Privacy Policy

§1 Data Controller

Daniels Digital Solutions UG (haftungsbeschränkt) Lindenweg 27, 67346 Speyer, Germany Email: ooam@daniels-digital-solutions.biz

§2 Overview of Data Processing

Out Of Auto Mode is a web app that helps photographers with camera settings. We only process personal data to the extent necessary to provide the App and its features. Below we inform you in detail about what data we collect, why we collect it, and on what legal basis the processing takes place.

§3 What Data We Collect

3.1 Account Data (Registration and Login)

When you create an account, we collect data depending on your chosen login method:

• Google Login: We receive your name, email address, and profile picture from Google. We do not receive access to your Google password.
• Apple Login: We receive your name and email address from Apple (or the Apple-generated relay address if you choose to hide your real email). We do not receive access to your Apple password.
• Magic Link (Email): We collect your email address and send you a one-time login link. No password is required.

Legal basis: Art. 6(1)(b) GDPR — performance of contract (providing the user account).

3.2 Usage Data

During your use of the App, we store your camera selection, unlocked Camera Unlocks, and app settings so the App functions correctly and your unlocks are preserved.

Legal basis: Art. 6(1)(b) GDPR — performance of contract.

3.3 Payment Data

Payments for paid products (e.g., Camera Unlock) are processed through Paddle (Paddle.com Market Limited, 15 Briery Close, Great Oakley, Corby, Northamptonshire, NN18 8JG, United Kingdom). We do not collect or store credit card or bank data. Paddle acts as the Merchant of Record and processes your payment data as an independent controller. We only receive a transaction confirmation from Paddle (transaction ID, purchase time, purchased product) for attribution.

Legal basis: Art. 6(1)(b) GDPR — performance of contract (purchase processing).

3.4 AI Credits and AI Features (future)

When using future AI features (e.g., image analysis), uploaded images and associated metadata may be processed. Detailed terms will be added to this privacy policy before the feature becomes available. Images are not permanently stored and are not used for training AI models.

Legal basis: Art. 6(1)(a) GDPR — consent (obtained before using the feature).

3.5 Community Contributions

When you submit content through the community feature (e.g., camera menu paths), these contributions are stored together with your username and may be published in the App.

Legal basis: Art. 6(1)(a) GDPR — consent.

§4 Third-Party Services

We use the following services to operate the App:

• Hetzner (Hosting) — Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Server location: Germany. Hetzner Privacy Policy
• Supabase (Database & Authentication) — Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR was concluded on March 14, 2026. Supabase processes account data and authentication information. Supabase Privacy Policy
• Brevo (Email Delivery) — Brevo, 106 Boulevard Haussmann, 75008 Paris, France. Brevo is used for transactional emails (e.g., magic link delivery, purchase confirmations). Brevo Privacy Policy
• Sentry (Error Monitoring) — Functional Software, Inc. (dba Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Sentry receives technical error reports (error message, stack trace, page URL, browser type, operating system). Personal data (email addresses, IP addresses) is actively removed before transmission. Sentry Privacy Policy
• Paddle (Payment Processing) — Paddle.com Market Limited, 15 Briery Close, Great Oakley, Corby, Northamptonshire, NN18 8JG, United Kingdom. Paddle is our Merchant of Record and processes payments for paid products. Paddle acts as an independent controller for payment data processing. Paddle Privacy Policy

§5 Web Analytics

We use Plausible Analytics, a privacy-friendly web analytics tool. Plausible is self-hosted on our own server in Germany (Hetzner). It does not use cookies, does not store IP addresses, and does not share data with third parties. No personal data is collected. Plausible is fully GDPR-compliant and does not require a cookie banner.

§6 International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA):

• Sentry (USA): Data transfer is based on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. Additionally, personal data is actively removed before transmission.
• Supabase (Singapore): Data transfer is based on the DPA and Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
• Paddle (UK): Paddle processes payment data as the Merchant of Record and independent controller. The UK has an adequacy decision from the EU Commission, so no additional transfer safeguards are required.

§7 Data Retention and Deletion

Account data is stored as long as your user account exists. Upon deletion of your account, your personal data will be deleted within 30 days, unless legal retention obligations apply.

Transaction data (purchase receipts, invoices) is retained for up to 10 years in accordance with commercial and tax law retention requirements (§§ 147 AO, 257 HGB).

Sentry error data is automatically deleted after 90 days.

You can initiate deletion of your account and data at any time via the account settings in the App or by email to ooam@daniels-digital-solutions.biz.

§8 Cookies

The App does not use cookies for tracking or advertising purposes. No third-party cookies are set. Technically necessary session tokens are used for authentication, which are required for the operation of the App.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest (technically necessary operation of the App).

§9 Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about the data we hold about you.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data, unless legal retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR): You can request restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): You can request your data in a structured, machine-readable format.
• Right to withdraw consent (Art. 7(3) GDPR): You can withdraw consent at any time with effect for the future.
• Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. For Rhineland-Palatinate, this is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate.

To exercise your rights, contact us at ooam@daniels-digital-solutions.biz.

§10 Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes to our services or legal requirements. For material changes, we will notify you by email. The current version is always available on this page.