Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

SourceArt Ltd
HE456555
Evagora Pallikaridi 38
8010 Pafos, Cyprus
E-Mail: info@machdasplusweg.de
Phone: +49 178 5495650

2. Data We Collect

2.1 Account Data

When you register, we collect your name, email address, and password (stored as a cryptographic hash). If you register as a Seller, we additionally collect your store name and payout information through Stripe.

2.2 Transaction Data

When you make a purchase, Stripe processes your payment information. We store transaction records including the purchased item, price, date, and your user ID. We do not store credit card numbers or full payment details on our servers.

2.3 Usage Data

We automatically collect technical data when you visit AnimStream, including your IP address, browser type, operating system, referring URL, pages viewed, and access timestamps. This data is collected via server logs.

2.4 Uploaded Content

Sellers upload animations, preview images, and profile images. These files are stored on our servers and served to Buyers and visitors.

3. Purpose & Legal Basis

We process your data for the following purposes:

4. Third-Party Services

4.1 Stripe

We use Stripe, Inc. to process payments. When you make or receive a payment, your payment data is transmitted directly to Stripe. Stripe acts as an independent controller for payment data. See Stripe's Privacy Policy.

4.2 Hosting & Storage

Our servers and file storage are hosted within the European Union. Uploaded files (animations, images) are stored on S3-compatible object storage in EU data centers.

4.3 Email

We may use third-party email providers to send transactional emails (account verification, password reset, purchase confirmations). These providers process your email address and name as necessary to deliver the messages.

5. Cookies & Similar Technologies

Storing or reading information on your device requires your consent under § 25 TDDDG / Art. 5(3) ePrivacy Directive — except where strictly necessary to deliver the service you requested. We split cookies into two categories; you can change your choice any time via the “Cookie settings” link in the footer.

5.1 Essential cookies (no consent required)

5.2 Analytics (consent required, default off)

With your consent we use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to measure which pages are used and improve the platform. GA4 stores pseudonymous identifiers; IP addresses are anonymized before processing (“anonymize_ip”). Legal basis: Art. 6(1)(a) GDPR (consent).

Data may be transferred to Google LLC in the USA. The transfer relies on the EU-U.S. Data Privacy Framework (Google LLC is certified) plus EU Standard Contractual Clauses as a fallback. You can withdraw your consent at any time via the “Cookie settings” link in the footer — withdrawal does not affect the lawfulness of processing performed before withdrawal.

More info: Google's Privacy Policy.

6. Data Retention

• Account data: Retained as long as your account is active. After account deletion, data is removed within 30 days, except where retention is required by law.
• Transaction records: Retained for 10 years in accordance with tax and commercial law obligations.
• Server logs: Automatically deleted after 90 days.
• Uploaded content: Removed upon Seller request or account deletion.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access– Request a copy of the data we hold about you
• Rectification– Request correction of inaccurate data
• Erasure– Request deletion of your data ("right to be forgotten")
• Restriction– Request limitation of processing
• Portability– Receive your data in a structured, machine-readable format
• Objection– Object to processing based on legitimate interests

To exercise any of these rights, contact us at info@machdasplusweg.de. We will respond within 30 days.

8. Data Transfers

Your data is primarily processed within the European Union. Where data is transferred to third parties outside the EU (e.g., Stripe in the USA), appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Security

We implement technical and organizational measures to protect your data, including encrypted connections (TLS/SSL), hashed passwords, and access controls. However, no method of transmission over the internet is 100% secure.

10. Children

AnimStream is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Platform. The "last updated" date at the top reflects the most recent revision.

12. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent authority for SourceArt Ltd is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

13. Contact

SourceArt Ltd
Evagora Pallikaridi 38
8010 Pafos, Cyprus
E-Mail: info@machdasplusweg.de
Phone: +49 178 5495650