📥 Download PDF

Privacy Policy

goru.rocks Video Creator — Last updated: April 2026

1. Data Controller

Marvin Rüßbüldt
c/o IP-Management #8928, Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany
Email: info@goru.rocks

2. Data We Collect

Email address: via Google/Discord OAuth during registration.

Display name: via Google/Discord OAuth.

Payment data: processed by Stripe, not stored by us.

Usage data: number of created videos, selected plan, badges, referral data.

Render metadata: country selection, message contents, settings (for quality assurance and abuse detection).

IP address: for rate limiting and security, not permanently stored (max. 7 days).

3. Purpose of Data Collection

Email + Name: Contract fulfillment (account management).

Payment data: Contract fulfillment (subscription management).

Usage data: Legitimate interest (abuse prevention, badge assignment).

Render metadata: Legitimate interest (quality assurance, content moderation).

IP address: Legitimate interest (security, rate limiting).

4. What We Do NOT Collect

• We do not use marketing or tracking cookies.
• We do not use third-party trackers (no Google Analytics, no Facebook Pixel).
• We do not sell personal data to third parties.

5. Hosting and Server Log Files

This website is hosted on servers of an external hosting provider within the EU. Processing is based on our legitimate interest in the secure and efficient provision of our online services (Art. 6(1)(f) GDPR).

Each access automatically records server log files: IP address (anonymized), date and time, page accessed, browser type and operating system. This data is used only for technical purposes and automatically deleted after 30 days.

To ensure data security, backup copies are created regularly and stored at multiple geographically separated locations. These backups may contain personal data.

6. Video Storage

1. Render metadata (country selection, message contents, settings) is stored for quality assurance and abuse detection.
2. Rendered video files are automatically deleted after 24 hours, UNLESS the user expressly consents to storage in the Community Gallery (Opt-In).
3. Gallery storage consent can be revoked at any time. The video will then be deleted.
4. If the user consents to Story Usage (separate opt-in), render metadata is additionally used for content creation by the Operator. The legal basis is the user’s consent (Art. 6(1)(a) GDPR). Consent can be revoked at any time for future use.

7. Third-Party Services

• Stripe Inc.: Payment processing — stripe.com/privacy
• Google LLC: OAuth Login — policies.google.com/privacy
• Discord Inc.: OAuth Login — discord.com/privacy

8. Data Transfers to Third Countries

Through the use of Stripe (USA), Google (USA), and Discord (USA), personal data may be transferred to the United States. These providers are subject to the EU-US Data Privacy Framework and/or employ Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR to ensure an adequate level of data protection.

9. Data Retention

Account data: until account deletion.

Render metadata: 90 days (anonymized).

IP addresses: maximum 7 days.

Gallery videos: until opt-in is revoked.

Data may be retained beyond the stated periods in backup copies. The creation and retention of backups is based on our legitimate interest in the security and recoverability of our systems (Art. 6(1)(f) GDPR). Targeted deletion of individual records from existing backups is not technically feasible.

10. Your Rights (GDPR Art. 15–21, 77)

You have the following rights regarding your personal data:

• Access to stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Deletion of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability / export as JSON (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, contact us at: info@goru.rocks

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your data.

11. Account Deletion

1. Users can delete their account completely at any time.
2. Upon deletion, all personal data is erased, the Stripe subscription is cancelled, and render logs are anonymized.

12. Cookies

We only use technically necessary cookies (session token, auth token). No marketing or tracking cookies.

13. Contact

For data protection inquiries, contact:
Marvin Rüßbüldt
info@goru.rocks

goru.rocks — Last updated: April 2026