Legal
Privacy policy
This policy covers the studio only, at
studio.seedhue.com. It runs on a different server from the
main site and processes different data — hence its own text rather than a
copy. For seedhue.com
the policy published there applies.
This is a courtesy translation. In case of doubt, the German version is the legally binding one.
1. Controller
Jonah Stockhinger
Marktweide 6
28790 Schwanewede
Germany
kontakt@kestavia.com
2. Hosting — a different provider from the main site
The studio runs on a rented dedicated server at:
STRATO GmbH
Pascalstraße 10
10587 Berlin
Germany
The location is Germany; no transfer to third countries takes place. The basis is a data processing agreement pursuant to Art. 28 GDPR. The legal basis for operating the service is Art. 6 (1) (f) GDPR — our legitimate interest in providing a working service.
The main site seedhue.com is hosted at ALL-INKL.COM instead. Opening the studio therefore means leaving the main site's server.
3. Server log files
On every request the web server automatically records:
- the address requested, including all query parameters
- date and time
- status code and volume of data transferred
- browser identification (user agent) and, where sent, the referring page
- the IP address
The legal basis is Art. 6 (1) (f) GDPR. Logs are rotated regularly and deleted after 14 days at the latest.
In addition, the web server briefly keeps a mapping of IP addresses in memory in order to limit the number of render jobs per address. This data is never written to disk and expires within minutes. Its sole purpose is protection against overload.
4. What is transmitted when you render
This is the essential difference from the main site. There, images are generated entirely in the browser and nothing leaves your device. In the studio that is true only for the preview. As soon as you press “Render on the server”, the following is transmitted:
- the seed, meaning the text you entered
- width, height, chosen style, file format and JPEG quality
No image is uploaded from your device — the server recomputes it and returns only the result. Images are not stored on the server; they exist in memory and are discarded once delivered.
Worth knowing: for a single render the seed is part of the requested address and therefore appears in the server log file (see section 3). For a batch it travels in the request body, which is not logged. A seed is a freely chosen piece of text; if you do not want personal content to be logged, do not use it as a seed.
5. Storage in your browser
The studio stores a single item locally on your device:
your chosen language, under the key seedhue-lang in
localStorage. It contains only de or
en, is never transmitted to the server, and exists solely so
you need not pick the language again on every visit.
As this is a technically necessary setting for a function you requested, no consent is required under § 25 (2) TDDDG. You can delete the entry at any time through your browser settings.
6. What we do not do
- No cookies. No cookies of any kind are set.
- No analytics, no tracking. No audience measurement, no fingerprinting, no profiling.
- No external resources. Every file comes from this server; no fonts, scripts or images are loaded from third parties.
- No accounts. There is no registration.
- No sharing. Data is not sold, rented or passed on to third parties.
7. Encryption
Access is exclusively over TLS; requests via http:// are
permanently redirected to https://. The certificate is issued
by Let’s Encrypt (Internet Security Research Group).
8. Your rights
You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
An informal message to kontakt@kestavia.com is sufficient.
Since nothing beyond the log files is stored, and those are not linked to any person, we can usually only provide access if you tell us the relevant IP address and the approximate time frame.
9. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the controller is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Hanover, Germany
www.lfd.niedersachsen.de
10. Changes
This policy is updated whenever the service or the legal situation changes. The version available here is the one that applies; the date at the top states its status.