Privacy

Updated: October 17, 2026

This information covers the website, Stormrider Records Studio and Stormrider Comedy Studio at tools.stuermeronline.de.

Facebook & Instagram · YouTube · Gemini · Data deletion

Controller

The controller is Marco Stürmer, Stormrider Records, Hauptstr. 71, 55767 Kronweiler, Germany. Email: mail@stormriderrecords.com; telephone: +49 160 97044476.

Hosting and technical access data

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Requests involve technical information such as IP address, time, requested address, status code and browser information. Processing supports the delivery, stability and security of the website (Article 6(1)(f) GDPR). The hosting provider acts as a processor. Technical logs are retained only as necessary for operation and security checks; specific security incidents may require longer retention.

Public website and external links

We use no analytics or marketing services and load no embedded streaming players. Images, fonts and icons are served by our hosting. Opening a link to Spotify, Apple Music, Amazon Music, YouTube Music, YouTube, DistroKid or an artist website connects you to that provider, whose privacy policy then applies. Language selection is part of the page address.

Private studio

The studio is a workspace for the operator, without public registration. A necessary session cookie is used for authentication and access protection, never for advertising. Authentication expires after two hours of inactivity, and signing out terminates the session. Failed logins store an IP-address hash and timestamp to limit further attempts; these records are cleared after 24 hours on the next processing operation. Processing is based on the legitimate interest in protecting the workspace (Article 6(1)(f) GDPR).

Drafts, files and exports

Texts, templates, translations and uploaded files saved in the studio are protected on the server. Music Studio text and export tools do not send text to AI or translation services. Separately requested Comedy Studio Gemini features are described in “Optional Gemini features”. Content is retained until removed by the operator. Music Studio changes are backed up, with up to 30 database backups retained. Erasure requests may be sent to the address above and must also account for backups. Music Studio PDF, Word, ZIP and text exports are generated on the server and downloaded only after authentication.

Contact requests

When you contact us by email, we process your contact information and message to answer your request. The legal basis is Article 6(1)(b) GDPR for contract-related requests, otherwise Article 6(1)(f). Data is deleted once the matter is resolved unless statutory retention obligations or legitimate reasons require further storage.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). You may also complain to a supervisory authority, in particular the data protection authority of Rhineland-Palatinate. We do not engage in automated decision-making or profiling.

YouTube connections in both private studios

Mein Studio uses YouTube API Services. After your explicit Google authorization, it reads the selected channel identity and uploads videos you select, including title, description, visibility, audience and synthetic-media disclosure. The scopes are youtube.readonly and youtube.upload. The Studio neither requests nor stores Google or YouTube passwords.

We store the artist/channel assignment, channel ID and name, OAuth refresh token, authorization-check date, upload results and video links. Music Studio holds access tokens in memory only for the current server request. Comedy Studio also caches time-limited access tokens in its encrypted connection store. Uploading sends the selected video and metadata to Google/YouTube. Data is held in the protected server area at ALL-INKL.COM for the requested channel connections and uploads. The operator and hosting provider have operational access; these API data are not shared for advertising, data trading, AI training or analysis of other channels. YouTube-related processing is based on your consent (Article 6(1)(a) GDPR).

Use “Disconnect all YouTube connections and delete API data” in Music Studio or “Disconnect YouTube and remove API data” in Comedy Studio. After confirmation, the app grant is revoked at Google; channel assignments, tokens, upload results and video links are cleared in that studio, including managed database backups in Music Studio. A shared grant may affect several artist channels. For deletion in both studios and further backups, also use the public deletion instructions. Original videos, your own text and other platforms remain. This does not delete videos on YouTube. Questions and erasure requests: mail@stormriderrecords.com or marco@stuermeronline.de.

Channel metadata is refreshed during authorization checks. Stored API upload results and derived links are cleared after 29 days; a receipt without a video identifier remains to prevent duplicate uploads. Tokens are retained only for active connections. Music Studio is designed to check daily for Google revocation. Comedy Studio runs its daily check when the studio is opened; this is not an independent daily background service.

You can also revoke the app grant directly in Google security settings. Google processes data under its own privacy policy, and the YouTube Terms of Service also apply.

Revoke Google access · Google Privacy Policy · YouTube Terms of Service · Studio terms

Scope: Music and Comedy studios

This privacy information also covers the private workspaces Stormrider Records Studio at stormriderrecords.com and Stormrider Comedy Studio at tools.stuermeronline.de. Marco Stürmer, at the address above, operates and controls both services. Contact for both studios and deletion requests: marco@stuermeronline.de or mail@stormriderrecords.com. The shared Meta app is “Stormrider Records Studio”, app ID 1106460691873404.

