Privacy Policy

This policy explains what personal data we process when you visit thirdAIstudios.com or contact us, and why. We are a small studio and we keep the data we collect to what we need to run the site and answer you.

Who we are

Third AI Studios is a creative studio brand. The controller responsible for this website under the GDPR is Særa Nova, a private individual currently based in Munich, Germany. For any privacy question, email [email protected]. Full contact and legal details are on the Imprint.

What we collect

• Contact form. When you use the contact form on this site, we collect your name, email address, project type, your message, and your browser’s user-agent string. A hidden field also checks submissions for automated spam.
• Shotline early access. The application form on the Shotline page is a separate service. It submits your name and email plus a channel link, a link to recent work, and a short note directly to Shotline, and is handled under Shotline’s own terms and privacy policy, not this one.
• Technical logs. Our hosting provider automatically records standard server logs (IP address, browser/user-agent, timestamps) to keep the site secure and online. We do not use these for any other purpose.
• No advertising trackers. We do not sell your data, and we do not run any third-party advertising or tracking pixels. The one exception is embedded YouTube video on the Showroom page, described below.

Cookies & local storage

This site sets no cookies. It uses first-party sessionStorage in your browser to remember minor interface state, such as whether you have already seen the intro animation or opened the navigation, within the current tab. This data never leaves your device, is cleared automatically when you close the tab, and does not identify you. Because it is not tracking, it does not require a consent banner.

YouTube video (Showroom)

The Showroom page presents our film work using YouTube. As soon as that page loads, film thumbnails are fetched directly from Google’s image servers (i.ytimg.com), which sends your IP address and browser user-agent to Google. Pressing play opens the film in YouTube’s privacy-enhanced player (youtube-nocookie.com), which streams the video from Google’s servers and does not set third-party cookies before playback. Google, as the operator of YouTube, is an independent recipient here and processes this data on its own terms; see Google’s privacy policy for details. Because Google is a US company, this involves a transfer of your IP address to the US, which Google covers under its own EU Standard Contractual Clauses. We show this content on the basis of our legitimate interest in presenting our portfolio (Art. 6(1)(f) GDPR).

Analytics

We run no analytics, no visitor tracking and no advertising cookies of any kind on this site today. If that ever changes, we will name the tool here and update this policy before it goes live.

Fonts

All fonts on this site are self-hosted from our own domain. We do not use Google Fonts or any third-party font service, so no data, including your IP address, is sent to an external font provider when you load a page.

Hosting & processors

The site is hosted on Cloudflare Pages, which records the technical logs described above and delivers the site’s files; Cloudflare is a US company, so hosting also involves a transfer of that data to the US. Contact-form submissions are forwarded server-to-server into our own Shotline studio backend, also hosted on Cloudflare, for storage, and trigger a notification email sent via Resend, a US-based email delivery provider, to [email protected] or to [email protected], depending on the enquiry. Where data is transferred to a provider outside the EU/EEA, such as Cloudflare or Resend in the US, that transfer is covered by the provider’s data-processing agreement and EU Standard Contractual Clauses under Art. 44 ff. GDPR; a copy of these safeguards is available on request by emailing us. These providers process data on our behalf and may not use it for their own purposes.

Legal basis & retention

Where the GDPR applies, we process contact-form data because doing so is a step taken at your request in view of a possible project together, and because we have a legitimate interest in replying to your enquiry (Art. 6(1)(b) and (f) GDPR), and technical server logs on the basis of our legitimate interest in keeping the site secure and operational (Art. 6(1)(f) GDPR). Giving us your contact data is voluntary, but without it we cannot respond to your enquiry. We keep contact correspondence only as long as needed to handle it, then delete it. Server logs are kept for a short period for security purposes, then rotated out.

Your rights

Under the GDPR you have the right to access, rectify, erase or restrict the personal data we hold about you, to object to our processing, and to receive your data in a portable format. Email [email protected] and we’ll action your request. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU/EEA member state of your residence, workplace, or the place of the alleged infringement.

Changes

We’ll update this page if our practices change, and revise the date above. This policy is provided for transparency and does not constitute legal advice.