Privacy Policy

1. Controller according to the GDPR

StreamShapers UG (haftungsbeschränkt)
Hauptstr. 25
23972 Dorf Mecklenburg, Germany
Email: contact@streamshapers.com

2. General information on data processing

This policy covers the StreamShapers website and account services, our documentation, StreamShapers Ferryman and StreamShapers OGraf Builder for Adobe After Effects, including its embedded Ferryman panel. The sections below apply to the features you actually use.

We take the protection of your personal data very seriously. Personal data will only be processed to the extent permitted by law or if you have given your consent.

3. Collection and storage of personal data and type and purpose of processing

a) When visiting the web app

When you access our web app, the following data is automatically transmitted to our server by your device:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL

Purpose: To ensure a stable connection and system security
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

b) User accounts and organisations

Registration requires a username, an email address and a password. We process the following account information, depending on the features you use:

• Username and email address
• Password (stored as a salted password hash, not in readable form)
• Optional first and last name, profile image and profile description
• Account status, email verification status and account timestamps
• Organisation membership, roles, assigned seats and access permissions
• Plan, licence and subscription status

If you manage an organisation, we also process the organisation information you provide, such as its name, contact email and billing address. Providing optional profile information is voluntary. Without the required registration information, we cannot create your account.

Purpose: Providing your account, managing team access and making the features included in your plan available to you
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of contract)

c) Graphics, templates and cloud storage

Ferryman and OGraf Builder process the graphics, animation data, images, text and settings you import or create. OGraf Builder passes rendered animation data to its embedded Ferryman panel and may write a local intermediate file. Exported files are saved to the location you choose.

When you use cloud saving, template and project content, names, descriptions and associated files are sent to our API and stored with your account. Such content may contain personal data that you include. Cloud storage is distinct from working with local files. Only upload content you are authorised to use.

Purpose: Providing personalized features and storage
Legal basis: Art. 6 para. 1 lit. b GDPR

d) Usage analysis for product improvement

To understand how our website, documentation and Ferryman web app are used, we run Umami, a self-hosted analytics tool on a separately operated server in Germany, rather than our API/database host. When analytics is enabled, it processes page visits, referring pages, technical browser and device information and approximate location information derived from the connection. We also record interactions such as changes to the selected billing period, product-link clicks and release-notification signups. These events help us understand which features work well and where users encounter problems.

On the StreamShapers website, analytics is restricted to selected public pages. Account, sign-in, password-recovery, payment, contact and project pages are excluded. Tracked page URLs omit query parameters and fragments. External referrers are reduced to their origin; internal referrers are limited to permitted public paths. We do not include payment transaction IDs or form contents in these website analytics events. These website restrictions do not describe the separate extension usage events below.

Access to the self-hosted analytics installation and its data is restricted to our three StreamShapers administrators.

On the website, in the documentation and in the Ferryman web app, analytics only starts after you actively consent. Optional categories are off by default. You can accept all or enable individual categories in Cookie Settings. Your decision is shared across these production sites. You can withdraw consent via Cookie Settings; further analytics requests are then blocked. Analytics is disabled in staging, sandbox builds and Ferryman's embedded panel.

Purpose: Improving usability and further developing our product
Legal basis: Art. 6 para. 1 lit. a GDPR (consent) and, where applicable, Section 25 para. 1 TDDDG for access to information on your device.

e) Embedded videos (YouTube)

On tutorial pages and within our documentation we embed videos hosted on YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). To protect your privacy we use the privacy-enhanced domain youtube-nocookie.com. The video player loads after you click its placeholder or if you have already allowed external media in Cookie Settings. No requests to YouTube are made for the placeholder; optional preview images are served locally. Once a video loads, YouTube may receive your IP address, browser information and referring URL, and may set its own cookies in your browser. Data may be transferred outside the European Economic Area, including to the United States. Google describes its transfer mechanisms in its data transfer information.

You can grant or withdraw consent for embedded videos at any time via the Cookie Settings link in the footer.

