• GITA · Jam the Neurolink
  • SLADE · Open the Eye
  • Live · Tue & Thu 6pm PT · Twitch, site, YouTube, TikTok
  • 0 creators co-signed the Pledge
  • $0 YTD to Trevor Project
  • Powered by AktionFilm AI
← Legal & policies

Policy · Studio Action

Privacy Policy

Last updated: 2026-08-31

This is a plain-language policy; contact contest@studioaction.io with questions.

Introduction

EgoPanda Creative ("Studio Action," "we," "our," "us") operates the website at studioaction.io (the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, what we publish publicly on purpose, and your rights over your data.

Studio Action and aktionfilmai.com (Aktion Film Ai, a registered business name of Ego Panda, LLC) are one operation: the same team runs both sites and they share backend infrastructure, including a shared database. Data you give to Studio Action is handled by that shared operation as described here; data practices specific to the AI tools on aktionfilmai.com are described in that site's own privacy policy.

By using the Service, you agree to the collection and use of information in accordance with this Policy.

Section 1 — Information We Collect

1.1 Information You Provide Directly

Email addresses: We collect your email when you subscribe to the newsletter, co-sign the Take It Back Pledge, request access, make a purchase, or write to us. This is the main personal identifier on this site — there are no passwords or traditional accounts.

Display names and handles: The name or handle you choose when co-signing the pledge, posting to community surfaces, or creating a character.

Character and game data: The character files you create (name, faction, powers, backstory) and the game records generated by play — points, standings, mission results, dice outcomes, and canon events involving your character.

Discord usernames: If you link or use a Discord identity with the game (for example, playing missions through the official Discord), we collect the Discord username and ID needed to connect your play to your character.

Submissions: The creative work you post — films, stills, designs, writing — together with the handle you post it under.

Payment information: Purchases are processed by Stripe. We never see or store your full card number. We receive and retain a transaction record (email, product, amount, last-four digits, card type, billing country) for our books and to deliver what you bought.

Communications: Emails and requests you send us.

1.2 Information Collected Automatically

Usage data: Pages visited, features used, and error logs.

Device and connection information: IP address, browser type and version, operating system, and referring URL.

Cookies and analytics: We use Google Analytics (GA4) for aggregate usage statistics, and essential cookies for basic site function. We do not run behavioral advertising.

Section 2 — What We Publish Publicly, On Purpose

Parts of this site are public by design. Read this section before you co-sign or post.

Pledge co-signer names are published. When you co-sign the Take It Back Pledge, the display name you provide is published on the public co-signer cohort on this site. If you leave the display name blank, no name is shown for your signature. Your email address is never published.

To have your published name removed, email info@studioaction.io from the address you signed with and we will remove it from the public cohort within a reasonable time (normally within 7 days).

Also public by the nature of the Service: submissions you post to the gallery, community, and submission surfaces (shown with your handle); character names and their game records where they appear in leaderboards, fight records, and the story's canon; and contest results when a contest is open. If you do not want something public, do not post it — and you can always request removal at the same address.

Section 3 — How We Use Your Information

  • Providing the Service: delivering purchases, running the game, displaying submissions and standings, operating the pledge cohort (performance of contract).
  • Payment processing and records: completing transactions via Stripe and keeping required financial records (performance of contract; legal obligation).
  • Email you asked for: the newsletter, pledge follow-ups, Discord invites, and notices about your purchases or characters (consent; performance of contract). Every marketing email includes an unsubscribe link.
  • Support: answering your emails (legitimate interest).
  • Safety and fraud prevention: protecting the Service and other users (legitimate interest).
  • Analytics and improvement: aggregate usage statistics (legitimate interest).
  • Legal compliance: responding to lawful requests and keeping legally required records (legal obligation).

We never use your personal information or your creative work to train AI models without your separate, explicit consent. This is the same commitment the sister site makes, and it binds the whole operation.

Section 4 — How We Share Your Information

4.1 Shared Infrastructure With aktionfilmai.com

Studio Action and aktionfilmai.com are one operation and share infrastructure, including a shared Supabase database (hosted in us-east-2, Ohio, US). Data collected on this site lives in that shared system and is accessible to the same team that operates both sites. It is used for the purposes in Section 3 — not for anything the other site's users would find surprising, and never sold.

