Your data, explained.
Your choices, within reach.
Understand the data AT STUDIO processes, why it is used and the choices available to you.
This policy explains the First Party’s practices. Separate consent remains necessary where required by law.
The First Party and scope
The “First Party” or “AT STUDIO” means the operator of the independent project known as AT STUDIO. The project is not incorporated as a company; the designation does not give it separate corporate legal personality. The “Second Party” or “user” means a visitor to the site or a user of its services. This policy explains data processing on atstudio.online and its accounts, games, tools and comments. Contact info@atstudio.online for privacy requests and support.
If you install one of the First Party’s plugins on another website, that website’s operator is responsible for the data it processes through the plugin. Using a plugin does not by itself mean that visitor data is sent to AT STUDIO. Check the tool’s description and the policy of the website using it.
Data processed
- Account: your username, display name, email address and sign-in information. You may add a photo, cover image, biography, country or social links to your profile.
- Social sign-in: when you choose Google or Discord, the First Party receives information allowed by the permissions shown by the provider, such as an account identifier, name, verified email address and photo. The First Party does not receive your password for that provider.
- Contributions and communication: comments, uploaded files and messages you send the First Party. The platform may record IP addresses and browser information with comments for administration and security.
- Technical data: request and error logs, sign-in attempts, and device and browser information. The site uses Google Analytics through Site Kit to understand visits, pages and interactions.
Do not share passwords, recovery codes or sensitive identity information in comments or your profile.
Purposes and legal grounds
The First Party processes data to operate accounts and sign-in, display content you choose to publish, respond to requests, prevent abuse, diagnose problems, improve the site and meet applicable legal obligations.
Depending on the purpose and applicable law, the basis is providing the service you request, your consent where required, a legal obligation, or a legitimate interest in operating and protecting the site where the law permits it and your rights are respected. Accepting the terms is not blanket consent to optional data processing.
What others can see
Your display name, photo and comment content appear when published. Profile information and contributions may be visible to others depending on privacy settings and access permissions. The member directory requires sign-in, but this does not mean every profile link or comment is private. Review the privacy options in account settings before adding personal information.
The First Party does not publish email addresses in comments. External links or names you choose may identify you, and others may retain copies of content you publish.
External services and disclosure
The First Party discloses information needed to deliver services to their providers, without granting a general right to use your content. Services used include Hostinger hosting, Wordfence and Google reCAPTCHA security, Weglot translation, and Google Analytics and Site Kit. Google or Discord is contacted when you choose social sign-in. Gravatar may supply an avatar if no local photo is available. Embedded forms or media may contact their providers when opened.
Each provider’s policy describes its processing of the data it receives. This can include technical connection data or an identifier derived from your email address for avatar services. The First Party does not sell personal data. The First Party may disclose information when legally required, or to address abuse or protect rights to the extent necessary and permitted.
Processing or hosting may occur outside your country. Transfers are subject to applicable legal requirements and safeguards; the First Party does not claim that all data stays in one country.
Retention and security
The First Party retains account data while needed to operate the account, published content while its display is needed, and logs for security, support, legal obligations or resolving disputes. The First Party reviews the need for data and deletes or anonymizes it when its purpose ends, unless retention is legally justified.
Limited copies may remain in backups until replaced through the retention cycle, with protection and restricted use. Deleting an account does not necessarily delete published comments automatically; you may also request their review or deletion.
The First Party uses reasonable technical and organizational safeguards, but absolute security cannot be guaranteed. The First Party handles incidents and provides notifications as required by applicable law.
Your rights and requests
Depending on applicable law, you may request information about processing, access or a copy of your data, correction or completion, deletion, withdrawal of consent for consent-based processing, and objection or restriction where applicable. Withdrawal does not affect the lawfulness of earlier processing and may affect a feature that relies on it.
Use your account settings for available controls or email info@atstudio.online with the account or comment link and a description of your request. The First Party may request proportionate identity verification to protect the account; do not send your password. The First Party responds within legally required periods and explains any refusal or exception and the available route to challenge it. You may complain to the competent data-protection authority under applicable law.
Minors
If you are below the age at which you can legally consent to the service or data processing, appropriate parental supervision or consent is required under applicable law. Do not submit a child’s data without proper authority. Contact the First Party if you believe a minor’s data was collected without required consent so that the First Party can review it.
Policy updates and effective date
The First Party may update this policy to clarify practices, develop services or respond to operational, security or legal requirements. The current version is published here with Hijri and Gregorian dates and takes effect on its stated date unless a later date or legally required notice period applies.
You are responsible for reviewing it periodically. Publishing a routine or explanatory update does not require a new signature or acceptance. Continuing to use the services after an update constitutes acceptance of their revised terms where legally valid. The First Party gives appropriate notice of material changes before implementation where required by law.
This policy explains data-processing practices; it is not a waiver of the Second Party's rights. Silence or continued use does not constitute consent to a new purpose or processing that requires separate consent. Where legally required, that consent is obtained before processing and remains withdrawable. Other lawful grounds for processing remain independent of acceptance of the terms.
