Privacy policy

1. Data controller

The controller responsible for data processing on darksitestudio.de and in the demos of Darksite Studio is:

Aegiron Capital Group Ltd
Andrea Omirou Avenue 30, Aristo Plot Paradise 1, Apartment 302
8047 Universal, Paphos, Cyprus
Registration number: HE 482148
VAT ID: CY60246737I
Email: coding@aegironcapital.com

Aegiron Capital Group Ltd is not required to appoint a data protection officer pursuant to Art. 37 GDPR, as its core activities involve neither large-scale processing of special categories of personal data nor large-scale systematic monitoring. For all data protection questions, you can reach us at coding@aegironcapital.com.

2. Scope

This privacy policy applies to darksitestudio.de and to the demos of Darksite Studio at their own addresses:

• Agency Dashboard: dashboard.darksitestudio.de
• DocMind: docmind.darksitestudio.de
• FlowConnect: flowconnect.darksitestudio.de
• Secrex: secrex.darksitestudio.de

The demos are pure browser applications: they have no backend, no sign-in and no contact form, and what you enter in them is processed by your browser alone.

3. Hosting and server log files

All pages are hosted by Hostinger International Ltd (Larnaca, Cyprus, EU) and delivered through its content delivery network. Hostinger processes personal data on our behalf (Art. 28 GDPR). Where Hostinger uses sub-processors outside the EEA, the EU Standard Contractual Clauses in Hostinger’s data processing agreement apply.

Whenever a page or a demo is opened, the server automatically records standard data such as your IP address, your browser type, the referring URL and the time of access. This data is used strictly for technical operation and security purposes.

The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in the technical functionality and security of the pages.

Retention: we do not analyse the log files ourselves. They are visible in our hosting customer area for no more than 7 days; how long Hostinger keeps them beyond that is determined by its deletion routines.

4. No cookies, no tracking

Neither darksitestudio.de nor the demos set cookies. We use no analytics, tracking or advertising tools and load no third-party content when a page opens; fonts and images come from our own server. The only connection to a third party is the one to Binance in the Secrex demo, and it is established only if you expressly agree to it (Section 6).

5. Storage in your browser

The home page and the legal pages of darksitestudio.de store nothing in your browser. Entries the agency dashboard created while it ran at this address until October 2026 (prefix ds-) are removed when you open the home page.

The demos store data locally in your browser only (in local storage, localStorage; Secrex additionally, for a short time, in session storage, sessionStorage), and only once you use the demo — never when you merely open it. This data does not leave your device; none of it is transmitted to us or to third parties. The storage is required for the function you use in the demo; no consent is needed for it (Art. 5(3) of Directive 2002/58/EC, in Germany Section 25(2) no. 2 TDDDG).

You can remove all entries of a demo by deleting the website data of its address in your browser. In detail:

Agency Dashboard

ds-theme

colour scheme, once you switch it

ds-locale

language, once you change it in the demo

ds-sidebar

whether the sidebar is expanded or collapsed

ds-storage-notice

that you have confirmed the notice about storage

ds-intro-seen

that you have left the demo’s start page before; its introduction is shorter from then on

ds-tour-seen

that you have finished or skipped the tour or closed the welcome card

ds-demo-state

the demo data with your changes: clients, posts, campaigns, messages and replies, notifications, media library, team, connected accounts, reply templates, profile and plan, and the selected client filter

Files you select in the media library or the post composer are read by your browser only; they are not uploaded. Only details of the entry such as file name, size and tags are kept. Exports (CSV, printing to PDF) are created in your browser. The demo data stays until you reset it in the demo via “Reset demo”; settings and display states stay until you delete the website data.

DocMind

DocMind is a demo without AI: it shows prepared results for fixed sample documents. You cannot load your own documents, and there is no connection to any AI provider.

docmind_settings

font size and language, only once you change a setting

docmind_first_result

a flag after the first finished sample result, for a one-time animation

docmind_showcase_note_dismissed

a flag that you have closed the showcase notice

docmind_history_v2

only for visitors of an earlier version (until 10 October 2026): their history entries with document name, question and result text, not the content of the document; the current version creates none

The history of the sample results of a session exists in memory only and is gone as soon as you close or reload the page. On start, DocMind removes what earlier versions left behind, including an API key that may have been stored there (docmind_api_key in local and in session storage). Export (PDF, Markdown, CSV), printing, copying to the clipboard and sharing happen only when you click and locally; when you share, the text goes only to the app you choose in your device’s share dialog. You can delete history entries one by one in the history or all of them via Settings → “Clear history”.

