Lottie Max

Legal

Privacy Policy

Last updated June 4, 2026

The short version

  • The Lottie Max studio runs entirely in your browser. Your artwork and projects are never uploaded to us.
  • This marketing site uses analytics and advertising cookies, but only after you accept the consent banner. Decline and we don't store identifiers.
  • We use Google Analytics (GA4) for traffic measurement and Google Ads for marketing. They process data on our behalf.
  • You can change your choice anytime via the button below.

This summary is for orientation only — the full policy below governs.

Who we are

Lottie Max ("we", "us", "our") operates lottiemax.com and the in-browser Lottie Max studio. For privacy questions, contact us at hello@lottiemax.com.

The studio runs in your browser

The Lottie Max editor is fully client-side. When you draw, animate, or import artwork in the studio, that work lives in your browser only — we never receive it. Specifically:

  • Your projects are saved to your browser's local storage as .ltmax.json files. They never leave your device unless you choose to download or share them.
  • Your exports (.json, .lottie, embed snippets) are generated locally in your browser.
  • We provide a backup & restore feature so you can move your local library between browsers. You control where that backup file goes.
  • Exported Lottie files include a non-watermark meta.g = "Lottie Max" attribution and a small lottiemax provenance block (studio, url, exportedAt). Remove it manually if you prefer.

We do not run a backend that stores your designs. We can't recover lost projects — please use the backup feature.

What this website collects

The lottiemax.com marketing site (the pages you're reading) collects data in two categories:

1. Information you give us

  • Contact emails — if you email us. We use it only to reply.
  • Tips/donations — if and when we enable tipping, the payment is processed by a third party (e.g. Buy Me a Coffee). We don't see your card details.

2. Information collected automatically

  • Cookies and similar technologies (see below) — only after consent for non-essential cookies.
  • Server & CDN logs — IP address, user agent, referrer, time. Used for security, abuse prevention, and basic analytics. Retained for a short period by our hosting provider (typically 14–30 days).
  • Aggregate performance metrics (page-load times, Core Web Vitals) — anonymized, used to keep the site fast.

Cookies & similar technologies

Our cookie consent banner gives you a clear choice before any non-essential cookies are set. We implement Google Consent Mode v2 — by default, advertising and analytics storage are denied, and we only switch them on if you accept.

What lives in your browser:

  • cookie-consent (localStorage) — your accept/decline choice. Essential.
  • theme (localStorage) — your dark/light preference. Essential.
  • Studio project data (localStorage / IndexedDB inside the studio) — your animations and settings. Essential to the studio's function.
  • Analytics cookies (_ga, _ga_*) — set by Google Analytics only after you accept. Used to measure traffic.
  • Advertising cookies — set by Google Ads and any ad networks we work with, only after you accept. Used for conversion measurement and (in some regions) personalised ads.

will clear your preference and re-show the banner.

Advertising

Ads (currently planned for the marketing site and the studio's home page only — never in the editor) are how we keep Lottie Max free. If you accept the consent banner, our ad partners (e.g. Google Ads) may set cookies to measure conversions and, in some jurisdictions, show you more relevant ads. You can opt out of personalised Google ads at any time at Google My Ad Center.

Performance & web vitals

We collect anonymized Core Web Vitals (LCP, INP, CLS, FCP, TTFB) so we can catch regressions and keep the site fast. These are aggregate performance metrics — no artwork, no personal content, no precise user identifier — sent to Google Analytics. With analytics consent denied, they are sent as cookieless "modeled" measurements.

Third-party services

  • Google Analytics (GA4) — traffic measurement. Privacy policy. You can also opt out via the Google Analytics Opt-out add-on.
  • Google Ads — conversion measurement and marketing campaigns. Ads policy.
  • Hosting / CDN — our static site is served by a third-party provider (e.g. Vercel or Netlify) that processes request metadata for delivery and security.
  • Font hosting — Inter is loaded from rsms.me.
  • Tip payments (when enabled) — e.g. Buy Me a Coffee. Subject to their privacy terms.

How we use the data

We process the limited data we collect to:

  • Operate and secure the website (legitimate interest).
  • Measure traffic, content effectiveness, and performance — with your consent where required.
  • Show and measure ads — with your consent where required.
  • Respond to your emails (legitimate interest).
  • Comply with legal obligations.

How long we keep it

  • Analytics data — retained according to our GA4 configuration (default: 2 months for ads identifiers, 14 months for events).
  • Server logs — typically 14–30 days at our hosting provider.
  • Emails you send us — kept while relevant for the conversation, then deleted.
  • Local studio data — kept by your browser until you clear it.

International transfers

Our service providers (Google, our hosting provider) process data in multiple countries, including the United States. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards offered by those providers.

Your rights

Depending on where you live, you may have rights to:

  • access, correct, delete, or get a copy of personal data we hold about you;
  • object to or restrict certain processing;
  • withdraw consent (use the button);
  • lodge a complaint with your local data protection authority.

EEA/UK (GDPR): legal bases are consent (for analytics/ads), legitimate interest (security, communications), and legal obligation.

California (CCPA/CPRA): we do not sell personal information for money. We share limited cookie data with advertising partners which may qualify as "sharing for cross-context behavioural advertising." Declining the consent banner stops this. Californians may also email us to exercise the right to know, delete, or correct.

To exercise any right, email us at hello@lottiemax.com.

Children's privacy

Lottie Max is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we'll delete it.

Security

We use industry-standard measures (TLS, modern hosting, principle of least privilege). No method of transmission or storage is 100% secure; we can't guarantee absolute security. The best protection for your designs is the studio's local-only model — there is no cloud copy to breach.

Changes to this policy

We may update this policy. We'll change the "Last updated" date and, for material changes, post a notice on the site or via the cookie banner before they take effect.

Contact us

Questions or requests? Email hello@lottiemax.com.