Legal
Privacy Policy
Last updated: 5 October 2026
This is a courtesy translation of the Italian original. If they differ, the Italian version prevails.
In brief
- Alert videos are kept for 7 days, then they are deleted automatically.
- Motion is detected by the program on your farm's computer, which on the Pro plan can also tell whether it is a person, a vehicle or an animal. We do not recognise faces and we do not know who the people filmed are.
- Camera passwords stay on your computer: our servers do not keep them.
- The live view on the phone (Pro plan) passes through our server only while someone is watching it, and it is not recorded.
- Our servers are in Germany. No advertising, no analytics, no data sold.
- For the images from your cameras, you are the controller: we process them on your behalf.
1. Who we are
Attento! is a service of Cobalt Studio LLC, a United States company (“we”). For anything to do with privacy, write to help@cobaltstudio.app.
This policy (Articles 13 and 14 of Regulation (EU) 2016/679, the “GDPR”) applies to the attento.online website, to the Attento! app on the phone and in the browser, and to the Attento! program for the computer.
2. Two different roles
- Your account data (who you are, how you sign in, what you pay, how you use Attento!) is processed by us, as the controller.
- The images from your cameras (alert videos, photos, live view) and what they show, including the people filmed: you are the one who decides where to put the cameras and what they film, so the controller is you, that is, your business. We process them on your behalf, as the processor (Art. 28 of the GDPR), in accordance with section 10 of the Terms.
If you have been filmed by the cameras of a business that uses Attento!, contact that business about your rights. If you write to us, we forward the request to the business and help it reply to you.
3. What data we process
Your account
- You sign in with Google: we keep your Google account ID, your email address and your name. We do not take your profile photo or any other data from Google.
- Your plan (Free or Pro), how many extra cameras you have and, if your plan does not cover all of them, which cameras you have chosen to use.
- If we give you Pro as a gift: your email address, the length of the gift, when it starts and when it ends, and our note on why (for example, a promotion). If you do not have an account yet, we use your email address only to start the gift when you sign in for the first time.
- The app's language and the farm's time zone. When you create your account we take them from your phone's settings; you change them from “Settings” → “Language and time zone”. We use them to write to you in your language and for the times of the alarm, of the alerts and of “Search”.
The alarm and the farm's location
- The state of the alarm (“Watch”, “At the farm”, “Off”, “Pause”) and the hours you choose.
- The farm's location, only if you give it yourself from your phone with “Use this phone's position”. We round it to about one kilometre and we use it only to calculate sunset and sunrise for the “At night” schedule. If you do not give it, we use the city of the farm's time zone (for Italy, Rome).
- “What alerts you”: what you want the phone to ring for (people, vehicles, wild animals, farm animals…), for the whole farm or for one zone.
The computer and the cameras
- For the computer where you install the Attento! program: the computer's name, the operating system and when it last connected.
- For the cameras you add: name, brand, model, address on the farm's network (IP and MAC), whether they are working, and the zones you draw. For the cameras the program finds on the network, even if you do not add them: brand, model, name and network address. We keep the camera's video address encrypted.
- To find the cameras, the program checks your farm's network every minute. It sends us only the data of devices that respond as cameras, never that of other devices (phones, computers, televisions).
- Camera passwords stay on your computer (on a Mac in the Keychain, on Windows protected by the system). Our servers do not keep them: if a camera writes one into its own video address, we remove it before saving the address.
Images
- Alerts. When something moves in a zone you have drawn, the computer sends us a short video (from about 3 seconds before to 5 seconds after the motion, without audio). From the video we take a photo for the notification and for the alert history.
- On your computer. To have the seconds before the motion as well, the program keeps about the last 30 seconds of video from each camera on the computer, and continuously overwrites them. It does not send them to us.
- Even with the alarm off. With “Off”, “At the farm” or “Pause” the phone does not ring, but the motion and its video are saved anyway: you will find them in the history, marked “kept quiet”.
- Photos. While the app is open, it asks for up-to-date photos from the cameras, and a new one when you ask for it. We keep only the latest photo from each camera.
- Live view. The video passes through our server only while someone is watching it, for at most about 10 minutes in a row, and it is not saved.
- Test. The “Test” button records a short video, like an alert.
- How we detect motion. It is detected by the program on your computer, within the zones you have drawn. We do not recognise faces and we do not know who the people filmed are.
- Person, vehicle or animal. On the Pro plan, where “What alerts you” is active, the program on your computer looks at a few frames of the video of each movement and recognises by itself whether there is a person, a vehicle or an animal. It sends us what it has recognised, where (a box on the photo), how confident it is and how long the motion lasted, together with the photo of that moment, which becomes the alert photo. If it is an animal, it also sends us the animal cropped from the photo: our server uses it only to tell what animal it is (for example, a wild boar) and does not keep it. With these answers and with your choices in “What alerts you”, we decide whether the phone rings. Recognition only says “person”: it does not recognise faces and does not say who it is. It takes place on your computer and on our server in Germany: the images go to no one else, and we send nothing to whoever made the recognition programs.
- The “Control room” on the computer takes the images directly from the cameras on the farm's network and keeps on the computer a copy of the latest alerts and of the alarm settings (including the farm's location), to show them straight away.
Notifications
- To send you notifications, we keep the delivery address that the browser on your phone or computer gives us, and the type of browser and device.
- The notification gives the camera's name and may show a photo from the alert.
Payments
- Payments are handled by Stripe. Only Stripe sees your card details, not us.
- We keep your Stripe customer ID and the status of your subscription. We give Stripe your email address and your Attento! account ID.
Technical data
- Our server logs the requests it receives: IP address, page or function requested, date and time, browser type. It does not log passwords or the content of videos.
Support
- The emails you send to support (help@cobaltstudio.app) and our replies.
