Last updated 7 November 2026.
Who we are
UnlockIR is run by Leaping Wing Ltd, a company registered in England and Wales (company number 09733551). Registered office: Unit 3, Chapel Barn Business Units, Merthyr Mawr, Bridgend, Wales, CF32 0LS. We are the controller of the personal data described here, and we are registered with the Information Commissioner's Office. Contact: unlockir@leapingwing.co.uk.
What we do with your data
This table lists each way we use personal data, why we are allowed to, and how long we keep it. You do not have to give us your name. We need your email address to run the converter.
| What we do | What we use | Why we may (lawful basis) | How long we keep it |
|---|---|---|---|
| Joining the waitlist | Your email address and the date you joined. | Your consent. | Until we email you at launch, or until you ask us to remove it. |
| Confirming your email and claiming the free trial | Your email address, a one-time code (not stored in readable form), and a one-way hash of your address to count your free images. | Providing the service you asked for. | The code lasts 10 minutes. The hash is kept for as long as it is needed to stop the free trial being claimed again and again. |
| Counting the free allowance per camera | A one-way hash of the camera serial number found in each thermal image. We do not keep the readable serial for this. | Our legitimate interest in preventing abuse of the free trial. | As above. |
| Converting your images | The images you upload and the converted files. Thermal images can contain GPS positions and camera details; they are part of the files and we do not use them for anything else. | Providing the service you asked for. | Deleted automatically, normally within 24 hours and always within 48 hours. You can delete them yourself at any time with the "Delete my files now" button. |
| Your account | Your email address, your first and last name if you chose to give them (optional), the time you last confirmed your email, and how many free images and credits you have. | Providing the service you asked for (keeping credits against the right account), and our legitimate interest in supporting you. | While your account is in use. We delete these details if there has been no sign-in for 24 months (we review accounts at least once a year), or sooner if you ask. Credits you hold are not removed when personal details are. |
| Messages about your conversions and credits | Your email address. | Providing the service, and our legitimate interest in telling you about problems with your conversions or changes to your credits. These are service messages, not marketing. | As for your account. |
| Offers and news | Your email address and the fact that you ticked the box (with the date). | Your consent. We send marketing, such as offers of more credits, only to people who ticked the box. | Until you withdraw consent: email us, or un-tick the box next time you confirm your email. Every marketing message will also carry an unsubscribe link. |
| Keeping the service secure, fair and working | A one-way hash of your IP address and of your email address, the number and size of files, the options chosen, any errors, and when each step happened (the activity log). Staff sign-ins are logged with the staff member's email address. We also keep daily totals, such as the number of conversions, which contain no personal data. Our web host keeps basic request logs (such as IP address and pages requested). | Our legitimate interests in security, preventing abuse and running the service. | Activity log: up to 13 months. Short-lived counters that limit how many jobs one network can start: hours. Web server logs: for the period set by our host. |
We do not sell your data, we do not use your images to train anything, and we do not make decisions about you by automated means.
Cookies and storage in your browser
This website does not use advertising or analytics cookies, and it does not track you across other sites. To work, the converter stores a few things in your browser, which stay on your device: a short-lived record that you have confirmed your email (cleared when you close the tab), the email, name, marketing tick and conversion settings you used last time (so you do not have to retype them), and, for our staff, a sign-in session. You can remove all of it by clearing your browser data.
Who processes your data for us
- Amazon Web Services (AWS), London. Stores your uploaded files, results, account records and logs, runs the conversions, sends one-time codes and other emails through Amazon SES, and provides the sign-in for our staff.
- Hostinger. Runs this website and the waitlist, and keeps basic web server logs.
They act on our instructions under their data processing terms. If we add other providers, for example to take payments, we will update this notice first.
Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or move it to another service; you can object to uses based on our legitimate interests; and you can withdraw consent at any time (for the waitlist and for offers). Email unlockir@leapingwing.co.uk. We will reply within one month. Deleting your details leaves any credits you hold in place unless you ask us to remove those too.
If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). We would be glad of the chance to put things right first.
Changes
If we change how we use personal data, we will update this page and its date, and tell you by email if the change matters to you.