Privacy policy

This notice describes how ON INTERNATIONAL BUSINESS LLC, trading as OnModelStudios, collects and uses personal information when you visit onmodelstudios.com or send us an application. If anything here is unclear, or you want something removed, write to management@on-studios.com and a person will answer.

Who is responsible

ON INTERNATIONAL BUSINESS LLC
2880 W Oakland Park Blvd, Suite 225C
Oakland Park, FL 33311
United States
Email: management@on-studios.com

We are the controller of the data described below. We have not appointed a data protection officer; enquiries go to the address above and are handled by us directly.

1. What we collect

When you apply, or use a form on this site

The application form asks for the information we need to look at your account and get back to you. Depending on the form, that is:

• your name;
• a WhatsApp or Telegram number, or another contact you give us;
• your Instagram or platform handle;
• optionally, the revenue range you select;
• optionally, how much time per week you have for content;
• anything you write in a free-text field;
• the page you applied from, and any campaign parameters (utm_source and similar) that were in the link you arrived through.

We do not ask for, and do not want, special-category data — health, sexual orientation, political or religious views, biometric data. Please do not put such information into the free-text field.

When you simply read the site

Every page view is recorded so we can see which pages are used. We store: the path you viewed, the referring website if you came from one, a two-letter country code derived by our hosting provider, and a per-day visitor code described in the next section.

We do not store your IP address and we do not store your full user agent. Requests that identify themselves as bots are discarded before anything is written.

2. Cookies and browser storage

We set no cookies for analytics or advertising. There is no cookie banner on this site because there is nothing to ask you about.

Since 9 October 2026 we load one third-party script, Microsoft Clarity, to see how pages and the application form are used (where people scroll, click or stop). We run it in its cookieless mode: we tell Clarity that storage consent is denied, so it sets no cookies and cannot link one page view to the next. Text you type into forms is masked before anything leaves your browser. Clarity is not loaded if you have switched tracking off on /no-track, and it never runs on our internal pages. See section 4 for the provider details.

How we count visitors without a cookie

Instead of storing an identifier in your browser, we derive a code on our server from your IP address, your browser’s user-agent string and a secret that changes every day. Only that code is stored; the IP address is used for the length of a single request and never written down. Because the secret rotates at midnight, two visits on different days cannot be linked to the same person by anyone, including us. It lets us count how many people visited on a given day, and nothing more.

Until 2 September 2026 we used a first-party cookie called oms_vid for this. It has been removed, and any copy still sitting in your browser is no longer read by us. You can delete it like any other cookie.

Campaign links

If you arrive through a link carrying campaign parameters (utm_source and similar), those parameters are read from the address bar and, while you stay on the site, appended to the links you click so that an application can be attributed to the campaign it came from. The same parameters are also stored with the anonymous visit record of the page you land on, so we can count which campaigns bring visitors; that record carries no identifier that could be linked back to you. Nothing is written to your browser to do this.

One thing we do keep in your browser

If you close the small notice telling you a German version of a page exists, we record that single fact in your browser’s session storage so it does not reappear on every page. It is set only when you click the close button, contains no identifier, is never sent to us, and disappears when you close the tab. Logging in to the admin area also sets a session cookie, which only staff ever see.

No advertising pixel

This site carried the Meta (Facebook) pixel until 2 September 2026. It has been removed. If we ever add advertising measurement back, it will run only after you have agreed to it, and this page will say so before it does.

3. Why we use it, and on what legal basis

For readers in the EU, the UK and Switzerland, the legal bases under the GDPR are:

• To answer your application — Art. 6(1)(b): steps taken at your request before entering into a contract. Without a name and a way to reach you we cannot reply.
• To run and improve the website — Art. 6(1)(f), our legitimate interest in knowing which pages are used. We keep this narrow deliberately: no stored IP addresses, no profiles, and no way to follow anyone from one day to the next. Because nothing is stored on or read from your device for this, no consent under § 25 TDDDG is required for it.
• To meet legal obligations — Art. 6(1)(c), where the law requires us to keep or produce records.

4. Who else sees it

We do not sell personal information and we do not share it for anyone else’s marketing. These providers process data on our behalf so the site can work:

• Netlify (United States) — hosting and content delivery. Serves every page and supplies the country code described above.
• Turso — the database that stores applications and page-view records.
• Telegram — we receive a notification containing the application when one arrives, so that a person sees it quickly.
• Microsoft Clarity (Microsoft Corporation, United States) — session recordings and heatmaps in cookieless mode, with form input masked. Microsoft processes this data on our behalf; its handling is described in the Microsoft Privacy Statement.
• Netlify also terminates the connection, so it necessarily sees your IP address in order to serve the page at all. We do not receive or keep it.

Beyond these, we may disclose information if the law requires it, or in connection with a sale or reorganisation of the business.

5. Where your data goes

We are a US company and our providers are largely US-based, so personal data is processed in the United States. For transfers out of the EEA, the UK or Switzerland we rely on the European Commission’s standard contractual clauses and, where applicable, the EU–US Data Privacy Framework. You can ask us for details of the safeguards in place.

6. How long we keep it

Applications are kept for as long as there is a realistic prospect of working together, and in any case no longer than three years after the last contact, unless we are legally required to keep them longer. Page-view records are kept for up to 24 months. You can ask us to delete your application sooner and we will.

7. Your rights

Depending on where you live you have some or all of the following rights: to know what we hold about you and get a copy; to have it corrected; to have it deleted; to restrict or object to how we use it; and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time, which does not affect what we did before.

To use any of these rights, write to management@on-studios.com. We answer within one month. You do not need a form or a particular wording — a plain email is enough.

If you are in the EEA or the UK and you think we are handling your data unlawfully, you can also complain to your national data protection authority. In Switzerland, that is the Federal Data Protection and Information Commissioner.

If you are in the United States

Residents of certain states have rights to know, delete, correct and opt out of the sale or sharing of personal information. We do not sell or share personal information as those laws define it, and have not done so in the past twelve months. To exercise any right, use the email address above.

8. Security

The site is served over HTTPS, the staff login cookie is HttpOnly and Secure, and access to the applications database is restricted to the people who need it. No system is perfectly secure, and we will not pretend otherwise: if a breach affected your data and the law requires it, we will tell you.

9. Age

This site and our services are for adults. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has sent us information, tell us and we will delete it.

10. Do Not Track

There is still no agreed standard for what a browser’s Do Not Track signal should mean, so we do not act on it. Global Privacy Control signals are honoured where the law requires.

11. Changes

When what we do changes, this page changes with it, and the date below moves. If a change materially affects you we will say so on the site rather than quietly editing the text.

12. Contact

ON INTERNATIONAL BUSINESS LLC
2880 W Oakland Park Blvd, Suite 225C
Oakland Park, FL 33311
United States
Email: management@on-studios.com