Purpose: Displaying video content (tutorials, documentation)
Legal basis for loading the video player: Art. 6 para. 1 lit. a GDPR (consent)

f) Payments and subscriptions (Paddle)

When you purchase a paid StreamShapers plan, payment and subscription billing are handled by Paddle as the merchant of record. For buyers in the United States, the contracting entity is Paddle.com Inc., 3811 Ditmars Blvd, #1071, Astoria, New York, 11105-1803, USA. For buyers elsewhere, it is Paddle.com Market Limited, 30 Old Bailey, London, EC4M 7AU, United Kingdom. Paddle's Buyer Terms identify the contracting entity for your purchase. Paddle processes buyer information as an independent controller for its payment and merchant services.

Paddle may process your name, email address, billing address, country, tax information, payment details and transaction data. StreamShapers receives the identifiers and subscription information required to activate and manage your plan, such as customer and subscription IDs, selected plan, subscription status and billing period. Full card or bank-account details are not stored on StreamShapers servers.

Purpose: Processing payments, issuing invoices, preventing fraud and providing paid subscriptions
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 lit. c GDPR (legal obligations)
Further information is available in the Paddle Privacy Policy.

Our homepage also loads Paddle.js and Paddle Retain to let existing customers update their payment method after following a payment-recovery email. Loading these services connects your browser to Paddle and its ProfitWell service; technical connection data, including your IP address and browser information, is transmitted. StreamShapers does not pass your account ID or email address when initializing this public landing page. Information contained in a recovery link is handled by Paddle to provide the requested payment service. This does not enable our optional website analytics or embedded media.

g) One-time release notification

If you sign up to be notified about an upcoming StreamShapers release, we process your email address, your optional first name, the signup source and the time of registration. The signup also records a hash derived from your IP address and your browser's user-agent information for abuse prevention and troubleshooting. A hashed IP address is not necessarily anonymous. Your subscription is used to send the single release notification described next to the form, not a recurring newsletter or third-party marketing.

We use your signup to send the requested release notification. You can request deletion or withdraw your consent at any time by emailing contact@streamshapers.com. Withdrawal does not affect the lawfulness of processing before withdrawal.

Purpose: Sending one requested release notification
Legal basis: Art. 6 para. 1 lit. a and Art. 7 GDPR (consent and proof of consent); Art. 6 para. 1 lit. f GDPR for the technical data used to protect the signup process against abuse

h) Contact enquiries

When you contact us by email or through our contact form, we process your email address, your message and your name if you provide it, so that we can respond to your enquiry. The form forwards your enquiry to our team by email; it does not create an account or subscribe you to marketing emails. Our hosting and email service providers process the data needed to deliver and store this correspondence on our behalf.

Legal basis: Art. 6 para. 1 lit. b GDPR for enquiries about entering into or performing a contract; otherwise Art. 6 para. 1 lit. f GDPR, our legitimate interest in responding to enquiries. Providing your name is optional. Your email address and message are required to submit the form and receive a reply.

We retain your enquiry and the related correspondence to handle your request. Once your enquiry has been fully resolved, we delete the data unless there are other grounds for retaining it.

If the correspondence contains business records subject to statutory retention requirements, we retain those records until the applicable commercial or tax retention periods have expired. Where specific information is necessary for the establishment, exercise or defence of legal claims, its further retention depends on the applicable limitation periods and, where relevant, the duration of ongoing proceedings. Those data are deleted once these grounds for retention no longer apply.

i) Sign-in and account security

We process session identifiers, account identifiers, session creation and expiry times, and security information needed to keep you signed in and protect requests against forgery. Successful sign-ins are recorded with your email address and the time of the sign-in. We also maintain last-login and last-activity information for your account.

Email verification and password recovery use time-limited tokens; their verification values are stored as hashes. We send the transactional emails needed to verify your address, recover your account and respond to requested account actions. These are separate from marketing communications.

Purpose and legal basis: Art. 6 para. 1 lit. b GDPR for account access and recovery; Art. 6 para. 1 lit. f GDPR for our legitimate interests in detecting misuse, investigating security incidents and preventing unauthorised access.

j) Spam protection (Cloudflare Turnstile)

Registration, password-reset requests, verification-email resends and the contact form use Cloudflare Turnstile, provided by Cloudflare, Inc., USA. It evaluates technical signals including your IP address, browser information, connection characteristics and the website origin to detect automated abuse. We also use request limits and hidden anti-spam fields on public forms.

