Privacy Policy

Email address - order confirmation, license delivery, and download links

Name - order processing and invoicing

Payment information - processed securely by Mollie - never stored on our servers

Processing and fulfilling orders - performance of our contract with you, Art. 6(1)(b) GDPR

Sending order confirmations and invoices - performance of our contract with you, Art. 6(1)(b) GDPR

Delivering license keys and download links - performance of our contract with you, Art. 6(1)(b) GDPR

Providing customer support for your purchases - performance of our contract with you, Art. 6(1)(b) GDPR

Keeping invoices for the legally required period - our legal obligation under German tax law, Art. 6(1)(c) GDPR

What we store - your email address, the date and time you signed up, the exact consent wording you ticked together with its version number, and whether you signed up through the popup or the newsletter page.

What we use it for - our own product emails - new plugin releases, updates, and the occasional offer. We never pass your address on, we never sell it, and we do not profile you. Our emails contain no tracking pixels and no external images.

Legal basis - your consent, Art. 6(1)(a) GDPR. We store the wording you agreed to so that we can show what you consented to, as Art. 7(1) GDPR requires of us.

How we record your consent - the moment you tick the box and submit the form, we store your email address together with the exact wording you agreed to, its version number, and the date and time - that record is the evidence of your consent. We do not send a confirmation email or ask for a second step; the subscription is active as soon as you sign up.

Withdrawing your consent - every email we send has an unsubscribe link - one click, no login, no reason needed. You can also simply write to info@insect-audio.com. Withdrawal takes effect for the future; it does not undo emails already sent.

How long we keep it - a subscription for as long as you stay subscribed. After you unsubscribe we keep your address, the consent wording and the timestamps for three more years and then delete them: that way, if anyone ever questions whether our emails were wanted, we can still show what was agreed to and when.

Who else sees it - Resend, our email provider, processes your address on our behalf to deliver these emails. Nobody else.

The signup popup - if you close the popup or finish signing up, we store one entry in your browser's local storage (named insect-audio-newsletter-dismissed, holding nothing but the date) so that it does not ask you again. It is not a cookie, it is never sent to us, and clearing your browser data removes it.

How it works - you sign in with your email address only - no password. We email you a one-time link; clicking it signs you in. The link works once and expires after 15 minutes.

What we store - your email address, a one-way cryptographic hash of the current login link (never the link itself), when you last signed in, and - once you have bought or redeemed a plugin - your serial numbers and which order they belong to.

How an account is created - either by completing a purchase or a promo redemption, or by entering your email on the account page yourself. Either way, no password is ever set or stored.

What we use it for - letting you see your past orders, serial numbers and download links yourself, without contacting us, even after the download link originally emailed to you has expired.

Legal basis - performance of a contract, Art. 6(1)(b) GDPR, for account holders who bought something; our legitimate interest in offering a self-service account, Art. 6(1)(f) GDPR, for everyone else.

Deleting your account - use the “Delete account” button on the account page at any time. This removes your account and login history. Your past orders remain on record as receipts, as required by law (see Data Retention below), but are no longer reachable through an account.

Who else sees it - nobody. Account data is not shared with any third party.

Shopping cart (local storage) - remembers items in your cart during your visit

Currency choice (local storage) - remembers which currency you browse in

Newsletter popup dismissed (local storage) - remembers that you closed the signup popup, so we do not show it again - see Newsletter above

Customer session (cookie) - keeps you signed in to your account

Site password (cookie) - on password-protected pages before launch, remembers that you entered it

Mollie test mode (cookie) - lets Alex or Max run a test purchase without using the live payment key - never set for ordinary visitors

Admin login (cookie) - keeps Alex or Max signed in to the admin panel

Mollie - payment processing, Art. 6(1)(b) GDPR. Your card details go directly to Mollie and are never on our servers. Privacy policy ↗

Resend - email delivery - order confirmations, license keys, download links, and the newsletter - Art. 6(1)(b) GDPR for order mail, Art. 6(1)(a) GDPR for the newsletter. Resend is a US provider; sending your email address to them is a transfer outside the EU. Privacy policy ↗

Hetzner Object Storage - hosts plugin download files, Art. 6(1)(b) GDPR. Links are signed and expire automatically.

Hosting - our server, including the database with orders, customer accounts, serial numbers and server logs, runs on a Hetzner server managed through Coolify, Art. 6(1)(b) GDPR for order and account data and Art. 6(1)(f) GDPR for server logs.

Umami Analytics - page-view analytics, self-hosted by us, without cookies. It briefly processes your IP address to compute a hash from it, but does not store the address itself. Legal basis: our legitimate interest in understanding site usage, Art. 6(1)(f) GDPR. Privacy policy ↗

Access - request a copy of the data we hold about you

Rectification - request correction of inaccurate data

Erasure - request deletion of your data (subject to legal retention requirements)

Restriction - request that we limit how we process your data

Portability - receive your data in a machine-readable format

Objection - object to certain types of processing

Complaint - lodge a complaint with a data protection supervisory authority, in particular in the German state where you live, work, or believe your rights have been violated