How we handle your information — in plain English.
Last updated: May 17, 2026
What we ask for
For the Free plan, we ask only for your name and email — nothing else.
For the Personalized plan, we additionally ask for your Loxone Cloud Remote URL (the address you use to reach your Miniserver remotely) and a Loxone username and password. These are needed so we can connect to your home, read its setup, and — for paid orders — take real screenshots of your app rooms to include in your PDF.
How we use it
Email & name are used to send you your manual and your magic-link sign-in. That is all. We do not add you to marketing lists without your opt-in.
Miniserver credentials are used exactly once, in a single server-side session. We connect to your Miniserver, read the layout of your home (rooms, devices, scenes), capture any screenshots needed for your PDF, and then disconnect. The whole process takes under a minute. We never use those credentials again.
What we never do
- We never store your Loxone password. It is not written to any database, log file, or storage system.
- We never share it with any third party.
- We never use it for anything other than generating your specific manual.
- We never build a persistent connection to your home. One session, one generation, done.
Screenshots & images
Any screenshots we capture of your Loxone app exist in memory only during PDF generation. Once your PDF is assembled and ready for download, those images are deleted. We do not keep a copy. Your home's app views are yours alone.
Our recommended best practice
Create a read-only Loxone user specifically for LoxManuals before you generate a personalized manual. In Loxone Config, go to System → Users and create a user with read-only permissions, then use those credentials here. That way, even in an unlikely worst case, the credentials could not be used to control anything in your home — only to read its layout.
We'll show you exactly how to do this on the generation page.
Cookies & tracking
We use Supabase for sign-in, which sets a single authentication cookie when you are logged in. We do not use advertising cookies, analytics cookies, or any third-party tracking pixels. There is no remarketing, no fingerprinting, no session replay.
Where your data lives
- Stripe — handles all payments. We never see your card number; Stripe stores it.
- Supabase — stores your email, name, and login session. Hosted on AWS us-east-1.
- Resend — delivers your email (the one with your manual and login link).
Questions?
Email us at daniel@grizzlytec.com. We're a small team and we answer our own email.