Website Privacy Policy

1. Data Controller

STC Studios UG (haftungsbeschränkt)

Am Langwieder Bach 21 C

81245 Munich, Germany

Managing Director: Tillmann Christgau

Email: support@stc-studios.com

Website: https://stc-studios.com

2. Scope and Principles of Data Processing

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR) and this Privacy Policy.

This Privacy Policy applies to visits and interactions on our corporate developer website stc-studios.com.

For our standalone applications and software products (such as Dino AI or Airline Load Factor), dedicated product privacy policies apply, which can be reviewed in our Legal Hub.

3. Provision of the Website and Server Log Files (Hosting)

When accessing our website, the browser used on your device automatically transmits information to the servers of our hosting service provider.

We host our website using Google Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The following data is processed and temporarily stored in server log files:

• IP address of the requesting device
• Date and time of the request
• Name and URL of the retrieved file/page
• Referrer URL (the previous page from which access originated)
• Browser type, version, and operating system of your device
• Transferred data volume and HTTP access status code

3.1 Legal Basis and Purpose of Hosting

The aforementioned technical data is processed to ensure smooth website connectivity, maintain system stability and security, and defend against potential cyber threats.

The legal basis for this data processing is Art. 6(1)(f) GDPR (our legitimate interest in providing a reliable, secure, and performant website). Server logs are retained for standard security durations and subsequently deleted or anonymized.

We have entered into a Data Processing Addendum (DPA) incorporating EU Standard Contractual Clauses with Google Ireland Limited.

4. Contacting Us via Email

If you send us inquiries by email (e.g., to support@stc-studios.com), the information provided in your email (including your email address, name, and message content) is stored and processed to address your inquiry and any follow-up questions.

The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to contract performance or pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of incoming communications (Art. 6(1)(f) GDPR).

Your information will remain with us until the purpose for data storage no longer applies (e.g., after your request has been fully resolved), unless statutory retention periods apply.

5. No Cookies, No Web Tracking, No Analytics

Our website stc-studios.com does not use tracking cookies, no analytics suites (such as Google Analytics or Firebase Analytics), and no marketing trackers.

We do not build user profiles or track browsing activity across sessions or third-party websites. Because we only process strictly necessary technical connection data and set no non-essential cookies, no cookie consent banner is required.

6. Locally Hosted Web Fonts

This website uses locally hosted web fonts (Next.js font optimization) for uniform typography rendering. These fonts are bundled and served directly from our hosting CDN. No connections are made to external Google Fonts servers upon visiting our site.

7. Your Rights under the GDPR

Under applicable GDPR provisions, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed.
• Right to rectification (Art. 16 GDPR): You have the right to request the rectification of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR): You have the right to obtain restriction of processing under statutory conditions.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR.

8. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent supervisory authority for STC Studios is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 18, 91522 Ansbach, Germany

Website: https://www.baylda.bayern.de

9. Updates to this Privacy Policy

This Privacy Policy is current as of August 2026. We may update this policy periodically to reflect operational, legal, or technical changes.

10. Additional Provisions for Users in the United Kingdom (UK) and the United States (US)

10.1 United Kingdom (UK GDPR): For users residing in the United Kingdom, the provisions of this Privacy Policy apply mutatis mutandis under the UK General Data Protection Regulation and the Data Protection Act 2018. The supervisory authority in the UK is the Information Commissioner's Office (ICO, https://ico.org.uk).

10.2 United States / CCPA & CPRA Disclosure: We do not sell personal information of website visitors to third parties, nor do we share personal information for cross-context behavioral advertising.

10.3 Children's Online Privacy Protection (COPPA): Our website stc-studios.com is directed to a general developer and business audience and does not knowingly collect personal information from children under the age of 13. For child-directed applications (such as Dino AI), a dedicated COPPA-compliant privacy policy and verified parental consent mechanisms (via Kids Web Services) apply.