Privacy policy for the software

Privacy policy for the software LayoutBridge (layoutbridge-spm)

This policy concerns the software itself. For visits to this website, the website privacy policy applies.

1. Controller

SP Medienservice, Owner: Sascha Piprek Reinhold-Sonnek-Str. 12, 51147 Köln, Germany E-mail: kontakt@mcp-interfaces.com

2. What this is about

LayoutBridge (layoutbridge-spm) is a server in accordance with the Model Context Protocol standard that runs on your own computer. It provides an AI application of your choice with tools for controlling Adobe® InDesign®. The software is not operated by us and is not maintained remotely.

This policy describes which data the software processes, which data it transmits to third parties and what you are responsible for yourself.

3. Your documents stay on your computer

The software reads and modifies your InDesign® documents, images and texts exclusively locally. Document contents are not sent by the software to us or to third parties. We have no access to your documents at any time.

4. Important: your AI application sees the results

The software replies to the AI application you use (for example Claude Desktop, Cursor or Codex). Depending on the tool, these replies contain text contents, frame contents, file names and paths from your documents. Your AI application transmits this content to the provider of the respective AI service.

This process lies outside our sphere of influence. You are responsible for it as the operator of your AI application; the terms and privacy policies of the AI provider you have chosen apply. If you work with third-party data – for instance editorial data of your clients – please check before use whether you are entitled to this transmission.

5. Licence verification

Use requires a valid licence key. To verify it, the software connects to the licence service of our payment service provider.

• Recipient: api.polar.sh, operated by Polar Software, Inc. (Polar), 3500 South DuPont Highway, Dover, DE 19901, USA.
• When verification takes place: on the first tool call after setup and thereafter at most once every 24 hours. As long as a valid verification result less than 24 hours old is available, no connection is established; restarting the software alone does not trigger a verification. If the service cannot be reached, a new attempt is made no more often than once an hour.
• What is transmitted: the licence key and a randomly generated identifier of this workstation in the form layoutbridge- followed by eight characters. The identifier is generated from random values, created once and stored on your computer. No computer name, user name or device identifier is transmitted. If you set a descriptive name yourself with the environment variable LAYOUTBRIDGE_SPM_INSTANCE_NAME, that name is transmitted instead of the identifier.
• For technical reasons, your IP address is transmitted in the process.
• Not transmitted: the contents of your documents, file names or paths.
• Purpose and legal basis: verification of your entitlement to use the software and protection against unauthorised use; performance of the licence contract under Art. 6 (1) (b) GDPR.
• Role of the service and transfer to the USA: According to its own statements, Polar processes this data as a processor on the basis of its data processing addendum; the transfer to the USA relies on the standard contractual clauses of the European Commission. Privacy policy: https://polar.sh/legal/privacy
• Change of computer: If you release the activation with npx layoutbridge-spm --deactivate, the licence key and the identifier are transmitted to the same service in order to cancel the activation.
• Retention by the service: How long the licence service stores the transmitted data is governed by Polar's privacy policy (address above).

6. What the software stores on your computer

Everything below remains on your computer. We have no access to it and receive this data only if you send it to us yourself.

6.1 Licence verification result

File license-state.json, stored next to the server configuration:

• macOS®: ~/Library/Application Support/layoutbridge-spm/
• Windows®: %USERPROFILE%\.layoutbridge-spm\
• a different location via the environment variable LAYOUTBRIDGE_SPM_LICENSE_STATE
• readable only by your user account

Eight items are stored: a fingerprint of the licence key (not the key itself), the status, the time of the last verification, the time of the last valid verification, the expiry date, the activation identifier, the name of the verification method and the message text of the last verification. No e-mail address, name or customer number is stored.

The random identifier of this workstation is stored in the file instance-name in the same folder.

The purpose is to allow work to continue without a network connection within the grace period of 14 days. The files remain until you delete them.

