Resolume effects, plugins & VJ loops

px_consent

Type: Cookie
Purpose: Stores your choice in this dialog: version, checksum, time and selection. No identifier.
Duration: 12 months
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof)

sb-<ref>-auth-token

Type: Cookie
Purpose: Keeps you signed in. Only created when you sign in.
Duration: up to 400 days (default of the sign-in library); ends when you sign out
Provider: Projection-X with Supabase (processor)
Role: Processor
Third country: USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

sb-<ref>-auth-token-code-verifier

Type: Cookie
Purpose: Secures the return from Google sign-in. Only created after “Sign in with Google”.
Duration: short, until sign-in is complete
Provider: Projection-X with Supabase (processor)
Role: Processor
Third country: USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

px2fa_ok

Type: Cookie
Purpose: Remembers that the second factor was confirmed on this device.
Duration: 30 days
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

pxag_ok

Type: Cookie
Purpose: Remembers the passed extra check for the admin area (team only).
Duration: 12 hours
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

px_next

Type: Cookie
Purpose: Remembers your destination when you sign in with Google, so you land there afterwards.
Duration: 10 minutes
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

px_aktion_<id>

Type: Cookie
Purpose: Remembers that you entered the access word of a promotion.
Duration: until you close the browser
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

px_hub

Type: Cookie
Purpose: Lets team members and testers into the hub before launch (after approval or the correct tester PIN). Signed, holds the account ID and only valid for that account; only created then.
Duration: 12 hours
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (access protection)

px_absicht

Type: Cookie
Purpose: Remembers that you chose “With Patreon” when registering, so your new account is assigned to it. Not a proof of entitlement. Only created when you click.
Duration: Session (until you close the browser); only created when you click and deleted once your account is created or you continue without Patreon
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

px_ref

Type: Cookie
Purpose: Remembers the invitation code you register with until your account is created. Only created when you click “Register”; opening an invitation link sets no cookie.
Duration: Session (until you close the browser); only created when you click
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

px_patreon_state

Type: Cookie
Purpose: Operator area only: secures connecting the operator’s Patreon account (signed check value with the operator’s account ID). Only valid on the way back from Patreon.
Duration: 10 minutes
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

px_google_start

Type: Cookie
Purpose: Remembers for up to ten minutes that the security check was passed before signing up with Google. Only needed for new accounts; deleted after returning from Google. Contains no personal data.
Duration: 10 minutes
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

px-cart

Type: Browser storage
Purpose: Your cart, only the product identifiers. Only after “Add to cart”.
Duration: at most 30 days
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

px-cart-checkout

Type: Browser storage
Purpose: Remembers the items that just went to checkout until you return.
Duration: until you close the tab
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

px-lesson-notes:*

Type: Browser storage
Purpose: Your own notes on a lesson. Only when you write them.
Duration: until you delete them
Provider: Projection-X (own server)
Role: own service
Third country: no transfer
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

Page structure and images

Type: Service
Purpose: Page structure, fonts and images of this website from our own server.
Duration: usual browser caching
Provider: Projection-X, hosted by Vercel (processor)
Role: own service
Third country: USA (Vercel Inc.; EU-US Data Privacy Framework)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

Card pick sounds

Type: Service
Purpose: Short sounds of the card pick from our own server (/media/praeregistrierung/sfx). They only load after your click on the card page; the “Sound” switch turns them off. Nothing is stored on your device.
Duration: nothing stored on your device
Provider: Projection-X, hosted by Vercel (processor)
Role: own service
Third country: USA (Vercel Inc.; EU-US Data Privacy Framework)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

Supabase

Type: Service
Purpose: Sign-in, registration and password reset. Only when you use one of them.
Duration: no storage of its own in your browser
Provider: Supabase Inc. (processor)
Role: Processor
Third country: USA possible (Supabase Inc.; EU-US Data Privacy Framework, standard contractual clauses)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

Stripe

Type: Service
Purpose: Payment: we forward you to Stripe’s checkout. No Stripe script loads on this website.
Duration: no storage on this website; Stripe sets its own cookies on its checkout page
Provider: Stripe (partly an independent controller)
Role: Controller
Third country: USA (Stripe, Inc.; EU-US Data Privacy Framework)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

LiveKit

Type: Service
Purpose: Video coaching in the live room. Only when you enter a coaching room.
Duration: no storage of its own in your browser
Provider: LiveKit Inc. (processor)
Role: Processor
Third country: USA (LiveKit Inc.; standard contractual clauses)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR

Cloudflare Turnstile

Type: Service
Purpose: Protection against automated registrations and sign-ins. Loads only in forms that need it, and only after your choice.
Duration: no cookies on this website (according to Cloudflare)
Provider: Cloudflare, Inc. (processor; independent controller for improving bot detection)
Role: Processor
Third country: USA (Cloudflare, Inc.; EU-US Data Privacy Framework)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR (protection against abuse)

Cloudflare R2 (direct upload)

Type: Service
Purpose: Direct uploads of large files in the admin and studio area and in coaching.
Duration: no storage of its own in your browser
Provider: Cloudflare, Inc. (processor)
Role: Processor
Third country: USA (Cloudflare, Inc.; EU-US Data Privacy Framework)
Legal basis: Sec. 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR