privacy policy

Who we are

Guldvarg Studio (Bore Guldvarg), {COMPANY_ADDRESS}, org. no. {ORG_NUMBER}, Sweden, is the controller for personal data described here. Contact: {CONTACT_EMAIL}.

What stays on your server

Your media files, library, posters you scan, watch progress and profiles are stored on the server you run. We do not receive, host or look at them. Ownfilm does not upload your library to us.

What we collect

• Email address and name you give us when you buy, create an account or contact support.
• Purchase and licence information: plan, licence key, order reference and the status of your subscription.
• Basic technical data when you use ownfilm.app, such as IP address and request logs kept briefly for security and to keep the site running.
• Messages you send to support.

Payments

Payments are handled by {PAYMENT_PROVIDER}, which acts as merchant of record. They collect your payment details under their own privacy policy. We never see or store your full card number. We receive the details needed to deliver your licence, such as email, country and order status.

Why we use it, and the legal basis

• To deliver what you bought and manage your licence (contract).
• To answer support requests (contract / legitimate interest).
• To keep the service secure and prevent abuse (legitimate interest).
• To meet accounting and tax rules, including Swedish bookkeeping law (legal obligation).

Who we share it with

We do not sell your data and we do not use it for advertising. We share it only with service providers that help us run Ownfilm (payment provider, hosting, email) under agreements that protect it. If data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

Account and licence data is kept while you have a licence and for a reasonable time after. Accounting records are kept for the period required by law (currently seven years in Sweden). Support messages are deleted when no longer needed.

Your rights

Under the GDPR you can ask us to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent where we rely on it. Email us and we will reply within one month.

You can also complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), at imy.se.

Cookies

We use only what is needed to make the site work. See the cookie notice.

Changes

If we change this policy in a meaningful way we will update the date above and, where appropriate, tell you by email.