FaciliScenes

Auf Deutsch

Privacy policy

Last updated: 4 November 2026

This page covers this website (faciliscenes.com) and the FaciliScenes app. A German version is available. If the two differ in meaning, tell us.

Who is responsible

Said Saddouk, Haydnstr. 61, 44145 Dortmund, Germany. Email: support@faciliscenes.com. Full details are in the Impressum.

This website

When you open a page, our web server receives your IP address, the time, the page you asked for, the answer it gave and your browser type. It needs this to deliver the page and to defend against abuse. Legal basis: our legitimate interest in a working and secure site (Article 6(1)(f) GDPR). The server keeps these logs for a limited time: at most 30 MB per container, older entries are overwritten, and all are deleted when the site is redeployed.

The site sets no cookies, runs no script, and loads nothing from other companies: fonts and images come from our own server. It has no analytics.

The waitlist

If you join the waitlist, we collect your email address. Your browser sends the form straight to our email provider Kit, which stores the address for us. You get a confirmation email first (double opt-in), and you are on the list only after you click the link in it.

By joining and confirming, you agree to launch emails: news of when FaciliScenes opens, the founders offer, and the 48 hours of early access for the waitlist. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email, and we then stop writing to you.

The form has a separate box, not ticked, for Said's newsletter. Only if you tick it do you also get the newsletter. Same legal basis, same way to withdraw. You never have to tick it to join the waitlist.

We keep a waitlist address until you unsubscribe.

Your account

To make an account we store your email address, your password (only as a one-way hash, never in readable form), the display name if you give one, your plan, when you created the account and when you last signed in, and your app settings such as the colour theme and brand colours. We use this to run your account. Legal basis: performing the agreement to use FaciliScenes (Article 6(1)(b) GDPR).

If we invite you, we store the invited email address with the invite and send you one email with the link. Legal basis: steps before entering the agreement (Article 6(1)(b) GDPR). The invite row is deleted with your account, or 30 days after the invite ended without an account (revoked or expired).

Each sign-in creates a session record: a hashed token, your browser type and an expiry date, so we can recognise a session and end it. A session lasts 7 days, and its record is deleted a day after it expires.

We keep the account until you delete it. If you never confirm your email address, the account stays for 7 days.

Cookie and local storage

The app sets one cookie, called rt. It keeps you signed in. Only our server can read it, it goes only to our account endpoints, only over HTTPS and never from other sites, and it lasts 7 days. It is strictly necessary for the service you asked for, so it needs no consent (section 25(2) no. 2 TDDDG).

Your browser also keeps your access token and some per-device settings in its local storage, for the same purpose. They stay on your device. There are no tracking or advertising cookies.

Your scenes and uploads

We store the scenes you build, the images and fonts you upload and the overlay links you create, so you can open them again and OBS can show them. They sit on our server, tied to your account. Legal basis: performing the agreement (Article 6(1)(b) GDPR). When you delete your account, your account data, scenes and uploaded files are deleted. Copies in database backups are overwritten after 30 days.

Anyone who has an overlay link can see that scene. Share a link only with people who may see it. When OBS or a browser opens a link, our server receives the visitor's IP address and browser type, as described for this website, and sets no cookie.

Emails from the app

The app sends the emails it needs to work: confirming your address, resetting a password, and security notices such as a note that a session was reused. Resend sends them for us. Legal basis: performing the agreement (Article 6(1)(b) GDPR) and, for security notices, our legitimate interest in protecting your account (Article 6(1)(f) GDPR). The app does not send marketing email.

Password check

When you set a password, we check it against the list of leaked passwords at Have I Been Pwned. Only the first five characters of a one-way hash of the password leave our server, never the password itself or your email address. Legal basis: our legitimate interest in keeping accounts safe (Article 6(1)(f) GDPR). If that service is down, the check is skipped.

Error reports

If something breaks in the app or on the server, we store the error message, its technical trace and the page path, with a count. The stored record carries no account ID. It is kept for 30 days. A server error also goes to Said as an alert email through Resend, with the error message, its technical trace and the page path. Legal basis: our legitimate interest in finding and fixing faults (Article 6(1)(f) GDPR).

Usage statistics

We do not collect usage statistics. The app may still send a small request that names an action, such as opening a session. While collection is off, our server discards it without storing anything. This page will describe the statistics before we switch them on.

Who helps us run it

Data processing agreements (Article 28 GDPR): [processorAgreements: missing]

Some of these providers are outside the EU. For those transfers: [thirdCountryBasis: missing]

We do not sell your data, and we do not use it for automated decisions about you.

Payments

FaciliScenes does not take payments yet. This page will cover payment data before the first sale.

Your rights

You can ask us for access to your data, correction, deletion, restriction, and a copy in a common format. You can object to processing that rests on our legitimate interest, and you can withdraw a consent at any time. Withdrawing does not affect what happened before.

In the app, Profile has Download my data and Delete account. For anything else, write to support@faciliscenes.com.

You can complain to a data protection authority. The one responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf

No law requires you to give us this data. Without an email address, though, we cannot give you an account or add you to the waitlist.