EFFECTIVE 7 SEPTEMBER 2026 · V1.0

Privacy Policy

Filament is published by Bight. This policy covers filamentvj.com - the site you are reading - and explains exactly what we collect, why, and what you can do about it. It is deliberately short, because there is very little to describe.

NO ACCOUNT NEEDEDYou can read this site, download the free tier, and use it without ever telling us who you are.

NO ADVERTISING COOKIESWe set none, and we run no page-view analytics. The site stores nothing on your device except your own preferences.

YOUR AUDIO STAYS PUTFilament analyses sound on your machine. No audio is ever uploaded, at any tier.

WE DON'T SELL DATANot to advertisers, not to brokers, not to anyone. There is no business here that involves your data.

Who we are What we collect Cookies & storage Legal bases Who we share with How long we keep it Your rights International transfers Children Changes Contact

1. Who we are

Filament is a product of Bight, the trading name of the sole trader behind it. For the purposes of the UK GDPR and the EU General Data Protection Regulation, Bight is the data controller for this website.

You can reach us any time at privacy@filamentvj.com.

Note: we are not currently required to appoint a Data Protection Officer, and have not appointed one. Your enquiry goes straight to the person who runs Bight.

2. What we actually collect

On this website, in normal browsing, we collect no information that identifies you. Specifically:

Page speed measurement

We use Vercel Speed Insights, and only that. It reports how quickly pages actually loaded for real visitors, so we can find the slow ones. It is cookieless: it stores nothing on your device and does not follow you to other websites. Your IP address and browser user-agent are processed in transit so a measurement can be attributed to a country and a device class; neither is retained afterwards, and neither we nor Vercel can work back from it to you.

We run no page-view analytics. We do not count visits, do not measure sessions, and cannot see which pages you looked at or where you went next. What we get is a set of timings with no visitor attached.

Server logs

Our host, Vercel, keeps short-lived operational logs of requests, which include IP addresses. These exist to keep the site up and to spot abuse. We do not use them for analytics or marketing, and they age out automatically.

If you email us

We receive whatever you put in the email, including your address. We use it to answer you and for nothing else.

If you buy a key

Payment is handled by Stripe. We never see or store your card number. We receive your email address to deliver the key and handle refunds, and we store the key, a machine identifier and a timestamp so that seats can be counted. Deactivating a seat deletes its machine record. This is covered in full in our Terms & License.

3. Cookies and device storage

This site sets no cookies. Not analytics cookies, not advertising cookies, not any cookies. If you check your browser, you will find none from us.

Two small values are kept in your browser's own localStorage. They never leave your device and we cannot read them:

filament.tos.v1 - that you have already agreed to the terms before a download, so you are not asked again every time.
fvj_consent - your answer to the consent banner, if it is ever shown. Storing a decline is how we remember not to ask again.

Both exist only to honour something you told us, so they are strictly necessary and need no consent. Clearing your site data removes them, with no effect beyond being asked again.

Why there is no cookie banner: under the ePrivacy Directive, consent is needed to store or read information on your device unless it is strictly necessary for a service you requested. We store nothing else. Showing you a consent banner for storage we do not perform would be theatre, so we do not.

The advertising pixel

The site ships an inactive Meta Pixel. It is switched off and does nothing - no requests to Meta, no data leaving the page. It is also gated behind consent in code, so if we ever activate it you will be shown a banner first and it will stay off unless you actively accept. Declining costs you nothing and changes nothing about the site.

4. Our legal bases for processing

Legitimate interests (Art. 6(1)(f) GDPR) - for cookieless page speed measurement and security logging. Our interest is in knowing whether the site works and keeping it online. The impact on you is minimal because nothing identifies you, no visits are counted and no profile is built.
Contract (Art. 6(1)(b)) - for handling your order, delivering your key, and honouring refunds if you buy.
Consent (Art. 6(1)(a)) - would be the basis for any advertising pixel, which is why it stays off until you accept. You may withdraw consent at any time by clearing site data.
Legal obligation (Art. 6(1)(c)) - for keeping tax and sales records where the law requires it.

We do not sell, rent, or trade personal data. We never have. We share only with the processors that make the product work:

Vercel - hosting, page speed measurement and server logs.
Stripe - payment processing, if you buy. Stripe is an independent controller for the payment itself, under its own privacy policy.
Cloudflare R2 - serving the video and audio files embedded on this site.

We will also disclose data where a law or a valid court order requires it. If that ever happens and we are permitted to tell you, we will.

6. How long we keep things

Speed measurements - retained only as timings, with no identifier attached, so there is nothing to delete.
Server logs - short-lived, expiring automatically at our host.
Emails - kept while the conversation is useful, then deleted.
Licence and purchase records - kept for as long as the licence is valid, plus the period tax law requires us to retain sales records.

7. Your rights

If the UK or EU GDPR applies to you, you have the right to access your data, correct it, delete it, restrict or object to its processing, and to receive it in a portable form. Where we rely on consent, you can withdraw it at any time.

To exercise any of these, email privacy@filamentvj.com. We will respond within one month. There is usually so little stored that this takes minutes rather than days. We do not charge for this and we will not make you justify the request.

If you think we have handled your data badly, please tell us first so we can fix it. You also have the right to complain to your national data protection authority - in the UK that is the Information Commissioner's Office, and in the EU it is the supervisory authority for your country.

California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not offer financial incentives for data. The rights above are available to you on the same terms.

8. International transfers

Our processors operate globally, so data may be processed outside the UK and EEA - principally in the United States. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses and the equivalent UK addendum, which are the safeguards our processors publish and commit to contractually.

9. Children

Filament is a professional visual tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, email us and we will delete it.

10. Changes to this policy

If we change how we handle data, we will update this page and move the effective date at the top. If a change is significant - switching on the advertising pixel, for example - we will make it obvious rather than burying it here.

11. Contact

Privacy questions, data requests, or a complaint: privacy@filamentvj.com.

Anything else, including support: see the help page.

Plain summary: we measure how fast pages load, we do not count visits or know who you are, we do not sell anything about you, and if you buy a key we keep only what is needed to make that key work.