Privacy policy

Last updated: 3 October 2026 · Deutsche Fassung (maßgeblich)

This policy covers the Screenbutler website (screenbutler.app), the web console and player (console.screenbutler.app) and the Screenbutler TV app for Android TV and Google TV. The German version in the imprint is the legally binding one; this English text describes the same processing.

1. Controller

Sea View Software GmbH, Steinstraße 81–83, 35390 Gießen, Germany · hello@screenbutler.app · Managing director: Robin Heller.

2. The Screenbutler TV app

The TV app is a full-screen player for the Screenbutler service. It has no account, no sign-in and no advertising, and it does not collect data for its own purposes. What it does:

• Loads one web address — by default https://console.screenbutler.app/play/, or the address of an on-premises Screenbutler installation that you enter in the app settings. Everything shown on the TV comes from that server.
• Pairing. On first start the player shows a six-digit pairing code. When you enter that code in the console, the TV becomes a "screen" of your company. The pairing code and the resulting screen id are the only identifiers involved; no Google account, advertising id or hardware serial number is read.
• Operating data sent to the server while the player runs: screen id, the app version and browser identification (user agent), screen resolution, the IP address of the connection, the slide currently shown, the time of the last contact, and — only when requested from the console — a screenshot of what the TV is showing and a "picture has not changed" warning for burn-in prevention. This data is visible only to members of the company that paired the screen and is used for status display and troubleshooting. Legal basis: Art. 6 (1) (b) GDPR (providing the service). An on-premises installation receives this data instead of us.
• Stored on the TV: the server address and player settings (retry interval, timeout, autostart, clock), and the last playlist the player loaded, so the screen keeps playing during network outages. Nothing else is stored, and nothing is sent to third parties by the app itself.
• Permissions. Internet / network state to load the player and detect offline periods; run at boot and display over other apps only so the player can start by itself after a power cut — the latter is optional and off unless you grant it.
• Content on the screens (slides, media, feeds, people directory) is created by the company that runs the screens; the app only displays it. Weather, news, calendar and social feeds are fetched by the Screenbutler server, never by the TV directly, so those providers see the server's address, not the TV's.

Deleting the screen in the console, or resetting the app, removes the pairing; all operating data of that screen is deleted with it. You can uninstall the app at any time; it leaves no data on the TV.

3. The console (console.screenbutler.app)

Account and company. When an account is created we store name, e-mail address, password (as a hash only), language, and the company name, colours and logo. Legal basis: Art. 6 (1) (b) GDPR.

Content. Slides, playlists, media, messages, overlays and screen settings created by users are stored to run the screens and delivered only to the screens of that company. The optional people directory (name, photo, birthday, start date, team — for birthday, anniversary and welcome slides) is maintained by the customer as controller; we process it as a processor under Art. 28 GDPR and sign a data-processing agreement on request.

Change log. Changes made in the console (who changed what, when) are logged per company (up to 5,000 entries) and shown to that company's members.

Cookies. One strictly necessary session cookie (30 days); language and last selected company in the browser's local storage. No tracking or advertising cookies.

E-mail. System e-mails (invitations, credentials, password reset, welcome, password changed) are sent through Resend (Resend, Inc., USA; EU sending region, standard contractual clauses). Recipient address, name and message content are transmitted. No newsletters, no tracking in e-mails.

Trial and subscription. New companies start with a 14-day trial; we store its end date and the plan. Subscriptions are sold through Paddle.com Market Ltd, Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom, acting as Merchant of Record. When you subscribe, Paddle collects your name, e-mail address, billing address, VAT ID where given and payment details on its own checkout page and processes them as an independent controller under Paddle's privacy policy; we never see full card or bank details. Paddle sends us the customer and subscription identifiers, the billing country and the invoice amount so we can activate the company and keep accounting records (Art. 6 (1) (b) and (c) GDPR; retained 10 years under § 147 AO). The United Kingdom is covered by an EU adequacy decision.

Internal notifications. When a company signs up, pairs a screen or subscribes, our server posts a notification (company name, owner's name and e-mail address, screen name, the source of the sign-up) to our internal Microsoft Teams channel through Microsoft Power Automate (Microsoft Ireland Operations Ltd., EU data boundary) so that we can respond quickly. Legal basis: Art. 6 (1) (f) GDPR (customer support and operations).

Measuring advertising, without cookies. If you reach the sign-up form from one of our advertisements, the advertising platform appends a click identifier to the address of the page you land on (Google Ads: gclid; Meta: fbclid; ChatGPT Ads: oppref), and the address may carry campaign parameters (utm_*). Our website carries these parameters forward in the links to the console only — nothing is stored in your browser. If you then create a company, we store the identifiers, the campaign parameters, the landing page, the referring site, your IP address and browser identification with the company record, and we report the sign-up and a later first payment to the platform whose identifier was present: to Google Ads as a click conversion (identifier, time, amount), and, once activated, to Meta and OpenAI through their server-side Conversions APIs (identifier, time, amount and your e-mail address as a SHA-256 hash). Sign-ups that did not come from an advertisement are not reported to anyone. Legal basis: Art. 6 (1) (f) GDPR (measuring the effectiveness of our advertising); you can object at any time at hello@screenbutler.app and we will delete the attribution data. Retention: 90 days for the click identifiers, then only the campaign name remains with the company.

Connected services, only when a user sets them up: Google Search Console and Google Analytics (queried with a service account the customer provides), Instagram/Facebook/X (with tokens the customer provides). Weather comes from Open-Meteo; news, calendar and social feeds are fetched from the addresses entered. Stored credentials are encrypted at rest and never shared.

4. This website

The website sets no cookies, stores nothing in your browser and uses no analytics or advertising scripts. The server keeps technically necessary connection data (IP address, time, requested address, user agent) in logs deleted after 14 days at the latest. Legal basis: Art. 6 (1) (f) GDPR. Advertising click identifiers in page addresses are handled as described in section 3.

5. Hosting

The application and its data run on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (Falkenstein data centre) under a data-processing agreement. Transfers to third countries are limited to e-mail delivery (Resend, USA, standard contractual clauses), payment processing (Paddle, United Kingdom, adequacy decision) and advertising measurement (Google Ireland Ltd.; Meta Platforms Ireland Ltd. and OpenAI Ireland Ltd. once activated — each with onward transfers to their US parents under the EU–US Data Privacy Framework or standard contractual clauses).

6. Retention

Account and company data are kept while the account exists and removed when the company or account is deleted; backups are overwritten after 14 days. Server logs: 14 days. Invitations expire after 7 days at the latest. Sent screen messages: 7 days. Invoicing data: 10 years (§ 147 AO). Advertising click identifiers: 90 days. Content of a company whose trial or subscription ended: 90 days, then deleted.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Company owners can export all of their company's data as JSON in the console at any time and delete the company themselves. Complaints can be lodged with the supervisory authority: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wiesbaden, datenschutz.hessen.de.

8. Security

Encrypted transport (TLS), passwords stored as scrypt hashes only, content access strictly per company and role, rate limiting on public endpoints, daily backups.

← Back