Privacy notice.
Issued under the Data Privacy Act of 2012 (RA 10173). NRK Media is the personal information controller for the data described here.
What we holdYour name, email address, optional username, company, optional profile photo, and — if you take a paid plan — your plan, its expiry and your payment reference. For ProStudio accounts we also hold the studio's business contact details and the listing you publish.
What you writeYour scripts, run notes and cue marks are stored so the service can work across your devices and offline. They are never used for advertising and are not sold or shared.
PaymentsCard and PayPal account details are handled entirely by PayPal and never reach our servers. We store only the resulting order reference and what it bought.
Recordings stay on your deviceVideo recorded through the studio's camera feature is written to your browser's own storage on that machine. It is never uploaded to us. Clearing site data for the app deletes those takes.
Photo metadataPhotographs uploaded to a listing are re-encoded and any embedded camera metadata is stripped, and uploads that still carry it are refused. This is deliberate: EXIF data can include the GPS coordinates of where a photo was taken, and we will not republish a venue's location.
CookiesOne cookie, nrk.sid, keeps you signed in. It is strictly necessary for the service to function. We run no advertising or third-party tracking cookies.
Google sign-inIf you sign in with Google we receive your name, email address and profile picture from Google to create or match your account. Nothing is posted back to Google.
Who else sees itOur hosting provider and PayPal, each only as needed to run the service. We do not sell personal data. A public ProStudio listing is, by its nature, published — including the contact details you choose to put on it.
How longAccount data is kept while the account exists. Delete your account and your projects, scripts and notes are deleted with it. Records we must keep for tax or accounting are retained for the period the law requires.
Your rightsUnder RA 10173 you may access, correct, object to processing, request erasure, and obtain a copy of your data, and you may complain to the National Privacy Commission. Most of this is self-service in Settings; for anything else, write to us.
SecurityTraffic is encrypted in transit. Passwords are stored only as bcrypt hashes, and password-reset links only as hashes — neither can be read back, including by us.