Legal

Privacy policy

This policy explains what personal data Stage Studio handles, why, and the rights you have. It is written to match how the product actually works, so it stays short and specific.

Who is responsible

The controller is Sascha Heyer. You can reach us by email at [email protected].

When you buy Stage Studio Pro

Checkout runs on Stripe. Stripe collects your payment details and email and processes the payment as its own controller. We receive your email address and an order reference so we can issue your license. We never see your card number.

When we send your license

We generate a license key and email it to you through Resend, our email provider. The only personal data in that step is your email address and the license key tied to your order.

When you activate a license

To stop one key being shared across unlimited machines, the app sends your license key and a one-way hashed identifier of your Mac to our server on activation. We store that hash, your email, and the order reference to count how many devices a key runs on. We store a hash, not your hardware id, so the original cannot be recovered.

When you visit the site or download the app

The website and the download run on Google Cloud and are served through Cloudflare, which acts as a content network and security layer. Their servers process technical data such as your IP address and browser to deliver pages, block abuse, and keep the service available. The site itself sets no advertising or analytics cookies. Cloudflare may set a strictly necessary cookie for security.

The app and your own machine

Stage Studio does its work locally on your Mac. It does not phone home except for the license activation described above. If you use the optional background or music generation, that runs against your own Google Cloud project, not ours.

Processors and international transfers

We rely on these providers to run the service.

• Stripe, for payments.
• Resend, for the license email.
• Google Cloud, for hosting, the license database, and the download.
• Cloudflare, for content delivery and security.

Some of these process data outside the EU, including in the United States. Where that happens, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Legal bases

We process your email and order to deliver the license under Article 6(1)(b) GDPR, performance of a contract. We process the hashed device id and technical logs under Article 6(1)(f) GDPR, our legitimate interest in preventing abuse and keeping the service secure and available. We keep records needed for tax and accounting under Article 6(1)(c) GDPR, a legal obligation.

How long we keep it

We keep your license and order records for as long as you can use the license and as long as tax law requires us to keep the receipt, then we delete them.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict its use, or hand it to another provider, and you can object to processing based on legitimate interest. Email [email protected] and we will handle it. You also have the right to complain to a data protection supervisory authority.

Changes

If we change how the product handles data we update this page and change the date below.

Last updated July 2026.