Who controls your data
The operator of MotionPipeline, based in Poland, is the controller of personal data described in this notice. You can contact the controller and exercise your data-protection rights at contact form.
Data we process
This website provides customer accounts and a contact form, but currently has no checkout, mailing list, analytics, advertising tracker, or non-essential cookie. The contact form is protected by a self-hosted proof-of-work CAPTCHA. We process limited data in these situations:
- When you contact us: your email address, name, subject, and any information you choose to include, so we can respond and manage the correspondence.
- To limit automated submissions: the CAPTCHA challenge and a keyed, one-way hash derived from your network address are processed on this server. The raw address is not stored in the contact throttle, and the CAPTCHA uses no third-party telemetry.
- When the site is delivered: the hosting provider may record technical data such as IP address, request time, requested URL, browser information, and security events in server logs.
- When you create or use an account: your email address, email-verification state, one-time-code state, session information, and security events needed to register, authenticate, and protect the account. Customer accounts do not use reusable website passwords.
Purposes and legal bases
- We handle enquiries to take steps at your request and, where no contract is contemplated, for our legitimate interests in answering correspondence and operating the project (GDPR Articles 6(1)(b) and 6(1)(f)).
- Technical logs are processed for our legitimate interests in securely delivering, maintaining, and protecting the website (Article 6(1)(f)).
- We may retain limited records where necessary to comply with a legal obligation or establish, exercise, or defend legal claims (Articles 6(1)(c) and 6(1)(f)).
- We create and secure customer accounts, verify account ownership, and provide the customer library to perform our contract or take steps requested before a contract, and for our legitimate interests in preventing unauthorized access (Articles 6(1)(b) and 6(1)(f)).
Recipients and international transfers
Data may be processed by service providers that support website hosting and email, acting under their own legal obligations or on our instructions. We do not sell personal data. If a provider processes data outside the European Economic Area, we require an applicable lawful transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses.
YouTube is reached only when you choose an external YouTube link; its own privacy notice then applies. No YouTube player is embedded on this site.
How long we keep data
Routine enquiries are normally deleted within 12 months after the last meaningful contact. We may keep relevant correspondence longer when a business relationship develops or while reasonably needed for legal claims or statutory duties. Hosting and security logs are kept only for the period reasonably required by the hosting provider for operation and security.
Customer account records are retained while the account remains open and for the period reasonably needed afterwards for security, legal claims, and statutory duties. You may request account deletion through the contact form, subject to records we must retain.
Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, or portability of your data, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting earlier processing. You also have the right to complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), or to the competent authority where you live or work.
Whether data is required
You do not have to provide personal data to browse the site. If you contact us, we need an email address and enough information to respond. We do not use automated decision-making or profiling.
Changes to this notice
We will update this notice before introducing checkout, a mailing list, analytics, embedded media, or other processing. The latest version and its effective date will be published here.
Passwordless accounts and free-download campaigns
Customer sign-in is passwordless. We send a short-lived, one-time code to the email address entered. Customer accounts do not use a reusable website password; staff administration remains password protected. We process the code, its limited attempt state, email-verification state, and session information to authenticate you and prevent unauthorized access.
When you request a free product through a campaign link, we record the campaign, your customer account, request and fulfilment times, request count, claim status, a shortened user-agent value, and a keyed hash of the network address. The hash is used for abuse controls and does not store the raw network address. This lets us fulfil the request, retain the product in your library, protect the service, and understand which published campaign led to a customer claim. Campaign attribution is first-party and does not use advertising cookies or third-party tracking.
The free-download form does not subscribe you to marketing by default. The code email is a service message used only to complete the requested sign-in and download. Marketing email requires a separate, unticked optional choice with its own versioned consent record.
Unverified pending campaign claims, related throttle records, and otherwise unused accounts are periodically removed. Fulfilled claims and entitlements are retained with account and transaction records for access, security, support, legal claims, and statutory duties.
Optional mailing list
If you choose the optional updates checkbox, or submit the updates form, we store your email address, the version of consent wording you saw, the time of consent, the collection source (for example a free-download campaign or the updates page), and unsubscribe state. This list is used only for occasional MotionPipeline notes about tutorials and products. We are not sending marketing campaigns yet; collection is preparation for later announcements.
Mailing-list consent is never implied by requesting a download sign-in code. You can withdraw marketing consent through the unsubscribe link provided with future messages or by contacting us. Unsubscribing from marketing does not remove your account, entitlements, or download history.