Privacy policy

Who is responsible

The controller under the GDPR is:

The website

Hosting and server logs

runway.happyface.studio runs on Railway (Railway Corporation, USA) in its EU region. When you open a page, the server receives what every browser sends: your IP address, the date and time, the page requested (on download pages this includes your order’s ID), the referring page and your browser’s user agent. These request logs are used only to keep the site running and secure, and are deleted when Railway’s log retention ends. Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR). Railway processes this data on our behalf under a data processing agreement; transfers to the USA rely on the EU Standard Contractual Clauses.

No cookies, analytics or third-party content

The site sets no cookies and uses no analytics, ads or tracking pixels. Fonts and images are served from runway.happyface.studio itself, so your browser doesn’t contact Google Fonts or any other third party while you read it.

Buying Runway

The Buy buttons take you to a checkout page run by Stripe. Stripe is the merchant of record: it collects your payment and billing details, calculates and remits taxes, sends your receipt and handles refunds and disputes. Stripe processes this data as its own controller under its privacy policy. We don’t see your card or bank details. From Stripe we receive what we need to provide the download and support: your name, email address, country, the amount and the order ID. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). These order details stay in our Stripe account for as long as statutory retention rules require.

Your download page

After checkout, Stripe sends you to a download page whose address contains your order’s ID. The site uses that ID to ask Stripe whether the order is paid, then gives your browser a link to the disk image that expires after ten minutes. The disk image is stored in Railway’s object storage (in the EU). Apart from the request logs above, nothing about you is stored for this.

Emailing your download link again

If you ask for your download link on the download page, we look up purchases for that email address at Stripe and, if there is one, send the link to that address. The email is delivered by Resend (Resend, Inc., USA) on our behalf under a data processing agreement and the EU Standard Contractual Clauses. We don’t store the address; it’s only held in memory for up to an hour to prevent abuse. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Email support

When you write to support@happyface.studio, we use your message and address to answer you. The mailbox is hosted by Google Workspace (Google Ireland Ltd.). We delete support conversations when they are no longer needed, unless we must keep them by law. Legal basis: Art. 6(1)(b) GDPR for questions about a purchase, otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR).

The Runway app

Runway runs on your Mac. It has no analytics, no crash reporting and no account, and your projects, logs and source code never leave your Mac through Runway. It connects to the internet only in these cases:

• Update check. About once a day, Runway downloads https://runway.happyface.studio/updates.json to see whether there is a newer version. Like any web request this reveals your IP address and Runway’s version (in the user agent) to our host; nothing else is sent. You can turn this off in Runway → Settings → General.
• Apple documentation. When you or an agent uses the documentation tools, Runway fetches pages from developer.apple.com. Apple’s privacy policy applies to those requests.
• Tools you install. “Install with Homebrew” in Settings runs Homebrew, which downloads AXe from GitHub.

AI tools you connect to Runway (such as Claude Code, Codex, Cursor or Claude Desktop) receive the build output, logs and screenshots they ask Runway for, and send them to their own providers under those providers’ terms. Runway itself doesn’t send anything to them.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on our legitimate interests (Art. 15–21 GDPR). Write to support@happyface.studio. You can also complain to a data protection authority, for example the one responsible for us: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany (datenschutz.hessen.de).

Last updated 8 October 2026.