Privacy
Superhelt AS, organisation number 928 053 555 MVA, Røsslyngstien 10B, 6530 Averøy, Norway, is the controller for account data, payment references, and operation of DisplayStation. Contact: hello@displaystation.app.
Account and contact data
When you create an account, the account service stores your name, email address, and a password hash. The password itself is not stored. The purpose is to give you access to the account and the subscription. The basis is that the processing is necessary to take steps toward and perform the contract. We also record email verification and acceptance of the business terms. The sign-in account remains available after a subscription ends so you can manage invoices or restart. You can request account deletion by email; data needed for legal obligations is handled separately.
Content you create
Views and media you save while signed in are stored on your account. The demo keeps its own session and is not written to an account. Hosted views, media and screen configurations are scheduled for deletion 14 days after paid access or the trial ends. Local player caches must be cleared on the device. For personal data in customer content, the customer determines the purpose and Superhelt AS processes it to deliver the service. Our standard data-processing agreement applies and must be in place before we process personal data on your behalf. Contact us before uploading such content. Do not upload sensitive personal data.
Browser storage
The site stores a language choice in the browser. The demo uses session storage so it stays apart from the account. Details are on the cookies and local storage page. This storage is used to run the site and the demo. Anonymous, cookiefree visit statistics are collected via Cloudflare Web Analytics. There is no advertising storage.
Payment
When you continue to pay, DisplayStation sends the account, the license choice, the amount, the currency, and the email address to Stripe. Card numbers are entered on Stripe’s page. Stripe is the controller for the card data it collects. The license is recorded when Stripe reports the payment as paid. This site does not treat the return address as proof of payment. Payment references and accounting documentation are retained separately when required by law; the 14-day content-deletion rule does not override those duties.
Hosting, logs, and the player service
The website and the account and player service run on Cloudflare. The account database is Cloudflare D1. Published files can be stored in Cloudflare R2. Cloudflare may process connection data, including IP address, to deliver and protect the service. A backup retention period is not stated here because it is not set in the product. The player service also stores device identifiers, pairing status, and the view assigned to a screen, so a connected screen can show the published view.
Embedded pages
Pages you place in a view load from their own sites. Those sites apply their own terms. DisplayStation does not control them.
Language
If you have not chosen a language, the site may read a country code from Cloudflare’s trace endpoint to choose Norwegian or English. It does not ask for precise location. After you choose a language, that choice is stored in the browser and the trace request is not repeated for that choice.
Transfers
Cloudflare and Stripe can process data outside Norway, including in the United States, because they operate the hosting and payment services. Do not assume that all processing takes place in Norway or the EEA. Contact us for the applicable processing agreements, locations and transfer safeguards before using the service for customer-controlled personal data.
Your requests
You can ask for access, correction, deletion, restriction, or a copy by writing to the contact address. We handle privacy requests within the applicable statutory deadlines. We may need to verify your identity before disclosing or deleting account data. You can also complain to the Norwegian Data Protection Authority, Datatilsynet.
Anonymous visit statistics are collected with Cloudflare Web Analytics. This page does not say that no data is sent: account data, payment data, and hosting data are sent to the services named above.