Legal

Privacy Policy

Document ID: OM-LEG-005
Version: 1.1
Effective date: 25 September 2026
Supersedes: version 1.0 of 3 September 2026
Website: https://obscured.media

1. About this Privacy Policy

This Privacy Policy explains how Strategic Software Studios Pty Ltd collects, holds, uses and discloses personal information in connection with Obscured Media.

Strategic Software Studios Pty Ltd
ACN: 701 669 285
ABN: 18 701 669 285
Registered office: 44 Sale-Heyfield Rd, Fulham VIC 3851, Australia
Company registration date: 24 August 2026
Contact: support@obscured.media

Obscured Media is a software product and brand developed, managed and sold by Strategic Software Studios Pty Ltd. Obscured Media is not a separate legal entity.

In this Policy, we, us and our mean Strategic Software Studios Pty Ltd. You and your mean the person whose personal information is being handled.

We seek to manage personal information openly and consistently with applicable Australian privacy laws and recognised privacy principles.

2. Scope

This Policy applies to personal information handled through:

the Obscured Media website at https://obscured.media;
product purchases and payment administration;
licence-file generation, delivery, replacement and management;
customer, support and affiliate portals;
support requests, complaints, refunds and chargebacks;
mailing lists and product communications;
optional diagnostics and crash reports;
security and vulnerability reports; and
other direct dealings with Strategic Software Studios Pty Ltd concerning Obscured Media.

This Policy does not apply to files, media or other information that remains solely on your own device or storage and is not disclosed to us.

Third-party providers, including Stripe, may also handle information under their own privacy policies.

3. The local-first design of Obscured Media

Obscured Media is designed around customer-controlled storage.

For ordinary local use, the application does not require us to receive or host:

the contents of your media files;
your local media catalogue;
thumbnails generated from your media;
original or concealed filenames;
detailed folder paths;
tags, ratings or playlists;
local playback history;
your application password; or
your recovery key.

We do not operate a cloud media library for your private collection.

Media streamed directly between your own Obscured Media server and client devices is not intended to be routed through infrastructure operated by Strategic Software Studios Pty Ltd.

Information may be disclosed to us where you deliberately submit it through support, diagnostics, crash reporting or another optional function. This Policy explains how that information is handled.

4. Personal information we may collect

The information we collect depends on how you interact with us.

4.1 Identity and contact information

We may collect:

your name;
email address;
telephone number, where provided;
country or region;
billing or postal address;
organisation or business name; and
communication preferences.

4.2 Purchase and transaction information

We may collect:

order number;
product or edition purchased;
amount, currency, discount and tax information;
payment status;
transaction or payment-provider reference;
purchase, refund and chargeback history;
affiliate or campaign attribution;
billing contact details; and
invoice or receipt information.

We do not intend to store complete payment-card numbers. Payment credentials are handled by Stripe or another payment provider identified at checkout.

4.3 Licence information

We may collect or generate:

a licence identifier;
the licensed edition and entitlements;
issue and expiry dates;
order reference;
licence status;
replacement or revocation history; and
technical information reasonably required to administer the licence, where the product expressly uses that information.

An Obscured Media licence must not be used to collect a list of the media you store.

4.4 Account and portal information

Where an account or portal is offered, we may collect:

login email;
password hash or external authentication record;
account status;
account preferences;
sign-in and security events;
saved support tickets; and
authorised-user or affiliate-account information.

We do not store a Website account password in readable form.

4.5 Support, complaint and remedy information

When you contact us, we may collect:

your correspondence and support history;
the Obscured Media version;
operating-system and device information;
broad storage or network information;
displayed error codes;
the steps that produced the issue;
order and licence references;
screenshots or attachments you choose to provide;
the remedy requested; and
the outcome of the matter.

Do not send us your application password, recovery key or private media files.

Support information can unintentionally reveal sensitive details through filenames, screenshots, folder paths or descriptions. Please remove or obscure information that is not needed for the support request.

4.6 Optional diagnostic and crash information

Where you choose to submit an optional diagnostic bundle or crash report, it may include:

application version and build;
operating-system version;
broad hardware and storage information;
enabled feature and configuration states;
timestamps, performance timings and error codes;
crash-stack or technical event data;
network status relevant to a connection problem; and
a randomly generated technical identifier, where used.

