Privacy Policy

Introduction

StellarDCP ("we," "our," or "us") operates stellardcp.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our DCP conversion and delivery service.

Information We Collect

Account Information

When you create an account, we collect:

• Your name
• Your email address
• Your profile picture (if using Google OAuth)
• Account authentication credentials

Usage Information

We automatically collect:

• Upload metadata (file names, sizes, upload timestamps)
• DCP configuration settings you choose
• Job status and completion data
• IP addresses and browser information for security purposes

Video Content

• Source video files you upload for conversion
• Generated DCP packages
• Video metadata extracted during analysis (resolution, frame rate, codec, audio channels, duration, aspect ratio)
• Thumbnails generated from your videos

How We Use Your Information

We use your information to:

• Provide and maintain the DCP conversion service
• Process your video files and generate industry-compliant DCPs
• Deliver completed DCPs via download or physical shipment
• Send service notifications (render completion, expiration warnings, marketing communications)
• Process payments for DCP creation and storage services
• Provide password-protected sharable links for your DCPs
• Improve our service and develop new features
• Measure the performance of our advertising and, with your consent, personalize ads about our Service on third-party platforms (see "Cookies and Tracking")
• Prevent fraud and ensure security
• Comply with legal obligations

Data Storage and Retention

Storage Locations

• Account data: Stored in our secure database
• Uploaded videos: Stored in temporary cloud storage during processing (up to 3 days)
• DCP packages: Stored in cloud storage for delivery

Retention Periods

Uploaded Videos:

• Temporary storage: Up to 3 days from upload (anonymous uploads without an account: 1 day, authenticated uploads with an account: 3 days)
• Early deletion: Removed within 24 hours if you delete the DCP, delete your account, or manually delete the upload before configuration

Completed DCPs:

• Standard retention: 7 days after completion
• Extended storage: Available for purchase (monthly or annual subscriptions)
• User deletion: When you delete a project from My Projects, it is removed from your dashboard. For projects with no subscription and no physical DCP order, files are deleted promptly. For projects with a subscription or physical DCP order, we may retain DCP files for up to 60 days from the most recent physical order (see Terms of Service). Payment history is retained; you keep access to invoices.

Abandoned Jobs:

• Anonymous uploads not configured: 24 hours
• Authenticated uploads not configured: 72 hours

Data Deletion

You can delete your DCPs at any time from the My Projects dashboard. Payment history and invoices remain available after deletion. Deleting your account removes all associated data within 30 days.

Data Sharing

We do not sell your personal information. We share data only in these circumstances:

Service Providers

We use third-party service providers to:

• Host our database and infrastructure
• Provide cloud storage for file delivery
• Process payments (Stripe)
• Send transactional and marketing emails
• Measure advertising performance and report conversions (Google Ads — only when you consent to optional advertising cookies, and for server-side conversion reporting as described under "Cookies and Tracking")
• Provide aggregated website analytics and real-user performance metrics (Vercel Web Analytics and Vercel Speed Insights — as described under "Cookies and Tracking")

All service providers are contractually obligated to protect your data and use it only for providing services to us. For Google Ads, Google may act as an independent controller for certain processing; see Google's Privacy Policy.

Legal Requirements

We may disclose information if required by law, court order, or to:

• Comply with legal processes
• Protect our rights and safety
• Investigate fraud or security issues

Security

We implement industry-standard security measures:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication (Google OAuth and password-based)
• Password-protected sharable links
• Access controls and monitoring
• Regular security updates

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Your Rights

Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Object to data processing
• Data portability
• Withdraw consent

To exercise these rights, contact us at privacy@stellardcp.com.

Email Communications

You can manage email preferences in your account settings. You may opt out of:

• Render completion notifications
• Expiration warnings
• Marketing communications

You cannot opt out of essential service emails (payment confirmations, security alerts).

Cookies and Tracking

Essential Cookies

We always use a small number of essential cookies and similar technologies for:

• Session management
• Authentication
• Security (including fraud prevention)
• Remembering your consent preferences for optional cookies

Essential cookies are required for the Service to function and do not require your consent.

Website usage analytics (Vercel)

We use Vercel Web Analytics to understand aggregated website traffic (for example, which pages are viewed, approximate geography, and device/browser type). Vercel processes this information as a service provider on our behalf. Vercel Web Analytics is designed to use aggregated, anonymized statistics and does not use third-party cookies for this product in the way described in Vercel's Web Analytics privacy documentation.

