Privacy Policy
Last updated: [EFFECTIVE DATE] · How Crunchytone handles your data.
This Privacy Policy explains what personal information Crunchytone ("Crunchytone", "we", "us") collects, why we collect it, how we use and share it, and the choices you have. Crunchytone is operated by [LEGAL ENTITY / OWNER NAME], based in [JURISDICTION / COUNTRY]. If you have questions, contact us at [privacy@crunchytone.com].
The short version
- We collect the minimum needed to run accounts, deliver downloads and licenses, answer support, and — only if you ask — email you about releases.
- Our plugins do not phone home. There is no telemetry, no analytics inside the software, and no tracking of what you make with it.
- We do not sell your data or share it for advertising.
- You can access, correct, export, or delete your data at any time, and unsubscribe from emails in one click.
Information we collect
Information you give us
- Account details — your name, email address, and a securely hashed password. Optionally a postal address and locale if you provide them (used only for license records and, in future, tax/invoicing).
- Email sign-ups — if you join our list or request a free download by email, we store your email address, where the sign-up came from, and the time. Your address is only added to the list after you confirm it (double opt-in).
- License records — when a license is issued to you, the license file embeds the name, email, and (if provided) address it was issued to.
- Support requests — if you contact support (including from inside a plugin), we receive your name, email, message, your license/serial reference if any, and basic technical context such as the plugin version and your operating system name.
Information collected automatically
- Technical & security data — your IP address and basic request metadata, used to operate the service, prevent abuse, and enforce rate limits. IP addresses associated with sign-ups and administrative actions are retained for security and fraud-prevention purposes.
- Cookies — see "Cookies" below. We use only essential cookies; we do not use advertising or cross-site tracking cookies.
Our plugins run offline. They do not transmit your audio, projects, or usage. A plugin may make an occasional, non-blocking check to our servers for a software-update notice or to validate a license — these send only the plugin version and, if you have a license, the license identifier. They never send personal content and never block your audio.
How we use your information
- To create and manage your account and provide downloads and licenses.
- To send transactional email you need — email confirmation, password resets, license delivery, and support replies.
- To send product news (e.g. a release announcement) — only if you have opted in, and only until you unsubscribe.
- To secure the service, prevent abuse and fraud, and debug problems.
- To comply with legal obligations.
Legal bases (EEA/UK users)
Where the GDPR/UK GDPR applies, we rely on: performance of a contract (running your account, delivering software you request); consent (marketing email — withdrawable any time); legitimate interests (security, abuse prevention, improving the service); and legal obligation where required.
How we share information (service providers)
We do not sell your personal information. We share it only with providers that help us run the service, under contracts that limit their use of it:
- Railway — application hosting and the managed database where accounts and records are stored.
- Cloudflare — DNS, security (DDoS/WAF), and content delivery in front of our site.
- Cloudflare R2 — storage from which plugin downloads are served.
- Resend — delivery of our transactional and product emails.
- [Lemon Squeezy] — (future) our Merchant of Record for any paid purchases. Payment card details are handled by them and never touch our servers.
We may also disclose information if required by law, or to protect the rights, safety, and property of Crunchytone and others. If the business is transferred, information may transfer with it under this policy.
International transfers
Our providers may process data in countries other than yours, including the United States. Where required, transfers are covered by appropriate safeguards (such as Standard Contractual Clauses). [Confirm with counsel and list mechanisms.]
Data retention
We keep account and license data for as long as your account is active or as needed to provide the service and meet legal, tax, and accounting obligations. Email-list entries are kept until you unsubscribe or ask us to delete them. Security logs are kept for a limited period. [Specify concrete retention periods with counsel.]
Your rights & choices
- Access, correction, deletion, export — you can view and update your profile, download a copy of your personal data, and delete your account from your account settings. Deleting your account removes your personal data as described there.
- Unsubscribe — every marketing email includes a one-click unsubscribe link; you can also ask us to remove your address.
- EEA/UK/California residents — you may have additional rights (access, rectification, erasure, restriction, portability, objection, and withdrawal of consent; and, for California, rights under the CCPA/CPRA). We do not "sell" or "share" personal information as those terms are defined under California law.
- To exercise any right, contact [privacy@crunchytone.com]. You also have the right to complain to your local data-protection authority.
Cookies
We use a small number of essential cookies: to keep you signed in, to protect forms against cross-site request forgery, to remember that you confirmed your email for a download, and to apply rate limits. These are required for the site to function. We do not use analytics or advertising cookies. [If analytics are added later, update this section and add consent where required.]
Children
Crunchytone is not directed to children under [16], and we do not knowingly collect their personal information.
Changes to this policy
We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date, and where appropriate we will notify you.
Contact
[LEGAL ENTITY / OWNER NAME], [ADDRESS]. Email: [privacy@crunchytone.com].