Diagnostic tools should exclude private media content, passwords, recovery keys, full filenames, detailed folder paths, thumbnails, tags, ratings and playback history by default.

Where a diagnostic preview is available, you should review it before submission.

4.7 Website and security information

When you read a page on this Website, our hosting provider’s standard server access logs may record:

IP address;
browser and operating-system information;
date, time and requested page;
referring page; and
security and fraud events.

When you use the shop or customer portal at go.obscured.media, our commerce provider may additionally collect a cookie or similar identifier, a general location inferred from an IP address, and information about how the checkout or portal itself is used.

This Website sets no cookies and runs no analytics, so it collects no interaction or behavioural information at all. Section 11 explains this in full.

4.8 Marketing information

Where you subscribe to marketing, we may collect:

your email address;
the date, method and source of consent;
product interests you provide;
messages sent;
delivery, open or click information where tracking is used; and
unsubscribe and suppression status.

4.9 Affiliate information

If you apply to or participate in an affiliate program, we may collect:

identity and contact details;
website, audience and traffic-source information;
application answers and approval status;
referral links, clicks and conversions;
commission, refund and chargeback information;
payout and tax information;
fraud and compliance review information; and
communications with affiliate support.

5. Sensitive information

We do not seek information about the content of your private media library.

Information about a person’s sexual orientation, sexual practices, health, beliefs or other matters may be sensitive information under Australian privacy law. A support message, screenshot, filename or folder path could reveal this type of information even where that was not intended.

Please do not provide sensitive information unless it is genuinely necessary for the purpose of your request.

Where we receive sensitive information, we will limit its use and disclosure to the purpose for which it was provided, another purpose permitted by law, or a purpose to which you have consented.

6. How we collect information

We may collect personal information:

directly from you when you place an order, submit a form, create an account, request support, upload diagnostics, join a mailing list, apply as an affiliate or otherwise communicate with us;
from Stripe, a bank, payment network or another payment provider;
from an affiliate link, promotional partner or campaign identifier;
automatically through server access logs and security tools, and through cookies set by the shop and customer portal at go.obscured.media (this Website sets none — see section 11);
from publicly available business sources where lawful and reasonably necessary;
from a person or organisation authorised to act for you;
from professional advisers, regulators or dispute-resolution bodies; and
by generating licence, support, security, fraud and account-administration records.

Where practicable, we collect personal information directly from the individual concerned.

7. Anonymity and pseudonymity

You may browse general public Website information without identifying yourself, subject to ordinary technical logs.

You may use a pseudonym for a general enquiry where identification is not reasonably necessary.

We generally require accurate identity or contact information to:

process a purchase;
issue or recover a licence file;
manage an account;
pay an affiliate;
investigate fraud;
provide a refund or other remedy; or
comply with a legal obligation.

8. Why we handle personal information

We may collect, hold, use and disclose personal information to:

process orders, payments, refunds and chargebacks;
issue, replace, validate and administer licence files;
provide downloads, account access and customer support;
diagnose defects, crashes, compatibility problems and security issues;
assess repair, replacement, refund and complaint requests;
prevent fraud, licence abuse, unauthorised access and cybersecurity threats;
operate, secure, maintain and improve the Website and Obscured Media;
administer an affiliate program and calculate commissions;
communicate service, licence, security and product information;
send marketing where permitted;
conduct accounting, audit, tax, insurance and business administration;
establish, exercise or defend legal claims;
comply with law, court orders and lawful regulatory requests;
investigate suspected misconduct; and
support a genuine business sale, restructure or due-diligence process subject to appropriate safeguards.

We may use de-identified or aggregated information for product improvement, reliability analysis, security analysis and business planning where individuals are not reasonably identifiable.

We do not sell personal information as a standalone product.

We do not use information about the contents of a private media library for advertising.

9. What happens if you do not provide information

You do not have to provide personal information, but we may be unable to complete a purchase, issue a licence, verify an account, pay an affiliate, investigate fraud or provide effective support without information reasonably required for that purpose.

Optional diagnostic information is not required. A decision not to provide diagnostics may limit our ability to reproduce a technical problem, but we will consider less intrusive evidence and will not use diagnostics to unreasonably delay a consumer remedy.

10. Payment processing

Stripe is the intended payment provider for purchases made through the Website.

Stripe may collect and process payment credentials, billing information, transaction details, IP address, device information and fraud-prevention information under its own terms and privacy policy.