Cloudflare acts as a processor when protecting our website and as an independent controller when using signals to improve its bot detection. Processing may take place outside the EU. Our legal basis is Art. 6 para. 1 lit. f GDPR, our legitimate interest in protecting accounts and communication channels against abuse. Further details are available in the Cloudflare Turnstile Privacy Addendum. You can contact us directly by email without using a Turnstile-protected form.

k) Extension access, downloads and usage events

OGraf Builder contacts our API for sign-in, shared access between its two panels, licence and seat checks, and version information. For these services we process account, session, plan, organisation and client-version information. The legal basis is Art. 6 para. 1 lit. b GDPR for providing the requested functionality and Art. 6 para. 1 lit. f GDPR for preventing unauthorised access.

Extension downloads are logged with the account identifier, version, time, access and organisation information, browser user agent and approximate country. OGraf Builder also sends panel-open, sign-in and export success, failure and timeout events. These include time, plugin version, applicable plan and access information, and, where applicable, duration and an error category. The server associates them with your account identifier and derives a country from the connection. These records help us investigate errors and understand product use; they are not anonymous.

For extension usage statistics, we collect and store only the usage events and associated technical and account information described above, not your composition content. This statistics collection does not read, transmit or store composition or project names, layer contents, text, images, animation data or exported graphics. The local processing needed to export a composition and any cloud saving you choose to use are separate, as described in section 3(c).

Legal basis for extension usage statistics: Art. 6 para. 1 lit. f GDPR. Our legitimate interests are understanding product use, identifying export problems and improving the reliability and usability of OGraf Builder.

Your right to object: You may object to this processing on grounds relating to your particular situation by contacting contact@streamshapers.com. We will then stop processing the data for these purposes unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.

Extension usage events are separate from Umami website analytics. The website's Cookie Settings do not control them. If an event cannot be sent, the extension can keep it in a local queue and retry later. This queue contains up to 500 events and is cleared on sign-out. It is not a copy of your composition or exported graphics.

l) External data sources in graphics

If you configure a Google Sheets data source in Ferryman, the application requests the selected publicly accessible sheet directly from Google to read the configured values. This transmits connection information, including your IP address, to Google. Exported graphics with such a source may also make these requests when run. This happens when using the external-data feature, not just by visiting our website. The legal basis for providing this requested feature is Art. 6 para. 1 lit. b GDPR. Google's own processing is described in its Privacy Policy.

Contract declarations and Terms acceptance

When you submit a cancellation or withdrawal, we process your name, acknowledgement email address, contract identification, declaration and any cancellation date or reason you provide. We record the submitted form version, time of receipt and reference, together with acknowledgement delivery status, verified contract links and the administrative steps needed to resolve the matter. Withdrawal does not require a reason. These forms are available without an account or analytics consent.

Authorized StreamShapers administrators review these records and manually handle cancellation or refunds with Paddle when applicable. We share only the information necessary to identify and handle the relevant transaction with Paddle. Our hosting, database, backup and email providers process the records and correspondence on our behalf as described below. Email delivery can be delayed or fail; your declaration remains recorded separately from the mail queue.

When you accept our Terms, we store your account reference, the Terms version and document checksum, the server-recorded acceptance time and the occasion, such as registration or checkout. This documents your contractual agreement; it is not an analytics or marketing consent. We do not collect additional IP addresses or device fingerprints for this acceptance record.

Legal bases: Art. 6 para. 1 lit. b GDPR for entering into, performing and ending the contract; Art. 6 para. 1 lit. c GDPR for applicable statutory acknowledgement and record obligations; and Art. 6 para. 1 lit. f GDPR for our legitimate interest in documenting declarations and agreements, handling disputes and preventing misuse.

We keep these records for processing and follow-up, and where required to meet applicable commercial or tax retention obligations or to establish, exercise or defend legal claims. Continued retention is assessed against the applicable obligations, limitation periods and any ongoing proceedings. Records are deleted when those purposes and grounds no longer apply. Deleting an account does not automatically remove records that still need to be retained.

