothing in them tracks the people who open them.
  • If you sign up on linyal.com, we keep your email address for 1 year, then for 30 days in an archive only an administrator can open, and then we delete it.
  • Polar sells Linyal Pro as merchant of record. Your payment details go to Polar, never to us.
  • linyal.com counts page views anonymously with Vercel Web Analytics. It sets no cookies for visitors.
  • We don’t sell your data, use it for advertising or build profiles of you.

Who we are

Linyal is made by KADLAB, organisation number {ORG_NUMBER}, Rektorsvägen 4, 224 67 Lund, Sweden. We decide how the data described here is used, which makes us its controller under the EU’s General Data Protection Regulation (GDPR). For anything about your data, write to hello@linyal.com.

The Linyal panel

What stays on your Mac

Linyal measures your artwork inside Illustrator. The drawings it makes, such as the construction and the clear space, go into your document as ordinary layers. The brand you define in Present (its name, colours, fonts and logo measurements) is saved in your Illustrator document and in the folders you export to. None of it is sent to us or to anyone else.

The panel keeps a few small files of its own in ~/Library/Application Support/com.kadlab.linyal/:

  • settings.json: your Settings, the export folder you chose, and where you were in your last 20 saved documents (by file path, for 30 days), so the panel opens where you left it.
  • instance.json: a random install ID, made the first time the panel starts. It is not derived from your Mac, your Adobe account or anything else about you.
  • entitlement.json: if you have Pro, your licence key, its activation, and when it was last checked.
  • brandkit-log.json: the last 200 Present commands, each with its name, result, duration, page counts and version numbers. It never holds a brand name, font, colour, file name or path.

The files stay on your Mac. From them, the panel sends only the install ID, the licence key and its activation ID, as listed below.

What the panel sends, and when

The panel connects to one address, Linyal’s licence server (gridlab-licence.gridlab.workers.dev, run on Cloudflare). Every request carries the panel’s version number.

  • Each time Illustrator starts the panel, it sends its version, to learn the trial’s end date, which features are Free or Pro, the price line, and whether this version is still supported. If you have Pro and the day’s licence check is due, it makes that check too (below).
  • When you activate a Pro licence key, it sends the key, your install ID and the Illustrator and panel versions, to activate the key on this Mac.
  • Once a day while Linyal runs and the Mac is online, and when you press Revalidate now in Settings, it checks your Pro licence: it sends the key, its activation ID and your install ID, to confirm the licence is still valid. A check that couldn’t get through is tried again each hour.
  • When you press Deactivate this machine, it sends the key, its activation ID and your install ID, to free the seat for another Mac.
  • While you work, unless you turn it off, it sends your install ID, the Illustrator and panel versions, and the names of things you did, such as apply or inspect_measured: the usage counts below.

Like any request on the internet, each one also reaches the server with your IP address. The licence server doesn’t keep it (see The licence server’s logs below).

The trial needs no sign-up and no key: the panel only reads the trial’s end date when it starts.

The panel opens linyal.com in your browser only when you click a link to it, such as Buy on linyal.com or Free a seat on linyal.com.

Usage counts, and how to turn them off

The usage counts tell us which parts of Linyal are used, so we know what to improve. They are the names of actions, from a fixed list built into the panel, such as panel_opened, apply or export_site. They never contain your artwork, document or file names, brand names, fonts, colours or measurements. They carry your install ID, so installs can be counted, and nothing that names you.

The panel sends them in small batches: one when it starts, then at most one every 30 seconds while you work, and one when the panel is closed or hidden.

To turn them off, open Settings in the panel and untick Send usage counts under Privacy. From then on nothing is collected and nothing is sent, and anything not yet sent is discarded. We can also turn the counts off for every panel from the server.

From the counts, the licence server keeps daily totals per action, per panel version and per Illustrator version for 400 days. To count installs and the installs active each day, it also keeps the date each install ID was first seen, for 2 years, and a note that an install ID was seen today, for 8 days. It stores no IP address with any of them.

