Privacy policy

1. Controller

StormStag Studios is the controller for processing personal data on this website.

Contact for privacy and support requests: support@stormstag.com

Full legal details (address, representation) will be added to the legal notice when the public launch is ready.

2. Hosting and website visits

When you visit the website, the hosting or delivery provider processes technically necessary connection data. This may include IP address, date and time, requested URL, amount of data transferred, browser type and operating system, and the previous page (referrer).

This data is used to deliver the site, keep it stable, and prevent abuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the site securely).

We do not use this for advertising analytics or visitor tracking. Server logs are usually kept only briefly and then deleted or anonymised, unless a longer retention is needed to investigate incidents or abuse.

3. Cookies, fonts, and local settings

This website does not use tracking cookies, advertising cookies, or analytics tools (no Google Analytics, no Meta Pixel, no consent banner for ad tracking).

Language (German/English) is selected via the URL (/de, /en), not via a tracking cookie.

Fonts are loaded with next/font and served from this website. The browser does not request Google’s servers for those fonts.

4. Newsletter (planned, double opt-in)

The homepage includes a “Stay in the loop” form. Email addresses entered there are currently not stored and not sent to a mailing service. Clicking the button only shows a confirmation in the browser.

We plan a newsletter with double opt-in: after signing up you receive an email with a confirmation link. Only after you click that link is the address treated as confirmed. Storage is planned in a PostgreSQL database (email, status, confirmation token, timestamps).

Legal basis once sending starts: Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time, for example via the unsubscribe link in each email or by writing to support@stormstag.com.

Until sending is connected, the form does not create a newsletter list on our side.

5. Support contact

If you write to us (for example at support@stormstag.com), we process the details you send — typically email address, message content, and technical notes about the issue — in order to reply.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in handling requests). We delete messages when they are no longer needed for that purpose, unless a legal retention duty applies.

6. External shops and purchase links

Purchases and trials are handled by external shop or payment providers. Clicking “Buy”, “Buy now”, or “Try now” leaves this website.

The respective provider is responsible for the purchase flow. Their privacy policy applies. Once a shop is connected, we only receive the details needed to issue a license. Current shop links are placeholders.

7. Desktop software (Aurelix, DeskNotes, QuickTasks)

Our Windows apps are local desktop programs. Core features do not require an account or a cloud service.

Aurelix Workspaces stores workspace data locally on your computer (including under %LOCALAPPDATA%\Aurelix). DeskNotes stores notes locally. QuickTasks stores launcher entries locally.

That data stays on your device unless you connect the software to an online service yourself. We do not retrieve it automatically.

8. Videos and media

Product videos and images are served from this website or our hosting, not from YouTube or similar third-party platforms. Playback creates the usual technical connection record at the host (see section 2).

9. Recipients and third countries

Recipients may include the hosting provider (technically necessary logs) and — once connected — an email delivery service for confirmation messages and a shop provider for purchases.

Transfers to countries outside the EU/EEA are not currently intended. If a later service uses servers outside the EU, we will name it here and rely on an adequacy decision or appropriate safeguards (for example standard contractual clauses).

10. Retention

Server logs: only as long as needed for operation and security.

Support messages: until the request is resolved, then deletion or archiving only where legally required.

Newsletter (after go-live): until you withdraw consent, or until unconfirmed sign-ups are deleted after the confirmation token expires.

11. Your rights

Where we process personal data, you have the GDPR rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You may withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, workplace, or the alleged infringement.

12. Changes

We update this policy when the website, newsletter, or services we use change. The current version is shown at the top of this page.