FlowConnect

Everything in FlowConnect is simulated: the services and addresses named in the demo are examples, and nothing is sent to them.

flowconnect-theme

colour scheme (light or dark), when you switch it

flowconnect-lang

language, when you change it in the demo; the address parameter ?lang= alone stores nothing

flowconnect-sound-on

whether sounds are on

flowconnect-follow

whether the camera follows the run

flowconnect-demo-notice

that you have closed the demo notice

flowconnect-tour-done

that you have finished or skipped the tour

flowconnect-runs

history of the simulated runs, 20 at most; written when a run ends and removed when the history is empty

flowconnect-custom-flow

your own workflow from the builder, only once you change it

A workflow file you import is read by your browser only; nothing is uploaded. Exports are created in your browser as downloads, and copying to the clipboard happens only when you click. After an error, FlowConnect also offers “Delete stored demo data”, which removes the history and your own workflow.

Secrex

secrex:settings

display, motion, trading presets, notification switches and risk profile

secrex:account

the paper account: simulated address, play-money balance, orders, positions, staking, savings plans, price alerts, activity, value history and the prices at which it was last valued

secrex:watchlist

markets you have marked

secrex:notifications

notifications from your paper account

secrex:notice

that you have seen the demo notice

secrex:sparks

in session storage, only with live prices switched on: a short cache of chart data, which disappears when you close the tab

Several open tabs coordinate through a BroadcastChannel in your browser; nothing is stored and nothing is sent over the network for this. You can delete the data in the demo under Settings → Data in this browser.

6. Secrex: live prices from Binance

Secrex uses simulated prices by default and does not connect to any third party in that state. Only if you agree in the dialog “Load live data from Binance” does your browser connect to Binance (api.binance.com via HTTPS and stream.binance.com:9443 via WebSocket). This transmits your IP address and the usual technical request data to Binance, nothing from your paper account.

Binance may process the data outside the EEA, where an equivalent level of data protection may not be ensured. Binance itself is responsible for the processing on its side; its privacy policy applies.

Your agreement is not stored: it applies to the current visit only, Secrex asks again on every visit, and after reloading, the simulation is active again.

The legal basis is your consent (Art. 6(1)(a) GDPR; for transfers to third countries Art. 49(1)(a) GDPR). You can withdraw it at any time with effect for the future by switching back to the simulation in the demo or by reloading the page.

7. Recipients

On these pages, personal data is processed only by Hostinger as our processor (Section 3) and, only with your consent, by Binance (Section 6). We do not sell data, do not pass it on for advertising and make no automated decisions within the meaning of Art. 22 GDPR.

8. Your rights

Under the General Data Protection Regulation, you have the following rights with respect to your personal data:

• Right of access (Art. 15): you may request confirmation of whether we process your personal data and obtain a copy of such data.
• Right to rectification (Art. 16): you may request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): you may request deletion of your data, subject to statutory retention obligations.
• Right to restriction of processing (Art. 18): you may request restriction of processing under certain circumstances.
• Right to data portability (Art. 20): you may request your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): you may object at any time to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)): you may withdraw consent at any time without affecting the lawfulness of the processing carried out before.

To exercise your rights, write to us at coding@aegironcapital.com. We will answer your request within one month; in complex cases we may extend this period by two further months and will then let you know.

9. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for Aegiron Capital Group Ltd is:

Office of the Commissioner for Personal Data Protection
15 Kypranoros Street, 1061 Nicosia, Cyprus
Postal address: P.O. Box 23378, 1682 Nicosia
Email: commissioner@dataprotection.gov.cy
Website: www.dataprotection.gov.cy

You may also contact the supervisory authority at your place of residence, your place of work or the place of the alleged infringement, for example:

• Germany: the data protection authority of the federal state (Land) in which you live or work
• Austria: Datenschutzbehörde (Austrian Data Protection Authority)
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC)

10. Data security

All pages and demos are transmitted encrypted only (HTTPS). Their security policies (Content Security Policy) allow connections to their own address only — except for the connection to Binance in Secrex once you have agreed.

11. Changes to this privacy policy

We adapt this privacy policy when the pages, the demos or the legal requirements change. The date of the current version is given at the top.