Back to StandOut EngineLegal Compliance

Privacy Policy / Datenschutzerklärung

Last Updated: 05.11.2026

1. Data Controller (Verantwortlicher)

The controller responsible for data processing on this website pursuant to Art. 4 No. 7 GDPR is:

Louis Kempf

StandOut Engine

Rudolf-Clausius-Str. 85, 97080 Würzburg, Germany / Deutschland

E-Mail: kempf@mockups-studio.com

Phone: +49 162 9607848

2. What Data We Collect and How We Use It

A. Registration & Account Data: When you create an account, we collect your email address, name (if provided), and an assigned unique User ID to manage your account, authenticate your login, and track your token balance. (Legal basis: Art. 6(1)(b) GDPR).

B. Designs, Compositions & Mockups: Your design is placed on the shirt image in your browser. This composition (your design on the shirt) is stored in our cloud storage and sent to our AI providers to create your mockups. Generated mockups are returned to your browser and are stored in our cloud storage only when you save them to your library. Anyone who has the direct link to a stored file can open it, so please do not share these links. We do not use your uploads to train AI models. (Legal basis: Art. 6(1)(b) GDPR).

C. User Feedback & Support: Feedback messages and contact information submitted via our in-app modals are processed to resolve bugs and respond directly to inquiries. (Legal basis: Art. 6(1)(f) GDPR).

D. Server Log Files: IP address, browser type, operating system, referrer URL, and time of request are processed to ensure stable server operation and security. (Legal basis: Art. 6(1)(f) GDPR).

E. Inspo Photos: If you upload an inspo photo, it is sent through our server to our AI providers (Anthropic and Google; if Anthropic is not available, only Google). They use it to write a text description of the pose, framing, light and setting and to draw an outline sketch of the pose. We do not store the photo on our servers or in our cloud storage. A copy stays in your browser for preview and "Try again". We store the description and the sketch for 30 days so you can create mockups from them. An inspo photo may show other people, so please only upload photos you are allowed to use. (Legal basis: Art. 6(1)(b) GDPR; for other people shown in a photo: Art. 6(1)(f) GDPR, our legitimate interest in providing the requested feature).

F. Free Demo Without an Account: To limit the demo to one try per person and to prevent abuse, we store a salted hash of your IP address for 30 days and set a cookie ("so_demo") for 30 days. Your browser also keeps a local note that the demo was used. The shirt image with your design is sent to our AI providers (OpenAI; if OpenAI is not available, Google) to create the results. We do not store your design or the results; the results are returned only to your browser. (Legal basis: Art. 6(1)(b) GDPR for the demo; Art. 6(1)(f) GDPR for abuse prevention).

G. Usage Statistics: We use Vercel Web Analytics and Vercel Speed Insights to understand how the website is used and how fast it loads. These tools work without third-party cookies. They process page URLs, referrer, approximate location, browser, operating system, device type, performance values and in-app events, such as which step of the generator was reached. According to Vercel, visitors are identified only by a hash of the request, which is discarded after 24 hours. (Legal basis: Art. 6(1)(f) GDPR).

3. Third-Party Service Providers (Sub-Processors)

We rely on trusted external partners who process data strictly under Data Processing Agreements (Art. 28 GDPR):

  • Clerk: (Clerk Inc., 835 Market St, San Francisco, CA 94103, USA) for authentication and session security. Certified under the EU-U.S. Data Privacy Framework (DPF).
  • Vercel: (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA) for web hosting, serverless API execution and usage statistics (Web Analytics, Speed Insights). Certified under the EU-U.S. DPF.
  • Stripe: (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland) for secure payment processing. We do not store credit card details.
  • Resend: (Resend Inc., 2261 Market St #5039, San Francisco, CA 94114, USA) for transactional feedback delivery.
  • Cloudflare: (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) for cloud storage of compositions and saved mockups (R2). Certified under the EU-U.S. DPF.
  • Upstash: (Upstash, Inc., USA) for our database: token balances, usage limits, library entries, inspo descriptions and sketches, and the hashed IP addresses of the free demo.
  • AI providers: Images and text are sent via encrypted server-to-server connections solely to create the requested output. The providers may keep this data for a limited time under their terms, for example for security and abuse monitoring.
    • Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): image generation (compositions, model references, sketches, prompts), reading inspo photos and drawing pose sketches. The image model may use Google Search as a tool.
    • Anthropic (Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland): reading inspo photos and writing the text description.
    • OpenAI (OpenAI Ireland Ltd, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland): image generation with SO-Engine v2 and in the free demo (compositions, model references, sketches, prompts).

4. Local Browser Storage & Caching (TDDDG Compliance)

We avoid unnecessary tracking cookies. Designs, high-resolution canvas images, copies of inspo photos and active project states are held in your local browser storage (IndexedDB / Local Storage / RAM) so you can keep working. These local copies stay on your device. Files that are processed or saved online are described in Section 2. Essential session cookies stored by Clerk are strictly necessary for authentication, and the "so_demo" cookie and the local demo note are necessary to provide the free demo within its limits (Legal basis: Section 25(2) No. 2 TDDDG).

5. Data Retention & Deletion

Account data is maintained as long as your account remains active. Compositions and saved mockups stay in our cloud storage while your account is active. You can delete saved mockups in your library at any time; to have other files or your account deleted, email us. Inspo descriptions and sketches are deleted after 30 days. Hashed IP addresses and the cookie of the free demo expire after 30 days. Inspo photos and designs used in the free demo are not stored by us. Invoices and transaction logs are retained for statutory retention periods under German tax law (up to 10 years).

6. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards through Adequacy decisions pursuant to Art. 45 GDPR (including the EU-U.S. DPF) and Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

7. Your Statutory Rights (GDPR)

Under the GDPR, you have the Right of Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction of Processing (Art. 18), Data Portability (Art. 20), and to Object (Art. 21). You also have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, email us at: kempf@mockups-studio.com.

8. Contact

For privacy inquiries, contact Louis Kempf, StandOut Engine, Rudolf-Clausius-Str. 85, 97080 Würzburg, Germany.

E-Mail: kempf@mockups-studio.com