Licence checks and Polar

The licence server checks keys with Polar, the company that sells Linyal Pro (see Buying Linyal Pro). It passes on your key, and when you activate it, your install ID and the Illustrator and panel versions, which Polar keeps with the key’s activation. Polar never sees your IP address from the panel: the licence server talks to Polar on your behalf.

To stop anyone guessing keys, the licence server limits how often a key can be activated or checked, and how often activation can be tried from one IP address, over 60-second windows. It also limits how often one install ID can send usage counts, and counts each day’s activation attempts per key by a one-way hash of the key, never the key itself. The hash is deleted after 2 days.

The licence server’s logs

The licence server keeps no IP address. Cloudflare, which runs it, sees your IP address to deliver each request, as any server does, and the server uses it for a minute at most to limit activation tries. Linyal’s own log line for a request holds the route, the result, the time it took, the panel and Illustrator versions, your install ID, the last four characters of a licence key (never the whole key), and Polar’s answer to a licence request with any error it gave. Cloudflare keeps that line, which holds no IP address, for up to 7 days, and keeps no log of the request itself. The server also counts its requests by route and result, with nothing that identifies anyone, to see that it works.

Copy diagnostics

Settings › Copy diagnostics copies a few lines of text to your clipboard, for you to paste into an email to us if you need help. Nothing is sent by copying. The text holds: the Linyal and Illustrator versions; the active artboard’s number, size and ruler units; your licence status, the last four characters of your key, when it was last checked and the last licence error; your install ID; three settings; your Mac’s system type, such as MacIntel, and the time; and the last Present commands, as in brandkit-log.json above. It never holds your whole licence key, a document name or any artwork.

What your guideline websites and PDFs contain

The websites Linyal writes for you ask no server for anything but their own files: no tracking, no analytics, and no fonts, images or scripts from anywhere else. Everything they show is in the folder. So when you put a guideline on your own or your client’s domain, Linyal adds nothing that records the people who visit it.

Photographs you add to a site are copied into its folder with their location, camera, dates and other metadata removed. Only the picture, its colour profile (without the name of any device) and its orientation are kept, and a photograph Linyal can’t clean is left out of the site.

On the Free plan a site and its PDF say “Made with Linyal · linyal.com”. The link carries no referrer, so linyal.com doesn’t learn where your guideline is hosted when someone clicks it.

To print a guideline PDF, Linyal opens the Chrome, Edge or Brave already on your Mac, out of sight, with a temporary profile of its own and its background network traffic turned off. Your own browser profile, windows and history are not touched.

linyal.com

Sign-ups

On linyal.com you can sign up for release updates and for the workspace waitlist. Each list is a box you tick yourself. We store your email address, the lists you ticked, the exact words you agreed to and their version, the site’s language and the time.

We keep a sign-up for 1 year, then for 30 days in an archive only an administrator can open, and then we delete it. To unsubscribe, write to hello@linyal.com and we remove you at once. Every email we send to these lists will carry a link to unsubscribe.

Move a licence

If you no longer have the Mac a Pro key is active on, the form at linyal.com/deactivate asks for the email address you bought with, the last four characters of the key and, if you like, a description of the machine, and for your agreement to use them to move the licence. We store the request, with the site’s language and the time, and email it to our support address so we can free the seat. We keep the stored request for 1 year, then for 30 days in the administrators’ archive, and then we delete it.

Contact

The contact form asks for your name, email address and message, and for your agreement to use them to answer you. We store them with the time and email them to our support address. We keep them as we keep sign-ups: 1 year, then 30 days in the archive, then deleted.

Email me the link

On a phone, “Email me the link” sends you one email with the address of the download page, through Resend. We don’t store your email address. To stop the form filling someone’s inbox, the server keeps a one-way hash of the address in its memory and sends no second email to it within an hour. The hash is never written to the database or a log, and goes when the server restarts. Resend keeps its own record of the emails it sends.