We generally receive only the information needed to:

confirm a payment;
issue a receipt;
generate and deliver a licence;
process a refund;
manage an authorised recurring payment;
reconcile accounts;
prevent fraud; and
respond to a payment dispute or chargeback.

We do not place private media information, application passwords or recovery keys in payment metadata.

11. Cookies, analytics and referral tracking

11.1 This Website sets no cookies

The Website at obscured.media sets no cookies of any kind, essential or otherwise. It runs no analytics, no tag manager and no tracking pixels. It loads no third-party scripts, fonts, embedded video or chat widgets, so no other company receives a request when you read a page here. It writes nothing to your browser’s local storage, session storage or IndexedDB.

There is no consent banner and no cookie-preference centre on this Website, because there is no non-essential technology to consent to and nothing for you to switch off. You do not have to take our word for this: open your browser’s developer tools on any page of this Website and inspect the storage and network tabs.

11.2 Server logs

Our hosting provider records standard server access logs, as every web server does. A log entry may include an IP address, the page requested, a timestamp and a browser user-agent string. We do not use these logs for analytics, profiling, advertising or marketing, we do not join them to any other record we hold about you, and we do not use them to build a picture of an individual visitor.

11.3 The shop and customer portal do use cookies

The shop and customer portal at go.obscured.media run on separate infrastructure operated by our commerce provider, and they do set cookies. Those cookies are necessary for checkout, account sessions, security and fraud prevention, and affiliate attribution. Blocking them may prevent checkout or account access from working. That infrastructure is the one part of a purchase journey where you will meet a cookie, and it is disclosed at the point you reach it.

11.4 Affiliate referral attribution

An affiliate referral is attributed at go.obscured.media, using a referral parameter and a first-party cookie set on that domain, or a promotional code entered at checkout. Referral tracking records the referral relationship and the fact of a qualifying purchase. It does not record, transmit or reveal the contents of your media library to an affiliate or to us.

11.5 If this ever changes

If we introduce analytics or any other non-essential technology on this Website, we will update this section and our public statement about cookies before doing so, and we will meet any consent requirement that then applies.

12. Direct marketing

We may send product news, educational material or offers where we have the consent or other lawful basis required.

Commercial electronic messages will:

identify Strategic Software Studios Pty Ltd as the sender;
provide accurate contact information;
contain a clear and functional unsubscribe method;
keep the unsubscribe facility functional for the required period;
not require payment or account creation to unsubscribe; and
action an unsubscribe request within five working days.

You may unsubscribe using the link in a message or by contacting support@obscured.media.

We maintain a minimal suppression record to prevent an unsubscribed address from being unintentionally re-added.

A one-off purchase or support enquiry is not automatically treated as consent to receive unrelated ongoing marketing.

Service messages concerning an order, licence, security issue, support case, critical update or material policy change may still be sent where permitted.

13. Automated processing

Computer systems may automatically:

create and digitally sign a licence file following a successful payment;
send order, licence, expiry and support communications;
identify suspicious sign-in or transaction activity;
assist with spam, malware or fraud screening; and
classify technical errors or support requests.

We do not currently use automated decision-making that is intended to make a decision significantly affecting a person’s rights or interests without appropriate review.

Stripe and other providers may use their own automated fraud and security systems under their privacy terms.

14. Disclosure to service providers and others

We may disclose personal information to providers that help us operate the business, including:

payment and fraud-prevention providers;
Website hosting, content-delivery and security providers;
email delivery and communication providers;
customer-support and ticketing providers;
error-monitoring providers for our own software;
licence-generation, code-signing and software-distribution providers;
affiliate-tracking and payout providers;
accounting, tax, insurance and professional advisers;
contractors who require limited access to perform authorised work;
regulators, courts, law-enforcement bodies and dispute-resolution bodies where required or authorised; and
a prospective buyer or successor in a genuine business transaction, subject to appropriate confidentiality and privacy safeguards.

We require service providers to handle information only for authorised purposes and with security appropriate to the service, subject to their legal obligations and our contractual arrangements.

We do not disclose a customer’s private media library to an affiliate.

15. Overseas handling

Some service providers use global infrastructure or operate outside Australia. Personal information may therefore be disclosed to or processed by recipients in the United States and other countries or regions in which our payment, hosting, email, security, support or software-distribution providers operate.

