Privacy policy

1. Controller

Cristian Jimenez — Biospace · Horizon Digital Studio (Einzelunternehmen), Rathausmarkt 19, 41747 Viersen, Germany. Email: info@horizondigitalstudio.com.

2. What we process and why

Account and page. Your email (sign-in by magic link, Google or Apple), the name, photo, bio, links and images you add to your page, and your language. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Payments. Processed by Stripe (Stripe Payments Europe, Ltd.). We never store card numbers; we keep the Stripe customer and subscription identifiers. Basis: Art. 6(1)(b) GDPR.

Page statistics. For each visit and click on your page we store the date, the country and device type derived from the request, and the referring site. No cookies, no individual profiling, no IP stored. Basis: legitimate interest of the creator in knowing how the page performs (Art. 6(1)(f) GDPR).

Mailing list. If a creator turns on the sign-up form, the emails collected belong to that creator, who is the controller for that list; we process them on the creator's behalf and the creator can export or delete them at any time.

Public social figures. To fill the media kit we read publicly available figures (followers, likes) from the social profiles the creator links. Basis: Art. 6(1)(f) GDPR.

Automatic badges. To show 'LIVE' or 'NEW' we query the Twitch API and public YouTube pages for the channels the creator links. No personal data of visitors is involved.

Cookie-free analytics. Vercel Web Analytics measures visits in aggregate, without cookies. Basis: Art. 6(1)(f) GDPR.

Email. Operational emails (sign-in links, payment notices, trial reminders) are sent with Resend (Resend, Inc.).

3. Cookies

We only use strictly functional cookies: lang (your language), the sign-in session cookies and bs_unlock_* (access to collections you unlocked). No advertising or tracking cookies, so you see an information notice, not a consent wall (§25(2) TTDSG).

4. Processors and transfers

Providers acting on our behalf: Vercel (hosting), Supabase (database and storage), Stripe (payments), Resend (email), ScraperAPI (reading public social figures). Some may process data outside the EEA under appropriate safeguards (standard contractual clauses).

5. Retention

Data is kept as long as your page exists. Unpublished drafts are deleted 30 days after creation; paused pages 90 days after the subscription ends; you can delete everything earlier from your panel. Invoices are kept for the legal retention period.

6. Your rights

Access, rectification, erasure, restriction, portability and objection. Write to info@horizondigitalstudio.com. You may lodge a complaint with a supervisory authority (in NRW: LDI Nordrhein-Westfalen).