Privacy Policy

Last updated: March 18, 2026

At TanStudio, we believe privacy isn't just a feature—it's a fundamental right. This Privacy Policy explains how we collect, use, and protect your information when you use our browser-based video recording service.

Our Privacy Philosophy

TanStudio is designed with privacy at its core. All video recording, compositing, and processing happens client-side in your browser. Your recordings never touch our servers. We don't sell, share, or harvest your data for marketing purposes.

Definitions

For the purposes of this Privacy Policy:

  • Company (referred to as "TanStudio", "We", "Us" or "Our") refers to TanStudio, the browser-based video recording service.
  • Service refers to the TanStudio website and video recording tools accessible at tanstudio.app.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Usage Data refers to data collected automatically about how you use our Service.
  • Account means a unique account created for accessing premium features of our Service.
  • Device means any device that can access the Service such as a computer or laptop.
  • Recordings means any video or audio content you create using our Service.

What Data We Collect

Recordings and Video Content

Important: All video recording, screen capture, webcam capture, canvas compositing, and MP4 conversion happen entirely in your browser. Your recordings are never uploaded to or processed on TanStudio servers.

  • Screen capture streams stay on your device
  • Webcam streams stay on your device
  • Audio (microphone and system audio) stays on your device
  • Canvas compositing runs locally via your browser's rendering engine
  • MP4 conversion runs locally via FFmpeg.wasm
  • Downloaded files go directly to your device

If you use the optional Google Drive or OneDrive upload feature (Pro), your recordings upload directly from your browser to your own cloud storage account—TanStudio never intermediates or stores these files.

Account Information (Optional)

If you create an account to access Pro features, we collect:

  • Email address (via Google or Microsoft OAuth)
  • OAuth profile information (name, profile picture)
  • Account preferences and saved studio settings

We use Supabase for authentication. We do not store your Google or Microsoft password.

Usage Data

We automatically collect limited usage data to improve our service:

  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent
  • Referring website
  • General location (country/region level only)

We use privacy-respecting analytics (Plausible) and do not track individual users across the web.

Payment Information

If you subscribe to TanStudio Pro, payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full payment details. We receive only:

  • Subscription status
  • Customer ID (Stripe reference)
  • Billing email

How We Use Your Data

We use your information only for:

  • Service Delivery: Providing you with the tools to record, compose, and export videos
  • Account Management: Managing your account, saved settings, and authentication (if applicable)
  • Pro Features: Enabling cloud upload, saved themes, and premium functionality
  • Service Improvement: Understanding how people use TanStudio to make it better
  • Security: Detecting and preventing abuse, fraud, and security issues
  • Legal Compliance: Meeting our legal obligations

We do NOT use your data for:

  • Marketing or promotional emails (unless you explicitly opt-in)
  • Selling or sharing with third parties for their marketing
  • Tracking you across other websites
  • Building advertising profiles
  • Accessing, viewing, or analyzing your video recordings

Client-Side Processing

TanStudio's core recording and export features work entirely in your browser. This means:

  • Your screen capture, webcam feed, and audio never leave your device
  • Video compositing (layout, backgrounds, webcam framing) runs locally on Canvas
  • MP4 conversion via FFmpeg.wasm runs locally in your browser
  • Downloads are created client-side
  • No TanStudio server ever sees your video content

This is a fundamental privacy feature of TanStudio.

Cloud Storage Integration (Pro)

When you use Google Drive or OneDrive upload:

  • You authenticate directly with Google or Microsoft via OAuth
  • Your recording uploads directly from your browser to your cloud storage
  • TanStudio acts only as the upload initiator—we never receive, store, or process your video files
  • We request only the minimum OAuth scopes needed (e.g., drive.file for Google Drive, which only accesses files created by TanStudio)
  • You can revoke access at any time through your Google or Microsoft account settings

Data Retention

  • Recordings: No data is stored—everything happens in your browser and saves to your device or your own cloud storage
  • Account Data: Retained while your account is active, deleted within 30 days of account deletion
  • Studio Settings: Retained while your account is active, deleted with your account
  • Usage Analytics: Aggregated data retained for up to 24 months
  • Server Logs: Technical logs retained for up to 90 days for security purposes

Cookies and Tracking

We use minimal cookies:

  • Essential Cookies: Required for the service to function (authentication, session management)
  • Analytics Cookies: Help us understand usage patterns (anonymized, via Plausible)

We do NOT use:

  • Advertising cookies
  • Cross-site tracking cookies
  • Social media tracking pixels

You can disable cookies in your browser settings, though some features may not work properly.

Data Security

We implement industry-standard security measures:

  • All data transmitted over HTTPS encryption
  • OAuth-based authentication (no passwords stored by TanStudio)
  • Row-Level Security (RLS) on all database tables
  • Regular security audits and updates
  • Limited access to any stored data
  • No storage of credit card information (handled by Stripe)
  • Cross-Origin headers configured for secure client-side processing

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but take it very seriously.

Your Rights

Depending on your location, you may have rights including:

  • Access: Request a copy of your data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing of your data
  • Withdrawal: Withdraw consent at any time

To exercise these rights, contact us at privacy@tanstudio.app

Third-Party Services

We use select third-party services that may process data:

  • Supabase: Authentication and user settings storage
  • Stripe: Payment processing for Pro subscriptions
  • Vercel: Website hosting and infrastructure
  • Plausible: Privacy-respecting analytics (anonymized data only)
  • Google / Microsoft: OAuth authentication and optional cloud storage upload (Pro)

We carefully vet all third parties and ensure they meet our privacy standards.

International Data Transfers

TanStudio is hosted on Vercel's global infrastructure. If you access our service from outside the United States, your account data may be transferred internationally. We ensure appropriate safeguards are in place for any international transfers. Note that your recordings remain on your device and are not subject to international transfer by TanStudio.

Children's Privacy

TanStudio is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting the new policy on this page
  • Updating the "Last updated" date
  • Sending an email notification (if you have an account)

We encourage you to review this policy periodically.

GDPR Compliance (EU Users)

If you are in the European Union, we comply with GDPR requirements:

  • We process data lawfully, fairly, and transparently
  • We collect data only for specified, explicit purposes
  • We minimize data collection to what's necessary
  • We keep data accurate and up-to-date
  • We retain data only as long as necessary
  • We ensure appropriate security measures

Our legal basis for processing is typically consent or legitimate interest in providing our service.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

  • Right to know what personal data is collected
  • Right to know if personal data is sold or disclosed
  • Right to opt-out of sale of personal data
  • Right to deletion of personal data
  • Right to non-discrimination

Note: TanStudio does not sell personal data.

Contact Us

For any privacy-related questions, concerns, or requests:

We will respond to all requests within 30 days.

TanStudio is committed to transparency and protecting your privacy. Your recordings are yours—they stay on your device or in your own cloud storage, never on our servers. If you have questions about this policy or our practices, please don't hesitate to reach out.