Privacy Policy

1. Controller according to the GDPR

Nico Peters
Glockenblumenweg 1
22529 Hamburg

2. General information on data processing

We take the protection of your personal data very seriously. Personal data will only be processed to the extent permitted by law or if you have given your consent.

3. Collection and storage of personal data and type and purpose of processing

a) When visiting the web app

When you access our web app, the following data is automatically transmitted to our server by your device:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL

Purpose: To ensure a stable connection and system security
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

b) When registering a user account

To use core features of our web app, you need to register an account. We collect:

• First and last name (if required)
• E-mail address
• Password (stored in encrypted form)

Purpose: Creating and managing a personal user account
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of contract)

c) Uploading content (graphics)

Users can upload and store graphics through their personal accounts. These files are linked to the corresponding user account.

Purpose: Providing personalized features and storage
Legal basis: Art. 6 para. 1 lit. b GDPR

d) Usage analysis for product improvement

To understand how our web app is used and where to focus improvements, we run Umami, an open-source analytics tool, on our own infrastructure within the EU. Umami does not set cookies in your browser, does not identify you individually, and does not transmit data to third parties. The data collected (pages visited, referrer, browser/OS category, country) is aggregated and cannot be linked back to a person.

Because Umami works without cookies or persistent identifiers this processing does not require a prior opt-in. You can still disable analytics via the Cookie Settings link in the footer; in that case your visits are excluded from the aggregated statistics.

Purpose: Improving usability and further developing our product
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

e) Embedded videos (YouTube)

On tutorial pages and within our documentation we embed videos hosted on YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). To protect your privacy we use the privacy-enhanced domain youtube-nocookie.com and only load videos after you actively click the placeholder. Once a video loads, YouTube may receive your IP address, browser information and referring URL, and may set its own cookies in your browser. Data may be transferred to the United States; Google uses EU Standard Contractual Clauses to provide an appropriate level of protection.

You can grant or withdraw consent for embedded videos at any time via the Cookie Settings link in the footer.

Purpose: Displaying video content (tutorials, documentation)
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

4. Cookies and web tracking

We use the following cookies. Essential cookies are required for the service to work; analytics cookies are only set after you consent.

a) Essential cookies

b) Analytics (no cookies)

Our analytics (Umami) runs without cookies or browser storage. No entry in this table is required.

c) Cookies set by embedded YouTube videos (opt-in only)

Only set when you consent to external media and actually load a video. Cookies are set by YouTube on the youtube.com and google.com domains. They are out of our control; a current list is available in Google’s cookie disclosure. If you later revoke consent you can delete them in your browser settings.

5. Data retention

Personal data is deleted as soon as it is no longer required for the purposes listed above, unless statutory retention obligations apply.

6. Disclosure of data

We do not share personal data with third parties unless:

• You have given explicit consent (Art. 6 para. 1 lit. a GDPR)
• We are legally obligated to do so (Art. 6 para. 1 lit. c GDPR)

7. Your rights under the GDPR

You have the right to:

• Request information about your stored personal data (Art. 15 GDPR)
• Request correction of inaccurate data (Art. 16 GDPR)
• Request deletion of your data (Art. 17 GDPR)
• Restrict data processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to data processing (Art. 21 GDPR)

To exercise these rights, please contact: mail@streamshapers.com

8. Withdrawal of consent

You may withdraw your consent at any time with future effect.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, for example in your German federal state.

10. Data security

We use SSL encryption to protect data transmission between your device and our servers.

11. Last updated

Last updated: April 2026
We reserve the right to update this privacy policy if our web app or legal requirements change.