Legal

Privacy policy

Last updated 17 August 2026

Who is responsible for your data

The controller of the personal data described here is Kenny Lamoot, sole proprietorship (eenmanszaak), trading as Linefeed, registered in Belgium under Ondernemingsnummer (KBO) 0683.339.165.

The route for anything in this policy is the email link on this page — in the footer, and here:

The full business details, including the postal address, are in the small print at the foot of the terms of service.

What this policy covers — and what it does not

This policy covers three things, and only these three:

• the brand site at https://www.linefeed.be, this site;
• the support mailbox that receives mail sent to the business;
• invoicing and the bookkeeping that follows from a purchase.

Each product publishes its own privacy policy on its own domain, naming the same legal entity as controller. What a product does with your data when you use it — accounts, content you put into it, analytics, support inside the product — is described there, not here: on brainhurricane.ai, signallock.ai, kaisa.one and homelab21.linefeed.be respectively. If you reached this page from an app store listing looking for a product's policy, the store's listing links to that product's own policy.

What this site itself touches

Your light or dark choice

When you click the light/dark switch, the site stores your choice in your own browser, in local storage, under the key linefeed-theme. It stays on your device, is never sent anywhere, and is not used to recognise you. It is not a cookie and it is not used for tracking, which is why this site has no cookie banner: if you never touch the switch, nothing is stored at all. Clearing your browser's site data removes it.

Serving the page

The site is a set of static files hosted by Cloudflare (Cloudflare Pages). To deliver a page and to protect the service against abuse, Cloudflare processes the technical data every web request carries: your IP address, the time, the page requested, the browser's user agent and similar headers. There is no analytics script, no advertising, no tracking pixel and no third-party font, and no visitor profile is built.

Nothing else

This site has no contact form, no account, no newsletter and no comment function. It asks you for nothing.

The support mailbox

If you write to the business, the message reaches a mailbox that is delivered through the domain's mail provider (Telenet). What is processed is what you put in your message: your name and email address, and whatever you tell us. It is used to answer you and to keep track of the matter until it is closed.

Invoicing

When you buy on a product site, the payment is processed by Stripe and an invoice or receipt is produced. The data involved is the billing name and address, the email address, the country, the VAT number if you give one, the amount and the product bought. Card details are handled by Stripe and are never seen or stored by the business. Purchases made in the Apple App Store or Google Play are billed by those stores; the business receives sales reports and payouts from them.

Legal basis for each activity

• Your light or dark choice — stored on your own device at your request when you press the switch, and strictly necessary to deliver the appearance you asked for (Article 6(1)(b) GDPR, and the strictly-necessary exemption for local storage).
• Serving and protecting the site — legitimate interest in delivering the site and keeping it available and secure (Article 6(1)(f) GDPR).
• Answering support mail — performance of a contract or steps taken at your request before entering one (Article 6(1)(b) GDPR), or legitimate interest in answering enquiries where no contract is in view (Article 6(1)(f) GDPR).
• Invoicing and bookkeeping — performance of the contract (Article 6(1)(b) GDPR) and compliance with the legal obligations that Belgian bookkeeping and tax law place on the business (Article 6(1)(c) GDPR).

Who receives your data

Data is never sold and never handed over for anyone else's marketing. The only recipients are the providers that make the business run, each acting on the business's instructions or as an independent controller for its own regulated purposes:

• Cloudflare — hosting and delivery of this site.
• Telenet — the mail forward that delivers mail sent to the business.
• Stripe — payment processing and invoicing for purchases made on the product sites.
• Apple and Google — where they are the merchant of record for a store purchase, and RevenueCat as the subscription layer behind it.
• The business's accountant, and the Belgian tax authorities where the law requires it.

Transfers outside the EEA

Some of those providers process data outside the European Economic Area, mainly in the United States. Where that happens, the transfer rests on one of the mechanisms Chapter V GDPR allows: the EU-US Data Privacy Framework where the provider is certified under it, and otherwise the European Commission's standard contractual clauses together with the provider's own supplementary safeguards. A copy of the clauses used for a given provider can be requested with the email link on this page.

How long data is kept

• Your light or dark choice — on your device until you clear your browser's site data. The business never has it.
• Hosting request logs — kept by the hosting provider for a short technical period, in the order of days to a few weeks.
• Support mail — up to 24 months after the matter is closed, so a follow-up question still has its history.
• Invoices and accounting records — 7 years, the retention Belgian bookkeeping law requires.

Your rights

Under the GDPR you have the right to:

• ask what personal data is held about you, and get a copy;
• have inaccurate data corrected;
• have data erased, where there is no legal obligation to keep it (an invoice, for example, cannot be erased before its retention period ends);
• ask for processing to be restricted;
• object to processing that rests on legitimate interest, on grounds relating to your situation;
• receive the data you provided in a portable, machine-readable form;
• withdraw consent at any time, where processing rests on consent, without affecting what was done before.

To exercise any of these, use the email link on this page, or write to the postal address in the terms of service. The business answers within one month. It may ask a question or two to be sure it is really you before it acts.

Complaining to the supervisory authority

If you think your data is being handled wrongly, you may complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, Belgium — https://www.gegevensbeschermingsautoriteit.be. You may also complain to the supervisory authority of the EU country where you live or work.

Changes to this policy

This policy changes when the business changes. The date at the top of this page says when this version was published.