6.2 Log files

For every tool call, the software writes one line to a log file:

• macOS: ~/Library/Logs/layoutbridge-spm/
• Windows: %USERPROFILE%\.layoutbridge-spm\logs\
• a different location via the environment variable LAYOUTBRIDGE_SPM_LOG_DIR

Recorded are the time, tool name, command, duration, success or type of error, error text, warnings, and the names of the returned fields and of the parameters passed. Parameter values appear only where they are necessary for troubleshooting and harmless – numbers, boolean values, short identifiers and format or enumeration names.

• Text from your documents is not logged. Only the number of characters takes its place, e.g. "<Text, 248 Zeichen>". The same applies to any longer or multi-line value.
• File paths remain readable, but without your user name: the user directory is replaced by ~.
• The licence key is not logged.

Retention: On start-up, the software deletes log files older than 30 days. The period can be changed with LAYOUTBRIDGE_SPM_LOG_KEEP_DAYS; the value 0 switches deletion off.

Switching off and extending: LAYOUTBRIDGE_SPM_LOG_LEVEL knows three values – off (no logging), basic (default, as described above) and full. With full, all parameters are recorded verbatim, including document text and paths containing your user name; the software points this out on start-up. This level is intended for troubleshooting and should be set back to basic afterwards.

None of this is transmitted.

7. Other network connections

Apart from the licence verification described in section 5, the software establishes no network connections. There is no usage measurement, no version or update check, no automatic transmission of error reports and no retrieval of fonts or images. The part of the software that controls Adobe® InDesign® contains not a single network call. On Windows, access to Adobe® InDesign® creates two auxiliary files per call in your computer's temporary folder and deletes them again afterwards.

8. Support

If you contact us at kontakt@mcp-interfaces.com, we process your e-mail address, your name, the content of the message and the details you send us in order to handle the enquiry (Art. 6 (1) (b) or (f) GDPR).

What you pass on in doing so: error messages of the software name file names and folders as well as designations from your document, such as names of swatches, pages, styles and layers. Your user name does not appear in them – the user directory is replaced by ~. Text from your documents and your licence key are not contained in error messages. Please send us only what is necessary to clarify the matter, and never your licence key.

The mailbox is operated by STRATO GmbH in Germany.

Storage period: We delete enquiries without a contractual context after twelve months. Messages relating to a contract or an invoice are retained within the commercial and tax-law periods of six and ten years respectively.

9. Purchase and subscription

Purchase, payment, invoicing and cancellation are handled by Polar as the seller. Polar's privacy policy (https://polar.sh/legal/privacy) applies to the data processed in the process. As the merchant, we have access to the order and licence data and process it to handle the licence relationship, for support and to fulfil tax obligations.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection under Art. 15 to 21 GDPR, as well as the right to lodge a complaint with a supervisory authority – the authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

11. Contact

SP Medienservice, Owner: Sascha Piprek Reinhold-Sonnek-Str. 12, 51147 Köln, Germany · kontakt@mcp-interfaces.com

12. Changes

We adapt this policy when the processes described change. The version published at https://mcp-interfaces.com/layoutbridge/privacy.html applies.

13. Note on this translation

This page is an English translation of the German privacy policy for the product at https://mcp-schnittstellen.de/layoutbridge/datenschutz.html. In case of any discrepancy, the German version applies.

Version: September 2026.

Adobe® and InDesign® are either registered trademarks or trademarks of Adobe in the United States and/or other countries. Mac®, macOS® and Apple Pay® are trademarks of Apple Inc. Microsoft, Windows® and PowerShell are trademarks of the Microsoft group of companies. Google Pay and YouTube are trademarks of Google LLC. Node.js is a trademark of the OpenJS Foundation. Claude is a name of Anthropic. Cursor, Codex, Polar, npm and all other product and company names mentioned are trademarks or names of their respective owners. All references serve solely to describe compatibility and distribution channels; there is no affiliation with, and no endorsement or sponsorship by, these companies.