This policy is for XCViewer, the XCStudio image and LUT viewer for Mac. For our other apps and this website, see the XCStudio privacy policy.
Last updated: 15 October 2026
XCStudio. Contact us through our contact form.
XCViewer runs in the macOS App Sandbox. It can read only the files and folders that you open, drag onto it, or allow on the welcome screen or in Settings > Folders. It shows, labels, copies and moves them on your Mac, and only when you ask. It does not upload your images, LUTs or their metadata. Settings > Folders lists the folders you allowed, and you can remove them there.
Your settings (for example the sort order, keys, copy and move folders, and folder locks) are stored on your Mac only.
When the EXIF tab of the Info panel shows a photo that has GPS data, XCViewer sends that photo's coordinates to Apple to get a small map image (Apple Maps) and the place name (Apple's geocoder). Nothing is sent for photos without GPS data, or when you do not view the EXIF tab. XCViewer does not use the location of your Mac. Apple handles these requests under the Apple Privacy Policy.
XCViewer sends anonymous usage events to Google Firebase Analytics, for example app starts, app version, macOS version, Mac model and language. Google derives an approximate country or region from your IP address. Events are linked to a random app-instance identifier, not to your name or email, and they contain no file names, images or image metadata. We use them to understand how the app is used and to fix problems. Legal basis: our legitimate interest in improving the app (GDPR Art. 6(1)(f)).
If XCViewer crashes, Firebase Crashlytics sends a crash report: the technical stack trace, Mac model, macOS version, app version and a random installation identifier. Crash reports do not contain your images. Legal basis: our legitimate interest in keeping the app stable (Art. 6(1)(f)).
XCViewer contains no advertising and does not track you across other companies' apps and websites. We do not sell or share your data for advertising.
These providers can process data in the United States. They use safeguards approved by the European Commission (such as Standard Contractual Clauses or the EU-US Data Privacy Framework) for these transfers.
You have the right to access, correct or delete your data, to restrict or object to its processing, and to data portability. Because analytics and crash data are not linked to your name, tell us the approximate date and your macOS version so we can find it. Contact us through the contact form. We answer within one month. You can also complain to your local data protection authority.
You can stop all data collection by deleting XCViewer.
XCViewer is not directed at children under 13 (under 16 in the EU), and we do not knowingly collect personal data from them.
If we change this policy, we update this page and the "Last updated" date above.