The particular countries can vary as providers and their infrastructure change. Where it is practicable, further information about likely overseas locations will be provided in an applicable collection notice or on request.

Before disclosing personal information overseas, we take reasonable steps required by applicable law, which may include provider due diligence, contractual safeguards, security review and limiting the information disclosed.

Overseas recipients may be subject to foreign laws requiring access to information.

16. How we hold and protect personal information

Personal information may be held in business systems operated by us or by contracted service providers.

We take reasonable steps appropriate to the nature and sensitivity of the information to protect it from misuse, interference, loss and unauthorised access, modification or disclosure.

Measures may include:

encrypted connections;
restricted staff and contractor access;
multi-factor authentication for administrative systems;
password hashing;
least-privilege permissions;
logging and monitoring;
secure development and dependency management;
backups of essential business records;
incident-response procedures;
contractual controls for providers; and
deletion or de-identification when information is no longer required.

No method of internet transmission or electronic storage is completely secure. This statement does not reduce our obligation to take reasonable security measures.

Local encryption of your own media does not protect personal information that you separately submit to our Website, payment provider or support service.

17. Retention and deletion

We retain personal information only for as long as reasonably necessary for:

the purpose for which it was collected;
a related lawful purpose;
licence and support administration;
fraud prevention;
dispute and complaint management;
security investigation; or
accounting, tax and other legal recordkeeping obligations.

Transaction, tax and accounting records may be kept for the legally required period.

Support records and diagnostic material are retained only for as long as reasonably needed to resolve the matter, improve the product, manage a dispute or meet a legal obligation.

Marketing information is retained while you remain subscribed. A minimal suppression record may be retained after unsubscribe so that your preference continues to be honoured.

When personal information is no longer required, we take reasonable steps to delete or de-identify it, unless retention is required or authorised by law.

Residual copies may remain in protected backups until those backups are overwritten through the ordinary backup cycle.

18. Access and correction

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

Send your request to support@obscured.media.

We may request reasonable evidence to verify your identity before disclosing or changing information. We will not request more information than is reasonably necessary.

We will respond within a reasonable period.

There is no charge for making a request. Where the law permits a reasonable charge for providing access, we will explain the charge before proceeding.

If access or correction is refused where refusal is permitted by law, we will ordinarily provide written reasons and explain available complaint options.

19. Privacy complaints

You may make a privacy complaint by emailing support@obscured.media.

Please include:

your name and preferred contact details;
a description of the privacy concern;
when the relevant event occurred;
any relevant order, account or support reference; and
the outcome you are seeking.

We will acknowledge the complaint, investigate it and respond within a reasonable period.

Where the Privacy Act 1988 applies and you remain dissatisfied, you may be able to complain to the Office of the Australian Information Commissioner. Other legal or regulatory options may also be available.

20. Data breaches

We maintain a process to identify, contain, assess and respond to suspected data breaches.

Where the Privacy Act and Notifiable Data Breaches scheme apply, we will assess whether a breach is likely to result in serious harm and will notify affected individuals and the Office of the Australian Information Commissioner where required.

We may also notify affected people where doing so is reasonably necessary to reduce harm, even if formal notification is not legally required.

A breach of a Website or business system does not necessarily mean that media stored locally on your own device was accessed. Any notice will describe the information and systems actually affected as accurately as reasonably possible.

21. Children

The Website, checkout and affiliate program are not directed to children under 18.

We do not knowingly seek to collect personal information from children through checkout or affiliate registration.

A customer may configure family-access functions within the locally installed software. Information that remains solely within the local application is not information we hold.

Please contact support@obscured.media if you believe a child has provided personal information to us without appropriate authority.

22. Third-party links and services

Our Website may link to third-party websites and services. Those third parties may collect personal information under their own privacy policies.

We are not responsible for the privacy practices of an independent third party, but we remain responsible for our own disclosures and legal obligations.

You should review the privacy policy of a third-party service before providing personal information to it.

23. Changes to this Policy

We may update this Policy when our product, service providers, legal obligations or information-handling practices change.

The current version and effective date will be published on the Website.

Where a change is material, we will take reasonable steps to notify affected people through the Website, email, application or another appropriate channel.

We will not retrospectively use personal information for a materially different purpose without the consent or other legal basis required.

24. Contact us

For privacy enquiries, access or correction requests, complaints and general support, contact: