Privacy policy
Controller
Jacen Tomaszowski (GoldenLayerStudio), Bürgermeister-Weigel-Straße 4, 64732 Bad König, Germany. Contact see legal notice.
What data we process
When visiting the website: Our server processes technically necessary access data (IP address, time, page accessed, browser type) in order to deliver and secure the site. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure operation).
When using the generator: The topics, video links and any uploaded images you enter are processed to create your carousel. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).
When registering an account: E-mail address and an encrypted-stored password. Legal basis: Art. 6 (1) (b) GDPR.
When making a purchase: Payment data is processed exclusively by Stripe — we do not see or store any card data. We store only whether and which credit or subscription you are entitled to. Legal basis: Art. 6 (1) (b) GDPR.
Cookies
We use exclusively technically necessary cookies: a counter for the free trial generations, an anonymous device identifier for assigning credit and — after sign-in — a session cookie. There is no tracking and no advertising analysis; consent is not required for this.
Recipients / services used
| Service | Purpose | Provider |
|---|---|---|
| Google Gemini | Generation of the texts and images | Google Ireland Ltd. |
| Supabase | Database, accounts, image storage (region EU, Ireland) | Supabase Inc., USA |
| Stripe | Payment processing | Stripe Payments Europe Ltd. |
| Google Cloud | Server operation (region EU) | Google Ireland Ltd. |
Your input in the generator is transmitted to Google to generate the content. In the case of providers based in or affiliated with the USA, transfer takes place on the basis of EU standard contractual clauses or the EU-US Data Privacy Framework.
Storage duration
We store created carousels and account data until you delete your account. Data relevant to invoicing is subject to statutory retention periods.
Your rights
You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). To exercise these, please contact the address stated in the legal notice. You can also lodge a complaint with a data protection supervisory authority; the competent authority is the Hessian Commissioner for Data Protection and Freedom of Information.