# Privacy – Morph Control Source: https://morph-control.einser.at/en/privacy/ Morph Control Privacy Last updated: 30 October 2026. These notices describe the Morph Control app and this product website. Who is responsible? Sascha Eisner, trading as E1NSER, Arnsteingasse 26/36, 1150 Vienna, Austria. Privacy and product support: support@einser.at . Setting up your lamp Initial setup sends your selected account country and email address directly to Dyson to request a confirmation code. Your email, password, code and the resulting challenge are then sent directly to Dyson for authentication. A temporary token is used to retrieve registered lamps and their local pairing keys. Depending on your account region, HTTPS requests go to appapi.cp.dyson.com or appapi.cp.dyson.cn. Morph Control does not operate a server that receives or relays these credentials. Dyson processes the information under the privacy terms applicable to your Dyson account. See Dyson’s privacy information . The app cannot determine or change Dyson’s retention periods. What stays on your Mac The selected lamp’s long-term key, account identifier, serial number and name are stored in the macOS Keychain. Your Dyson password, email confirmation code and temporary cloud token are not permanently stored by the app. Its HTTP session uses no persistent cookies, credential store or cache. Appearance, accent colour, language, keep-connection and optional Mac power-sync preferences stay in the app’s own UserDefaults domain. A remembered Bluetooth device identifier and a deliberate connection pause are held in memory for the current app process. Everyday control communicates directly with the lamp over Bluetooth. No usage analytics or advertising The app contains no advertising, tracking or analytics SDKs and sends no usage statistics to a Morph Control backend. It does not require a separate Morph Control account. Your Bluetooth permission is used to find and control the lamp. Connection and Mac power options Keep connection is enabled by default. Turning it off releases an unused connection after 60 seconds with the panels closed. Releasing the connection deliberately pauses automatic reconnecting until explicit connection, re-enabling keep-alive or app restart. Sleep ends the connection. Reconnection has a limited attempt budget; display or session return can trigger a local status check. Sync light with Mac is off by default. When enabled, app startup and wake can switch the light on. Before sleep or shutdown the app attempts to switch it off only using an existing connection. Ordinary app quit disconnects without switching off. macOS may interrupt a sleep or shutdown command. Start at login is a separate, optional setting. Deleting data and controlling access Forget lamp deletes its stored credentials from this Mac’s Keychain. It does not delete your Dyson account or unregister the lamp with Dyson. Appearance and language preferences remain separate. Uninstalling an app is not a reliable way to remove a Keychain item; use Forget lamp first if you want to remove the stored credentials. You can revoke Bluetooth permission and disable the login item in macOS System Settings. This website This is a static website without advertising, usage analytics, embedded social media or external font services. If you choose a language or colour scheme, the browser stores that preference locally. The colour scheme stays in the browser. The selected language is also visible in the requested /de/ or /en/ URL; there is no separate preference tracking. The website is hosted by Vercel Inc. Hosting and security services process technical request data such as IP address, requested URL, timestamp and browser information to deliver and protect the website. Their handling and retention follow the applicable provider policies; this notice does not assert that hosting logs do not exist. See Vercel’s privacy policy . No Vercel Web Analytics or Speed Insights script is included. Support, legal basis and retention If you email us, we process your contact details and message to answer and handle the request. This processing and the technical operation and security of the website serve our legitimate interests in providing support and a working product website under Article 6(1)(f) GDPR. We keep correspondence for as long as needed to handle it and to satisfy applicable legal retention requirements. The app’s local credentials remain until you remove them. Transient authentication data is discarded after setup or cancellation. Any separate processing by Dyson is governed by Dyson’s own notices. Your rights Where the GDPR applies, you may request access, correction, deletion, restriction, or portability, and object to processing based on legitimate interests. If processing is based on consent, you may withdraw it. Contact support@einser.at. You may also lodge a complaint with a competent supervisory authority, including the Austrian Data Protection Authority .