IP addresses, logs and cookies

The site uses your IP address in its memory to stop a form being sent too often. It doesn’t store it with anything you send. A request the forms’ spam trap catches is logged with its IP address, and our hosting provider, Vercel, keeps the site’s request logs for 1 day.

linyal.com has no tracking and no advertising, and sets no cookies for visitors. It counts page views with Vercel Web Analytics: for each view, the page’s address, the site you came from, your country, region and city (worked out from your IP address), and your browser, operating system and kind of device. Your IP address isn’t stored, and a view can’t be tied to you: Vercel tells visits apart only by a one-way hash it discards after 24 hours. People who log in to the site’s administration get a login cookie.

The trial line on the site is read by the site’s own server from the licence server. Your browser never contacts the licence server from linyal.com, and nothing about you is sent to it.

The installer is downloaded from Cloudflare, which sees your IP address to deliver the file.

Buying Linyal Pro

Linyal Pro is sold by Polar Software, Inc. (United States) as merchant of record: Polar takes the payment, charges VAT where it applies and issues the receipt and the licence key. You give your name, email address, billing address and payment details to Polar, not to us. Polar handles them as an independent company, under its own privacy policy: https://polar.sh/legal/privacy-policy. Polar tells us what was bought, and the name and email address it was bought with, so we can support the licence.

Who processes data for us

  • Cloudflare runs the licence server and keeps its logs, delivers the installer, and stores the site’s images, which are kept in the EU.
  • Vercel hosts linyal.com, keeps its request logs and counts its page views. The site’s servers run in Frankfurt; Vercel is a US company.
  • Neon holds the site’s database, with the forms above, in Frankfurt (on AWS).
  • Resend sends the site’s emails, from Ireland; its account data is in the United States.
  • Microsoft hosts our support mailbox, where Move a licence requests and contact messages arrive; Cloudflare forwards mail sent to hello@linyal.com to it.

Where a company processes data outside the EU and EEA, it does so under the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework. Cloudflare, Vercel and Resend, and Neon through its parent company Databricks, are certified under the EU–US Data Privacy Framework, and so is Microsoft.

Why we may use your data (legal bases)

  • Your consent, for sign-ups, and for the Move a licence and contact forms, which each ask for it. You can withdraw it at any time; that doesn’t affect what was done before.
  • Our agreement with you, for activating, checking and deactivating a Pro licence, which are needed to provide Linyal Pro.
  • Our legitimate interests, for the usage counts and linyal.com’s page views (knowing which parts of Linyal and the site are used), and for rate limits and logs (keeping the service secure and working). You can turn the usage counts off in Settings, and object to the rest by writing to us.

How long we keep it

  • Sign-ups: 1 year, then 30 days in an archive only an administrator can open, then deleted.
  • Move a licence requests and contact messages: 1 year, then 30 days in the archive, then deleted.
  • Emails with support: 1 year after the conversation ends.
  • Daily usage totals: 400 days.
  • The date an install ID was first seen: 2 years.
  • The note that an install ID was seen today: 8 days.
  • A day’s activation attempts, by key hash: 2 days.
  • The licence server’s logs at Cloudflare: up to 7 days.
  • linyal.com’s request logs at Vercel: 1 day.
  • linyal.com’s page views at Vercel: counts that identify no one; the hash that tells visits apart, 24 hours.
  • The “Email me the link” address hash: in the server’s memory only, never written down.
  • Purchases, at Polar: as Polar’s privacy policy and the law require.

Your rights

You can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict how we use it, to receive it in a portable form, and you can object to our use of it. Write to hello@linyal.com; we answer within one month. Your install ID is shown in the panel’s Copy diagnostics, if you want us to find data kept under it.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or the data protection authority where you live.

Changes

If we change what Linyal sends or keeps, we update this page and its date first, and say so in the release notes of the version that changes it.