What you install, who makes it, and where your work goes.
Everything a careful buyer, enterprise IT administrator, Windows security check, or Google/Meta ad reviewer asks about Scena Studio — verified publisher identity, network endpoints, SHA-256 build integrity, and local-first privacy architecture.
Checksums for every build Read the privacy policyWho makes it
“I make animated episodes, and I built this because shot 46 kept breaking. Every page on this site is written by me, and every email to the address below is answered by me. If something here is unclear, that is a bug too.”
Alex MercerMaker of Scena Studio
How Scena Studio meets Google’s software principles
Google’s Unwanted Software Policy is the bar Chrome and Safe Browsing use for anything you download. Here is each principle, what the app does about it, and whether it is done.
Where your work goes
Release 1.1.0 MD5 & SHA-256 Checksums + Multi-Engine VirusTotal Audit
SHA-256: 92bb0dbbb532e5fe45b5e194cc3be9479b119519e6eb5deb8131822eafed0b69
MSI MD5: 8f8434c70fc05e72c6192eb2b49e6913 · SHA-256: c60e074ba9796d9e0931c8fb87bf7029e75593789671db685a8b4983f49adc27
Exact addresses, for firewalls and IT
Allow these and the app works; block them and nothing else breaks on your PC. Every connection uses HTTPS on port 443, and the app opens no ports of its own.
| Address | What for | When |
|---|---|---|
| auth.scenastudio.app | Sign-in and licence check | When the app opens |
| updates.scenastudio.app | Update check and downloads | On launch, and when you accept an update |
| reports.scenastudio.app | Bug reports | Only when you press Send |
| The API address of each AI service you use | The shots queued on that service | While a queue runs; listed per service in Tools › API services |
How updates arrive
- Offered, never forcedThe app shows what changed and waits. A project mid-episode can stay on its build.
- Checked before it runsThe update downloads over HTTPS and its SHA-256 must match the published list before the installer starts.
- Signature checked, once signing is liveA file whose hash or signature does not match is deleted, not run.
- Older builds stay availableEvery earlier build stays on the download page with its own hash.
Report a security problem
- Where to writesecurity@scenastudio.app, also listed at scenastudio.app/.well-known/security.txt. Include the build number and the steps.
- When you hear backA reply within 3 working days, and for anything serious a fixed build or a public note within 30 days.
- Testing in good faith is welcomeTest on your own install and account. Do not access other people’s data or disrupt the service.
- CreditReporters are thanked by name in the changelog, if they want to be.
Security
Your data, your choices
AI governance, biometric privacy, and advertising compliance
How Scena Studio protects character reference data, enforces synthetic media safety standards, and complies with Google Ads, Meta, EU AI Act, GDPR, and CCPA.
Character face matching, outfit continuity scoring, and reference locks execute 100% locally on your Windows GPU via ONNX Runtime. Scena Studio never extracts, uploads, or stores biometric facial geometry or voiceprints on its servers (Privacy Policy §06).
We never train AI models on your scripts, prompts, voice audio, or video episodes. You retain 100% commercial ownership of all episodes produced on your PC, including full monetization rights on YouTube, TikTok, and client work (Terms of Use §09).
Our Acceptable Use Policy strictly prohibits CSAM/CSAE, non-consensual deepfakes (NCII), and unauthorized biometric cloning, and requires compliance with YouTube/TikTok synthetic media labels and EU AI Act Art. 50 (Terms of Use §07–§08).
Website ad/analytics tags default to denied under Google Consent Mode v2 and honor Sec-GPC: 1 (Cookie Policy §03). All paid plans include a 0% BYOK API markup and an unconditional 14-day money-back guarantee (Refund Policy §07).