4.2 Service Providers

  • Hosting and CDN: Vercel (US-based edge network)
  • Database and storage: Supabase (us-east-2, Ohio, US)
  • Payment processing: Stripe
  • Analytics: Google Analytics (GA4)
  • Community platform: Discord, if you join the official server or play through it — Discord's own privacy policy governs what Discord itself collects

Service providers are used only to run the Service; they are not permitted to use your data for their own marketing on our behalf.

4.3 Legal Requirements

We may disclose information to law enforcement, courts, or government agencies when required by law or legal process, including responding to lawful court orders and subpoenas, complying with DMCA obligations, and responding to emergency requests involving risk of death or serious physical injury.

4.4 Business Transfers

If EgoPanda Creative is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred to the acquiring entity. We will notify you by email and/or prominent notice on the Service before your data becomes subject to a different privacy policy.

4.5 What We Do Not Do

  • We do not sell your personal information.
  • We do not share your personal information with advertisers for behavioral advertising.
  • We do not use your creative work to train AI models without your explicit, separate consent.

Section 5 — Data Retention

  • Email list entries (newsletter, pledge, access requests): kept until you unsubscribe or request deletion.
  • Published pledge names: displayed until you request removal (Section 2).
  • Character and game data: kept for the life of the story — the canon is a permanent record. Personal identifiers attached to it can be removed on request; the in-story events themselves may remain.
  • Payment records: 7 years (tax compliance).
  • Support communications: up to 3 years.

Section 6 — Security

We use technical and organizational measures designed to protect your personal information — encryption in transit (TLS 1.2+), access controls, and managed infrastructure providers (Vercel, Supabase, Stripe) with their own security programs. No security system is impenetrable. In the event of a data breach involving your personal information, we will notify affected users and relevant regulators as required by applicable law, including Oregon's 30-day breach notification requirement and, where GDPR applies, notice to the relevant Data Protection Authority within 72 hours of discovery.

To report a security vulnerability responsibly, email info@studioaction.io.

Section 7 — Your Rights and Choices

7.1 Rights Available to Everyone

Whoever and wherever you are, you may email info@studioaction.io to:

  • Access: request a copy of the personal information we hold about you
  • Correct: request correction of inaccurate information
  • Delete: request deletion of your personal data (including your published pledge name)
  • Opt out: unsubscribe from any mailing list — every marketing email also has an unsubscribe link
  • Port: request your data in a portable format

Send requests from the email address the data is attached to, so we can verify it is you. We respond to verified requests within 30 days (45 for complex requests, with notice). We do not charge for requests unless they are manifestly unfounded or excessive.

7.2 California Residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of any sale or sharing (we do neither); and to non-discrimination for exercising these rights. Categories we collect, as CCPA defines them: identifiers (name, email, IP address, Discord ID), commercial information (purchase history), internet/electronic activity (usage data), and audio/visual information (submissions you post). Exercise any CCPA right by emailing info@studioaction.io with the subject line "CCPA Request."

7.3 Oregon Residents (OCIPA)

Oregon residents may request access, correction, deletion, and portability of personal data under the Oregon Consumer Information Protection Act, and may opt out of targeted advertising, sale of personal data, and profiling (we do none of these). Email info@studioaction.io.

7.4 EEA and UK Residents (GDPR / UK GDPR)

If you are in the EEA or UK you additionally have the right to object to processing based on legitimate interests, to restrict processing in certain circumstances, and to lodge a complaint with your national Data Protection Authority (e.g., ICO, CNIL, BfDI). The legal bases for our processing are noted in Section 3. Data is transferred from the EEA/UK to the United States, where our infrastructure lives; such transfers rely on Standard Contractual Clauses or other appropriate safeguards maintained by our infrastructure providers. Data controller: EgoPanda Creative, reachable at info@studioaction.io.

Section 8 — Children's Privacy

Studio Action is an 18+ platform and is not directed to children. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided us personal information, we will promptly delete it. If you are a parent or guardian and believe your child has used the Service, contact info@studioaction.io immediately.

Section 9 — Changes to This Policy

We may update this Privacy Policy periodically. We will post the revised Policy with an updated "Last updated" date and, for material changes, notify you by email where we have one for you, with at least 30 days advance notice before the change takes effect. Continued use of the Service after the effective date constitutes acceptance.

Section 10 — Contact Us