Facebook and Instagram connections

After your Meta authorization, the studios read and assign the Facebook pages and linked professional Instagram accounts you authorized. Processing includes page and account IDs, display names and Instagram usernames, granted permissions and tasks, access tokens, and technical token-validation and expiry information. Studio permissions include pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic and instagram_content_publish; a Music connection configured accordingly may also use business_management for business assignments you authorized. Facebook and Instagram passwords are neither requested nor stored.

Publication checks read post and video IDs, full captions, media type, publication time, processing status and post links from the assigned accounts. Saved results display existing publications, link them to your drafts and prevent duplicate uploads. If Meta automatically creates a crosspost under your Meta settings, its status and link may be assigned to the second account. This does not initiate another upload.

Only an explicit publication request sends the selected image or video, or a temporary download URL, and selected metadata to Meta. This may include the caption, cover, format, supported location or activity information, and native AI disclosure. Processing for this optional account connection and publication is based on your consent (Article 6(1)(a) GDPR). You may revoke permission for future processing.

Short-lived user tokens are exchanged server-side for long-lived grants during setup; selected page tokens are stored for ongoing access. Music Studio holds connection data in the protected private server area outside the public web directory. Comedy Studio additionally encrypts connection data and can restore it after sign-in. The operator and hosting provider have operational access. Tokens and app secrets are not displayed in public status responses.

Meta connection data is stored for the connection you request. API post data and links are retained for the catalog and publication records until no longer needed or deletion is requested. There is currently no blanket automatic 29-day deletion of Meta data. Revocation at Meta removes access but does not automatically erase stored studio data. You can request complete deletion at any time using the public instructions below.

Revoke Meta access and request data deletion · Meta Privacy Policy

When you initiate sharing, the selected app or your configured studio helper receives the selected media, caption and, where applicable, cover. Private server files may receive a random download link valid for ten minutes. Anyone receiving that link can retrieve the selected file while it is valid. It contains no platform credentials. Technical grants cannot be used after expiry. Publication and selection of a chat, recipient or WhatsApp status take place on the destination platform. This process does not read your private chats or contact lists.

Optional Gemini features in Comedy Studio

A prompt review you initiate sends the prompt, context, supplied error messages and selected reference images to the Google Gemini API. Gemini chat sends your messages and the conversation history used for that request. This occurs only for the feature you request; the catalog and platform credentials are not automatically sent to Gemini. Optional transmission of personal content is based on your consent (Article 6(1)(a) GDPR).

Review text, results and technical image information such as filenames and checksums may be stored in private review history; this history does not store the image files themselves. At your request, the Gemini API key can be encrypted on the server and removed by disconnecting. Existing saved reviews are not automatically deleted by disconnecting; use the deletion instructions for those. Google processes submitted content under the terms applicable to the Gemini API service and region in use. Google may temporarily log inputs and responses for abuse and security checks. The Gemini terms linked below explain content use and the regional provisions for the EEA.

Gemini API Additional Terms · Google Privacy Policy

Local drafts and recipients outside the EEA

To recover unsaved posts, Comedy Studio may keep draft data in your browser’s session storage. This supports editing your drafts and is not used for advertising. You can remove local data by closing the relevant browser session or clearing site data; this does not delete server copies. Providing and securing the private workspace is based on Article 6(1)(f) GDPR.

Transmission you initiate to Meta, Google, TikTok or WhatsApp may involve processing outside the EU or EEA. Platform providers process received data under their own privacy policies and the transfer arrangements applicable to the service. Protected storage at our German hosting provider does not replace this additional processing.

TikTok Privacy · WhatsApp Privacy · Data deletion instructions for both studios

Voices and speech with ElevenLabs

The private ElevenLabs area supports voice design, cloning authorized recordings, voice remixing, speech and dialogue, transcription, alignment and sound effects. Only when you explicitly start an operation does the Studio server send the relevant text, descriptions, voice identifiers, pronunciation rules or selected recordings to ElevenLabs. The API key remains server-side. ElevenLabs may store inputs and outputs according to its account settings and privacy policy. Voice profiles, uploaded recordings, generated audio, transcripts and timestamps remain in protected Studio storage. Voice searches and generation history are fetched from ElevenLabs; explicitly importing a history entry also stores its audio on our server. Generation and selection do not publish a post.

Remotion renders video in the browser on the current device. Remotion receives technical licensing and render data, including IP address, page origin and render status, but no video or text contents. The finished MP4 is uploaded to protected Studio storage only when you select “Save video to results”. In Social Media, a saved video or transcript is adopted into the current post only after your explicit selection. Publishing to a platform is a separate step.

ElevenLabs · Privacy · Remotion · Telemetry

ALL-INKL.COM privacy information · Rhineland-Palatinate data protection authority