Privacy Policy

When you interact with our Websites or App, we automatically collect certain information through technologies, including:

• Technical Data: Operating system, IP address (including approximate geolocation), access times, browser type and language, referring website.
• Usage Data: Interactions with our Services, such as clicked elements, metadata, and state changes.
• Cookies and local storage: On supernext.com, analytics cookies are set only with your consent (see “Hosting, Delivery and Analytics of This Website”). Our Services (Dashboard, App) use cookies that are required for login, security and the features you use.
• Pixel Tags (Web Beacons/Clear GIFs): Tiny graphics that track user behavior, such as whether emails are opened. These are not linked to personally identifiable information.
• Mobile Data: Non-personal data such as device type, usage patterns, or crash reports (used for troubleshooting and product improvement).
• Google Analytics: Google Analytics 4 is loaded on supernext.com only after you consent in the cookie banner – see “Hosting, Delivery and Analytics of This Website” for details.

When you sign in with Google and authorize access, we collect:

• Your Google account ID
• Information about your YouTube channel
• Metadata about the videos you upload (title, description, etc.)
• Your OAuth access token (securely stored)

We never collect or store your password or complete Google account details.

This website is hosted by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (“AWS”). The content is stored in an AWS data centre in the European Union (Ireland region) and delivered through the Amazon CloudFront content delivery network, which keeps copies of the content at locations worldwide to serve it quickly.

With every request, AWS processes on our behalf the connection data that is technically required to deliver the page:

• IP address of the requesting device
• date and time of the request
• requested page or file and the amount of data transferred
• browser type, operating system and language (user agent)
• the previously visited page (referrer URL)

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure, stable and fast delivery of the website. Log data is used solely for troubleshooting and for defending against attacks and is deleted after 30 days at the latest. We have a data processing agreement with AWS (AWS Data Processing Addendum). Where CloudFront processes data outside the EU, this is based on the EU Standard Contractual Clauses and the certification of Amazon Web Services, Inc. under the EU-US Data Privacy Framework.

If you click “Accept” in the cookie banner, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your consent, Google Analytics is not loaded and no data is transmitted to Google.

Google Analytics sets cookies (_ga, _ga_*) that are stored for up to two years and records, in pseudonymised form, which pages you visit, how long you stay, where you came from, and information about your device, browser and approximate location. Google Analytics 4 does not store IP addresses. Usage data is deleted after 14 months at the latest. Google also processes the data in the USA on the basis of the EU Standard Contractual Clauses and the certification of Google LLC under the EU-US Data Privacy Framework.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) of the German TDDDG. You can withdraw it at any time with effect for the future via “Cookie settings” in the footer; the Google Analytics cookies for this website are then deleted. For more information, see the Google Privacy Policy.

We store your decision in the cookie banner (consent or refusal) in your browser’s local storage (entry “sn-consent”, not a cookie) so that we do not have to ask you again on every visit. This storage is technically necessary (Section 25(2) no. 2 TDDDG) and contains no personal data. You can delete the entry at any time in your browser settings.

• Typeform: Our contact and application forms are provided by Typeform S.L., Carrer de Bac de Roda 163, 08018 Barcelona, Spain. The forms open on typeform.com in a new tab; when you open and fill in a form, Typeform processes your IP address and the information you enter. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract or employment relationship) and Art. 6(1)(f) GDPR. The Typeform Privacy Policy also applies.
• External links: Links to our Dashboard (app.greensuite.io) and to social media lead to independent services with their own privacy notices.

Depending on the enabled features, the player and feed process IP addresses, device and browser characteristics, device identifiers (including mobile advertising IDs where available and permitted), content and advertising interactions, timestamps and privacy choices. Processing requiring consent is based on Art. 6(1)(a) GDPR and, for storing or accessing information on your device, Section 25(1) TDDDG. The relevant TCF purposes are:

• Purpose 1: Store and/or access information on a device.
• Purpose 2: Use limited data to select advertising, including frequency capping.
• Purpose 7: Measure advertising performance.
• Purpose 8: Measure content performance.
• Purpose 10: Develop and improve services, including evaluating A/B tests.
• Purpose 11: Use limited data to select content, including avoiding repeated presentation of watched content.

You can withdraw consent with effect for the future through the publisher’s consent settings. Withdrawal does not affect the lawfulness of processing before withdrawal. Mobile advertising identifiers are additionally subject to applicable device and operating-system permissions.

For the following technical activities, where we act as a controller, we rely on Art. 6(1)(f) GDPR:

• Deliver and present advertising and content (TCF Special Purpose 2): Our interest, shared with the publisher, is to transmit requested video and advertising to your device and display it in a technically compatible format. This requires connection and compatibility information such as your IP address, browser or device capabilities and the requested resource.
• Save and communicate privacy choices (TCF Special Purpose 3): Our interest is to receive and communicate consent and objection signals so that SuperNext, publishers and participating advertising providers can respect your choices. This includes reading and forwarding the available consent signal and relevant vendor and purpose choices.

These interests concern technical delivery and privacy-choice handling. They do not provide a substitute legal basis for consent-dependent measurement, service improvement or device storage. We limit the data to what each activity requires and limit recipients to the providers involved in delivery or handling those choices. Special Purposes do not have a separate objection switch in the TCF interface; this does not remove your statutory rights. You may object on grounds relating to your particular situation under Art. 21 GDPR by contacting advertisers@supernext.com. Where we act as a processor, we forward rights requests to the responsible publisher.

The player and feed use browser storage, including localStorage for frequency capping, a feed user identifier and likes, and IndexedDB for watched-content history. These mechanisms are not cookies. They have no browser-enforced expiration; their removal depends on the application and your browser settings. You can clear them through your browser’s site-data controls. The device-storage and operational disclosure lists the storage identifiers, purposes, domains and mobile SDKs in scope. Third-party advertising providers may use their own storage and publish their own notices.

For publisher processing covered by our data processing agreement, IP addresses in debugging logs must be deleted after no more than seven days and transaction raw data after no more than 90 days. These contractual limits do not describe an automatic lifetime for browser storage. Corporate website analytics and account data have the separate retention periods described elsewhere in this policy.

From time to time, we publish user feedback on our Websites. We only display first names and initials of last names, unless you explicitly agree to share your full name and profile photo.

We may create anonymized datasets by removing identifiable information. These may be used to improve our Services or shared externally for analytical or business purposes.

We use this data solely to provide the core functions of the app:

• To upload videos to your YouTube channel on your behalf
• To display your uploaded videos and their publication status
• To send optional notifications about uploads or errors

We never sell, rent, or share your data with third parties.