Legal
Website privacy
This notice explains what hdrit.com can access. Your HDRit account at app.hdrit.com is separate.
- UpdatedAugust 14, 2026
- ScopeCovers this public website and its limited link to your HDRit account.
Public website
This website currently has no photo upload route and does not receive or store customer photo files.
JPEGs selected for a preview remain on your device. The public website does not persist them, upload them, or transfer their bytes across the subdomain boundary.
When configured, the header may ask the canonical customer workspace whether it recognizes a session. The reply is limited to recognition state for navigation; the public website does not receive readable authentication credentials.
Contact form
The contact form is available only when every required connection is configured. If available and you consent, it collects your name, email, studio size, estimated monthly listings, and optional message so the configured recipient can review your request.
Cloudflare Turnstile processes the security challenge. The website verifies its short-lived token but does not store, log, or send that token to the configured delivery destination.
After verification, the normalized lead fields are sent to one administrator-configured delivery destination. The website reports success only when that destination acknowledges the submission.
For up to 15 minutes, the website may retain a submission identifier, digest, processing state, and approximate rate metadata, plus a generic result. Rate metadata is keyed by a one-way HMAC rather than a raw email address. These records do not contain the lead fields, message, IP address, or Turnstile token.
The public website still has no photo upload route. Contact submissions do not include or accept customer photo files.
Your HDRit account
app.hdrit.com is the live authenticated HDRit customer workspace. It owns customer authentication, tenant-scoped access, photo storage, and the security boundary for customer records and files.
This public-website notice does not claim a customer-workspace retention period, deletion schedule, encryption implementation, processing availability, or provider connection. Review any notice presented in the customer workspace before supplying account or photo data there.