Privacy Policy

Last Updated: June 19, 2026

1. General Provisions

1.1. Scope. This Privacy Policy (the "Policy") explains how the Administration of StillsLab (stillslab.com) collects, uses, and protects your personal data.

1.2. Acceptance. By using our Site, you agree to the collection and use of information in accordance with this Policy and our Terms of Use.

2. What Data We Collect

2.1. Data You Provide:

During Registration: A pseudonym, email address, and password (stored in an encrypted format).
In Your Profile: You can upload a profile picture (avatar).
Community Showcase Submissions: When you submit a project, we collect the project metadata you provide (title, description, director name, cinematographer name, project type, year) and the image files you upload. We also record the date and IP address of your submission terms acceptance.
StillsLab Studio Workspace Data: When you use the Studio team workspace, we process the data you enter to operate your projects, including project management data, shot lists and storyboards, location coordinates, scheduling and logistics, and the contact details of crew and team members that you add yourself (such as names, phone numbers, and roles) for the purpose of generating call sheets and other production documents. You are responsible for ensuring you have the right to enter contact details of third parties into your workspace.
Team Collaboration Visibility: When you share a project or invite collaborators into a Studio workspace, please be aware that the other Users you invite will be able to see your pseudonym (nickname) and email address within that workspace, so that team members can identify one another.

2.2. Data Collected Automatically:

Strictly Necessary Cookies: Used to run the Site and cannot be switched off: session/authentication, security and anti-abuse protection, and a download counter that powers free-tier limits. These do not require consent. We do not use advertising cookies.
Analytics Cookies (consent-based): With your consent we use Google Analytics 4 and first-party usage analytics (pages visited, search filters used, downloads) linked to an anonymous session identifier, to understand usage and improve the service. You may accept or reject these via the cookie banner at any time. If you reject, no analytics cookies or persistent identifiers are stored — we keep only anonymous, aggregate counts (e.g. total views and downloads, with no link to you) and Google Analytics operates in cookieless (consent-denied) mode. To estimate daily visitor numbers without cookies, we derive a temporary, non-reversible code from your IP address and browser type that automatically rotates every 24 hours and is never stored in raw form. This code cannot identify you and cannot be linked across days — it is used solely for aggregate daily counts.
Security Logs and Network Telemetry: To defend the platform against cyberattacks, security threats, and illegal automated data extraction (scraping), the Site automatically processes technical server logs and network telemetry based on our Legitimate Interests. This data includes your IP address, browser headers (User-Agent), request frequency, and accessed URLs. It is handled with the highest level of confidentiality, is used strictly for internal security monitoring and rate-limiting, and is never sold, shared, or distributed to third parties, except as required by network defense tools (such as Cloudflare firewalls) or applicable law.

3. How We Use Your Data

3.1. Account & Features. To provide you with access to your account and Site features.

3.2. Security & Fraud Prevention. To ensure the security of the Site and prevent fraud.

3.3. Communication. To communicate with you about your account (e.g., for password recovery or to respond to your inquiries).

3.4. Service Improvement. For internal analysis to improve the operation and functionality of the Site.

4. Data Sharing with Third Parties

4.1. No Sale of Data. We do not sell, trade, or otherwise transfer your personal data to third parties.

4.2. Payment Processor (Paddle — Merchant of Record). Paid subscription plans (Pro, Solo, Team, Studio, and Enterprise) are processed by Paddle.com, which acts as our Merchant of Record. Paddle fully handles billing, tax collection, and the tokenization of card details. StillsLab does not collect, store, or process any payment or card data. Please refer to Paddle's Privacy Policy for details on how they handle your payment data.

4.3. Uploaded Content Visibility: Content submitted through Community Showcase (project details, frames) is publicly visible once approved. Your pseudonym is displayed as the project author. Personal data (email, IP address) is never publicly visible.

4.4. Disclosure for Legal Protection & Dispute Resolution: While we maintain strict confidentiality over your technical data, we reserve the right to disclose relevant infrastructure logs, IP addresses, and telemetry records to third parties (including hosting providers, domain registrars, payment processors, legal counsel, and law enforcement authorities) if strictly necessary to investigate system abuse, enforce our Terms of Use, resolve intellectual property infringements in a pre-litigation/cease-and-desist format, or protect our legal rights during official judicial proceedings.

5. Your Data Rights

5.1. Right to Access and Rectification: You can review and change your personal data (pseudonym, email, password, avatar) at any time in your profile settings at: https://stillslab.com/settings.

5.2. Right to Erasure ('Right to be Forgotten'): You can request the complete deletion of your account and all associated data by contacting support at [email protected].

5.3. Data Retention: Your data is stored on the Site as long as your account exists. If the Administration decides to delete inactive accounts, we will notify you by email 30 days prior to deletion.

6. Data Security

6.1. Security Measures. We take all necessary technical and organizational measures to protect your data. Specifically, your passwords are stored in an encrypted (hashed) format.

7. Changes to This Privacy Policy

7.1. Updates. We may update this Policy from time to time. We will notify you of any changes by posting the new version on this page.

8. Contact Information

8.1. Contact. If you have any questions about this Privacy Policy, please contact us at: [email protected].