Privacy notice

1. Controller and roles

kessel.one e.K., owner Thomas Kessel, Königsbenden 19, 52249 Eschweiler, Germany. Email: info@stintcast.com. Commercial register: Amtsgericht Aachen, HRA 9409. VAT identification number: DE435766816.

Provider controls website, personal accounts, access, own security, support and billing. Teams/organisers decide media purposes/recipients. Solely instructed processing requires Article 28 agreement before use; contract/upload is not a legal basis for every filmed/heard person.

2. Necessary storage

IP/time/path/browser/connection information enables delivery/protection. No advertising/analytics trackers. Google/PayPal used only in chosen configured workflows. Necessary session/CSRF cookies; normally twelve-hour sessions, individual viewer expiry. Local language/layout supports requested function. Necessary storage under section 25(2)(2) TDDDG, personal processing also under GDPR.

3. Accounts and MFA

Email/identifier/password hash, verification, memberships/roles, invitations/recovery/security records; no plaintext passwords. Team names/logos/sponsors, vehicles/drivers/events/locations/sessions/notes. Leads grant roles. Operator MFA optional/off by default; personally enabled MFA requires key/confirmation/security records. Equal emails do not automatically connect accounts.

4. Google and Play

Optional Google sign-in uses OpenID with email and profile. Choosing it redirects to Google and processes necessary identifiers and authorised email/profile data, not mailbox/Drive content; no access-token storage for unrelated future services. Email/password remains an alternative. Google Ireland Limited is identified for EEA users: https://policies.google.com/privacy. International transfers are possible; specific safeguards are available on request. Internal Play testing may require a Google-account email; distribution and platform login are separate workflows.

5. Media and devices

Pairing/random credential/device/model/version/team/contact/revocation secure connection. Server hashes credentials; app protects them with Keystore and stores allowed backend together. Explicit uploads relay camera video/audio to authorised users. Transient buffers with no server archive; SD recordings separate. No camera action from planning/grants. Phone camera scans QR; Bluetooth/Wi-Fi/USB connect GoPro. Older discovery may need location permission but no geographic coordinates/profiles. GoPro sound, no phone microphone for streaming. Local camera addresses/settings are not automatically public.

6. Usage/security

Times/transfer/bytes/end reasons/playbacks/daily usage enforce limits with Berlin days. Versions/grants/change notes are traced. Necessary activation claim protects one-time trials. Logs may include IP/access/error. Private media/credentials not marketing; demo team/sponsors fictional.

7. PayPal

PayPal is initially configured only in its Sandbox for technical tests; real paid checkout is disabled. Future chosen billing sends required customer/address, plan/price/reference/period. Store version/consent/subscription/payment/refund/invoice records. No camera archives and no complete payment instrument credentials. Subscriptions collects approved payments; Invoicing generates associated already-paid invoices. Electronic invoices/full contract go to consented billing email, no second demand. PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg: https://www.paypal.com/de/legalhub/paypal/privacy-full. International transfers possible; actual Business/API safeguards reviewed before launch. No sevdesk.

8. Legal bases

Article 6(1)(b): contract/pre-contract, personal account/trial/package/support/billing. Other team users: Article 6(1)(f), protected collaboration. Security/misuse/capacity/faults also (f), compulsory tax/billing/contract records (c), separately required/obtained consent (a). Invoice consent is not advertising consent. Instructing team determines media grounds under Article 28. No advertising/AI training with instructed media.

9. Recipients and hosting

Roles limit team/viewer recipients. Operators administer/support/troubleshoot; authorities only lawfully. Confirmed Hostinger VPS Frankfurt, contracting entity still to identify from customer documents. Not guaranteed German-only support/subprocessors; https://www.hostinger.com/legal/dpa. Specific transfer safeguards on request. webgo GmbH, Wendenstraße 8–12, 20097 Hamburg processes email, not livestreams, under confirmed archived agreement: https://webgo.de/datenschutz. HTTPS/WSS/WebRTC protects connections but servers process media; encryption does not exclude operators. EU-only processing not assumed.

10. Retention

No server archive. Teams delete SD recordings. Account/device/team/planning stays as needed; expiry not erasure. Vouchers generally eight years, commercial correspondence six, other compulsory records possibly ten from calendar-year end; proceedings can extend. Other operational data do not automatically inherit these periods. Separate required claims/incidents.

After a successful backup, production performs bounded cleanup of transfer details, expired invitations/pairing codes, ended sessions, login attempts and daily usage whose end or expiry is at least thirty days old. Active data, one-time trial claims, audit and compulsory records remain separate; technical dependencies may delay cleanup. Authenticated encrypted backups rotate after thirty days while the newest valid backup remains. Protected encrypted backup copies are also stored outside the VPS. Manual erasure checks identity/controller/purpose/grounds/assets/backups. Blocking/soft-delete is not complete erasure; restoration reconciles earlier erasures/blocks.

11. Rights

Subject to law request access/correction/erasure/restriction/portability, object to legitimate interests for particular situation, withdraw consent prospectively; complain to authority especially https://www.ldi.nrw.de/kontakt. info@stintcast.com with StintCast/team/account details, never passwords/MFA secrets/tokens. People in media can request without an account. Required data enable function. Intended sixteen-plus, not age verification; paid contracts need capacity/representation. No profiling for legally/similarly significant automated decisions.