4. Why we process it and on what basis
| Why | Legal basis (GDPR) |
|---|---|
| Letting you use Attento!: account, cameras, alerts, live view, notifications, alarm, “Control room” | Contract (Art. 6(1)(b)) |
| Managing subscriptions and payments | Contract (point (b)) |
| Giving you Pro as a gift, when we do so (for example, in a promotion) | Contract (point (b)); if you do not have an account yet, our legitimate interest in getting the gift to you (point (f)) |
| Keeping accounting and tax records | Legal obligation (point (c)) |
| Protecting the service, you and other customers: security, prevention of abuse and fraud, fixing faults (technical logs) | Our legitimate interest (point (f)) |
| Replying to you when you write to us | Contract; if you are not a customer, our legitimate interest in replying to you (point (f)) |
| Telling you about problems and about changes to the service or to the Terms | Contract (point (b)) |
| Defending our rights in the event of disputes | Our legitimate interest (point (f)) |
We do not use your data for advertising, we do not carry out profiling and we do not take automated decisions that concern you. We do not sell data to anyone.
Account data is needed to use Attento!: without it, we cannot provide you with the service. The farm's location is optional. You can object to processing based on our legitimate interest (section 9).
5. For how long
| Data | How long we keep it |
|---|---|
| Alert videos and photos | 7 days, then we delete them automatically. The alert stays in the history, without the video. |
| Alerts (with what the program has recognised), cameras and zones | Until you delete the camera or the account. If you delete a camera, we immediately delete its alerts with their videos and its latest photo. |
| The animal cropped from the photo | We do not keep it: it is only used to tell what animal it is. |
| Latest photo from each camera | As long as the camera is there: each new photo replaces the previous one. |
| Live view | We do not save it: the pieces of video in memory disappear within one minute of it ending. |
| Account, alarm, notifications, linked computers, cameras found on the network | As long as you have the account. |
| Pro as a gift | As long as you have the account. If you do not have an account yet and do not sign in within 6 months, we delete the gift and your email address. |
| Commands to the home computer (photos, “Test”, live view) | 7 days. |
| Technical server logs | 14 days. |
| Backups (one per night) | 14 days, then they are deleted automatically. |
| Accounting and tax data | For as long as the law requires. |
| Emails to support | As long as they are needed for your request and for any disputes. |
When you close your account, we delete your data within 30 days, except for data the law obliges us to keep; it disappears from the backups within a further 14 days. Stripe and Google keep their data according to their privacy policies.
6. Who receives it
We do not sell or hand over your data. It is received only by the providers we need to make Attento! work, each for its own part:
| Who | What for |
|---|---|
| Hetzner Online GmbH | Our servers and backups, in Germany (Nuremberg). |
| Stripe | Payments and subscriptions. For card details and for fighting fraud, Stripe decides for itself, as an independent controller (Stripe's privacy policy). |
| Sign-in with Google (for your Google account, Google decides: Google's privacy policy) and the Gmail mailbox where emails to support arrive. | |
| Apple, Google, Mozilla | They deliver notifications to your phone or browser. The content of the notification travels encrypted. |
| Namecheap | It forwards emails sent to support (help@cobaltstudio.app). |
| Anthropic | We use its assistant Claude to develop and manage the service: when it works on the servers, it can see technical data and account data. It does not look at the images from customers' cameras. |
| xAI | We use its assistant Grok for the technical review of the service, with read-only access to the servers: it can see technical data and account data. It does not look at the images from customers' cameras. |
The data may also be received by the authorities, when the law requires it of us, and by our advisers (for example, legal and tax advisers), who are bound by confidentiality.
7. Data outside the European Union
Our servers are in Germany. Our company is based in the United States, and some providers (Stripe, Google, Apple, Mozilla, Namecheap, Anthropic, xAI) are based in, or have servers in, the United States or other countries outside the European Union. In these cases, data is transferred with the safeguards provided for by the GDPR: the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, for providers that participate in it, or the standard contractual clauses approved by the Commission. You can ask us for a copy of the safeguards by writing to help@cobaltstudio.app.
8. Security
- Connections between the app, the program on the computer and our servers are encrypted (HTTPS).
- Camera passwords stay on your computer.
- Links to videos, photos and the live view are signed and expire.
- The servers can only be accessed with cryptographic keys, not with passwords. We make a backup every night.
No system is one hundred per cent secure. If a data breach occurs that may put you at risk, we will tell you and we will tell the Italian Data Protection Authority (Garante per la protezione dei dati personali), as the law requires.
9. Your rights
You can ask us at any time to:
- see your data and get a copy of it (access, Art. 15 of the GDPR);
- correct it (rectification, Art. 16);
- delete it (Art. 17), for example by closing your account;
- restrict its use (Art. 18);
- receive it in a machine-readable format, to take it elsewhere (portability, Art. 20);
- stop using it for our legitimate interest (objection, Art. 21).
Write to help@cobaltstudio.app from your account's email address; if you write from a different one, we may ask you to prove that the account is yours. We will reply within one month; if the request is complex, we may take a further two months, and we will tell you so.
Closing your account. Write to help@cobaltstudio.app from your account's email address: we close the account, cancel the subscription and delete the data as described in section 5. On the phone, “Sign out” removes access and stops notifications on that phone. You remove the program from the computer by uninstalling it.
If you think we are processing your data improperly, you can lodge a complaint with the Italian Data Protection Authority or with the supervisory authority of the European Union country where you live or work.
10. Minors
Attento! is for adults and businesses. It is not intended for anyone under 18.
11. Cookies
We do not use advertising, profiling or analytics cookies. The details are on the Cookies page.
12. Changes
If we change this policy, we update the date at the top. If the changes are significant, we will tell you beforehand, by email or in the app.