This is separate from optional Google Ads cookies below. Cookie Preferences in the site footer controls optional Google advertising and measurement cookies only; it does not turn off Vercel Web Analytics or Vercel Speed Insights (see below).

We configure our integration to avoid sending sensitive URL or query data (such as share links or verification parameters) to Vercel where feasible.

Real-user performance metrics (Vercel Speed Insights)

We use Vercel Speed Insights to collect anonymous, aggregated real-user performance data (for example, Core Web Vitals such as LCP and CLS, device and browser type, country, and route or URL path) so we can improve how fast and stable the Service feels. Vercel processes this information as a service provider on our behalf. More detail is available in Vercel's Speed Insights privacy documentation.

We configure our integration to avoid sending sensitive URL or query data to Vercel for Speed Insights where feasible, consistent with our Web Analytics configuration.

Optional Advertising and Measurement Cookies (Google Ads)

With your explicit consent, we load Google Ads tags (also known as the Google tag, gtag.js) on our website. These tags may set cookies and similar identifiers in your browser and share limited information with Google, including:

• The pages you visit on stellardcp.com
• Your IP address and general device/browser information
• A Google Click Identifier (gclid) if you arrived from a Google ad, which we store locally in your browser and may include when reporting a purchase conversion to Google
• Conversion events (for example, completing a DCP purchase) along with the transaction amount, currency, and a transaction identifier

We use this data to:

• Measure the performance of our advertising on Google
• Attribute purchases to ads so we can understand which campaigns help filmmakers find our service
• Improve our ad targeting and reach people likely to be interested in DCP creation

Google acts as an independent controller for some of this processing. More information is available in Google's Privacy Policy and How Google uses information from sites or apps that use our services.

Your Choices

When you first visit the Service, we show a consent banner that lets you Accept or Reject optional advertising and measurement cookies. Core site features work regardless of your choice.

• If you reject, Google Ads tags are not loaded and no advertising cookies are set from our site.
• You can change your choice at any time by re-opening the consent banner from the site footer, or by clearing cookies for stellardcp.com in your browser.
• You can also opt out of personalized advertising directly with Google at Google Ads Settings.

Server-Side Conversion Reporting

When you complete a purchase, we send a server-to-server conversion event to Google Ads that includes the purchase amount, currency, a transaction ID, and (if present) the gclid associated with your session. This server-side signal is sent regardless of cookie consent because it does not rely on setting or reading cookies on your device; no advertising cookies are placed in your browser as part of this step.

We do not use advertising cookies beyond what is described in this section, and we do not use advertising cookies if you have not consented to them.

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card numbers. We retain:

• Last 4 digits of card numbers
• Payment method type
• Transaction history
• Billing addresses

Stripe's privacy policy applies to payment data: https://stripe.com/privacy

Physical DCP Shipment

If you order physical DCP shipment on hard drives, we collect:

• Shipping address
• Contact phone number
• Delivery preferences

This information is used solely for fulfilling your order and is not shared except with shipping carriers as necessary.

Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided us information, contact us immediately at privacy@stellardcp.com.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted with a new "Last Updated" date. We will notify you of material changes via email. Continued use of the Service after changes constitutes acceptance.

Contact Us

For privacy questions or concerns, email us at privacy@stellardcp.com.

California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information we have collected
• Right to correct inaccurate personal information
• Right to opt-out of sale or sharing of personal information. We do not sell personal information for money. Under the CCPA/CPRA, some uses of third-party advertising cookies (such as Google Ads) may qualify as "sharing" for cross-context behavioral advertising. You can opt out of this sharing by rejecting optional advertising and measurement cookies in our consent banner, or by re-opening the banner at any time from the site footer.
• Right to limit use of sensitive personal information (we do not use sensitive personal information for advertising)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact privacy@stellardcp.com with \"California Privacy Request\" in the subject line.

European Privacy Rights (GDPR)

EU/EEA residents have rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local supervisory authority

Our legal basis for processing:

• Contract performance - providing the DCP conversion service
• Legitimate interests - service improvement, fraud prevention, security, measuring the effectiveness of our advertising via server-side conversion reporting
• Consent - marketing email communications, optional features, and optional advertising and measurement cookies (Google Ads)

To exercise these rights, contact privacy@stellardcp.com with \"GDPR Request\" in the subject line.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you within 72 hours via email and provide:

• Description of the breach
• Types of data affected
• Steps we are taking to address the breach
• Recommendations for protecting your information

Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.