Privacy policy

Controller

JS Capital Holding UG (haftungsbeschränkt), represented by Jonah Schröder, Inseler Straße 92, 29640 Schneverdingen, Germany. Email: [email protected]

Hosting and server logs

This website runs on a server of Hetzner Online GmbH in Germany. When you visit the site, the server briefly processes technical data such as your IP address, time of access and the requested page, to deliver the site and keep it secure (Art. 6 (1) (f) GDPR). We do not use tracking or analytics tools, and all fonts are loaded from our own server. The only cookie is set when you log in to the member area (see below).

Link page and video previews

The link page shows our newest YouTube videos. Our server loads the titles and preview images from YouTube itself and delivers them to you, so your browser does not connect to Google when you view the page. Only when you click a video or a social media link do you leave our site, and the privacy policy of that platform applies. We count how often each link is clicked per day, without cookies and without storing your IP address.

Cloudflare

We use Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, to deliver this website securely and protect it against attacks. Every request passes through the Cloudflare network, which processes technical data such as your IP address for this purpose (Art. 6 (1) (f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, and a data processing agreement with Cloudflare is in place.

Waitlist

If you join the waitlist, we store your email address, your name if given, your interest (software, course or both) and the time of sign-up. You will receive an email with a confirmation link first (double opt-in). Only after you confirm will we send you news about Orange Scarf Studio. Legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time with the link in every email or by writing to us. We then delete your data, except for a record of the opt-in and opt-out we need to prove consent.

Emails are sent through an email service provider that processes your email address on our behalf under a data processing agreement.

Member area

Memberships and the Supporter Pack are sold through Stripe (Stripe, Inc., USA, and its affiliates), which acts as the merchant of record. Stripe processes your payment details, address and tax information under its own privacy policy. From Stripe we receive your email address, your name, your tier, the status of your membership and, for Captains, the name you chose for the credits.

When you log in to our member area, we check with Stripe whether your email address has an active membership and which tier it has, and we send you a login link by email. We store your email address, your tier and the time of the login request. After you log in, we set one necessary cookie that keeps you logged in on this device for 30 days, renewed with each visit. It contains only your email address and an expiry date, signed so it cannot be forged. You can log out at any time, which deletes the cookie.

If you write a comment, react to an episode or suggest a story, we store the name you enter, your text or reaction and the time. Other members see the name and the text, never your email address. We count visits, downloads and similar actions in the member area per day to improve it.

Early versions of new episodes are stored with Cloudflare R2, a storage service of Cloudflare, Inc. (see above). When you watch one, your browser loads the video directly from Cloudflare with a link that expires after a few hours, and Cloudflare processes technical data such as your IP address to deliver it.

Legal basis for all of this is the membership contract (Art. 6 (1) (b) GDPR).

Cooperation requests

If you send a cooperation request, we store your name, company if given, email, topic and message to answer you (Art. 6 (1) (b) and (f) GDPR). We delete the request when it is no longer needed, at the latest after 12 months, unless legal retention periods apply.

Your rights

You have the right to access, correction, deletion, restriction of processing, data portability and objection, and the right to withdraw consent at any time. You can also complain to a data protection supervisory authority.