4. Cookies and local storage

We use essential cookies for secure account access, form protection and your saved privacy choices. We also use session storage for navigation, as described below. External-media preferences are separate from website analytics settings.

a) Essential cookies

b) Navigation session storage

The lastVisitedPath entry in your browser's session storage keeps the last visited website path for our navigation controls. It normally remains until the browser tab is closed. It is not an authentication token.

c) Cookies set by embedded YouTube videos (opt-in only)

Only set when you consent to external media and actually load a video. Cookies are set by YouTube on the youtube.com and google.com domains. They are out of our control; a current list is available in Google’s cookie disclosure. If you later revoke consent you can delete them in your browser settings.

d) Ferryman and extension storage

Ferryman remembers theme and language preferences in local storage (ferryman-theme-storage and i18nextLng) until changed or the application storage is cleared. Export path preferences use session storage (ferryman.ografPackagePathSessionDefaults.v1) for the current session.

OGraf Builder stores an account identifier locally for its interface (streamshapers_plugin_user_id) and removes it on sign-out. Its usage-event queue uses streamshapers_plugin_stats_queue, as described above. Remembered sign-in uses the operating system's credential storage where available; otherwise it is limited to the running session. This allows sign-in to be shared between the OGraf Builder and embedded Ferryman panels. Access tokens are held in memory, not in browser local storage.

5. Data retention

The necessary retention period depends on the purpose: account and cloud data are needed while the corresponding service is in use; correspondence is needed to handle and follow up on the enquiry; technical records are used to investigate errors and security incidents. Statutory retention obligations and the establishment, exercise or defence of legal claims may require longer storage. Transaction and invoice records are subject to tax and commercial-law retention requirements. Backup copies have a separate retention cycle and are not removed immediately when a record is deleted from the active database.

6. Disclosure of data

We use the following infrastructure providers:

• ALL-INKL.COM – Neue Medien Münnich, Germany: website hosting and email delivery and storage. Privacy information
• netcup GmbH, Germany: API and database hosting in Nürnberg, Germany. Privacy information
• Hetzner Online GmbH, Germany: backup storage in Falkenstein, Germany. Backups can contain copies of account data and cloud content. Privacy information

If you belong to an organisation, its authorised administrators can see the member information needed to manage access, including username, email address, first and last name where provided, organisation role and seat status. Paddle, Cloudflare and Google receive data for the specific features described above; they are not the hosts of our account database.

We only share personal data with third parties where:

• You have given explicit consent (Art. 6 para. 1 lit. a GDPR)
• Processing is necessary for our legitimate interests in responding to enquiries and preventing abuse (Art. 6 para. 1 lit. f GDPR), as described above. Hosting and email processors act on our behalf under Art. 28 GDPR.
• We are legally obligated to do so (Art. 6 para. 1 lit. c GDPR)
• Processing is required to perform a contract, including payment processing by Paddle (Art. 6 para. 1 lit. b GDPR)

7. Your rights under the GDPR

You have the right to:

• Request information about your stored personal data (Art. 15 GDPR)
• Request correction of inaccurate data (Art. 16 GDPR)
• Request deletion of your data (Art. 17 GDPR)
• Restrict data processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to data processing (Art. 21 GDPR)

To exercise these rights, please contact: contact@streamshapers.com

8. Withdrawal of consent

You may withdraw consent at any time with future effect. This does not affect the lawfulness of processing before withdrawal. Use Cookie Settings for website analytics and external-media preferences, or contact us for other consent-based processing.

Where we rely on legitimate interests, you may object on grounds relating to your particular situation. We will assess your objection under Art. 21 GDPR. Your rights apply subject to the conditions and exceptions set out in the GDPR.

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular where you live, work or believe a data protection infringement has occurred. You may also contact the Landesbeauftragter für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, the authority for the German state where we are based.

10. Data security

We use HTTPS (TLS encryption) to protect data transmission between your device and our servers.

11. Last updated

Last updated: September 2026
We reserve the right to update this privacy policy if our web app or legal requirements change.