Privacy policy
As of 23 October 2026
1. Controller
The controller for processing personal data on this website and in connection with the Motion Modules software is:
MRStudio (owner: Maxim Ristow)
Basler Str. 54
79639 Grenzach-Wyhlen, Germany
Email: hello@motion-modules.com
No data protection officer has been appointed, because there is no legal duty to do so (Article 37 GDPR, section 38 of the German BDSG).
2. Overview
We process personal data only as far as it is needed to run this website, sell licenses, and operate the software. This website sets no cookies, uses no tracking, and loads no third-party content when you open a page (fonts, scripts, and images are served from our own server).
3. Hosting and server log files
This website is hosted by ALL-INKL.COM, Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement under Article 28 GDPR is in place with the host.
When you open the website, the following data is stored automatically in server log files: IP address, date and time, page or file requested, amount of data transferred, referrer URL, browser and operating system, status code.
- Purpose: delivering the website, security (defending against attacks), and diagnosing errors.
- Legal basis: Article 6 (1) (f) GDPR (legitimate interest in a secure and stable service).
- Retention: 14 days, then deletion or anonymisation, unless a security incident requires a longer period.
The connection is encrypted with TLS (HTTPS).
4. Cookies and access to your device
We do not set cookies and we do not access information on your device that is not strictly necessary (section 25 of the German TDDDG). The website only stores your language choice (German or English) in your browser’s localStorage (key module-studio-lang). That storage is strictly necessary for the service you asked for (section 25 (2) no. 2 TDDDG) and is not sent to us.
5. Buying a license (Stripe)
When you buy a yearly plan or a lifetime license, our license server (operated on mobile-refuel.de, expected to move to mrstudio.codes from the end of 2026; host in both cases: ALL-INKL.COM, Neue Medien Münnich, Friedersdorf) creates a checkout session at Stripe and you are sent to Stripe’s payment page.
Payment provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.
The data processed is: name, email address, billing address, VAT ID if you provide one, payment data (card or account details are processed only by Stripe; we do not receive them), the license you chose, the amount, the time, your IP address, and device information (fraud prevention by Stripe).
- Purpose: completing the purchase, invoicing, and fraud prevention.
- Legal basis: Article 6 (1) (b) GDPR (contract), Article 6 (1) (c) GDPR (tax and commercial record-keeping duties), Article 6 (1) (f) GDPR (fraud prevention).
- Transfer outside the EU: Stripe may transfer data to Stripe, Inc. (United States). Stripe is certified under the EU-US Data Privacy Framework (Article 45 GDPR). Standard contractual clauses also apply (Article 46 GDPR).
Stripe is an independent controller for parts of the payment processing. Privacy notice: https://stripe.com/privacy
6. License records and sending the license key
After a successful payment, our license server stores: email address, name, license key, license type (yearly or lifetime), purchase and expiry dates, the Stripe customer or subscription ID, and the website reported when the license is activated (see section 9). You receive the license key by email. Email is sent through the mail server of our host, ALL-INKL.COM, Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
You can cancel a yearly plan on this website (Cancel contract). Stripe also includes a link to the customer portal in the payment receipt.
- Purpose: providing and managing the license, and support.
- Legal basis: Article 6 (1) (b) GDPR.
- Retention: for the life of the license, then deletion unless a statutory retention duty applies. We keep invoices and accounting records under section 147 of the German Fiscal Code (AO) and section 257 of the German Commercial Code (HGB) (as a rule 8 years for accounting records, 10 years for books and annual accounts).
7. Audience measurement
We do not currently use an analytics or tracking tool.
8. Contact by email
If you email us, we process what you send in order to handle the request (Article 6 (1) (b) GDPR where it relates to a contract, otherwise (f)). The data is deleted once the request is finished and no retention duty applies. General enquiries: hello@motion-modules.com. Software support: support@motion-modules.com.
9. Processing in the studio app and the plugin
Studio app account
At app.motion-modules.com you can create an account. We store your email address, a password hash, the time of registration, and whether the email address has been confirmed. Confirmation and password-reset emails go through our host’s mail server.
- Purpose: the account, the trial, and saving your module drafts.
- Legal basis: Article 6 (1) (b) GDPR.
- Retention: for the life of the account, then deletion unless a retention duty applies.
Module drafts
Text, images, and settings you create in the editor are stored on the studio app server so you can open and export them later. Images you upload are stored only for that purpose.
License check in the WordPress plugin
The plugin contacts our license server (mobile-refuel.de) to check the license or the trial. It sends the license key, the address of the site where the plugin is activated, the product identifier, and the plugin version. Your IP address is transmitted as part of the connection.
- Purpose: checking that you are entitled to use the software and preventing misuse.
- Legal basis: Article 6 (1) (b) GDPR (contract), or Article 6 (1) (f) GDPR for the trial.
- Retention: for the life of the license or the trial (14 days), then deletion if no purchase follows and no retention duty applies.
Updates
When the site has an internet connection, the plugin checks whether a newer version is available (server: mobile-refuel.de). It sends the plugin version and the license key. No content from your website is transmitted.
10. Recipients and processors (overview)
| Recipient | Purpose | Location | Basis |
|---|---|---|---|
| ALL-INKL.COM, Neue Medien Münnich | Hosting of the website and the studio app | Germany | DPA, Art. 28 |
| ALL-INKL.COM, Neue Medien Münnich | License server and email (mobile-refuel.de, expected to move to mrstudio.codes from the end of 2026) | Germany | DPA, Art. 28 |
| Stripe Payments Europe | Payment processing | Ireland / USA | Contract, DPF + SCCs |
11. Your rights
You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and the right to withdraw consent for the future (Article 7 (3)).
Right to object (Article 21 GDPR): Where we process data on the basis of Article 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation.
You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany (www.baden-wuerttemberg.datenschutz.de).
An email to hello@motion-modules.com is enough.
12. Duty to provide data, automated decisions
You do not have to provide any data to visit the website. The details listed in section 5 are required for a purchase; without them the contract cannot be concluded. There is no automated decision-making, including profiling (Article 22 GDPR). Stripe’s fraud prevention is separate from that statement.
13. Changes
We update this policy when the law or our services change. The version published here is the one that applies.