PRIVACY

Data controller

Data collected

When you buy: e-mail address, name, country and payment details, entered on Stripe’s payment page, and, if you give it, your artist name, printed on your licence agreements. The seller receives the e-mail, name, country, artist name and order details; never card data. Stripe issues and keeps the invoice.

Newsletter: your e-mail address, language and sign-up date, the discount code sent to you and the VSTs whose release you are waiting for.

Customer account: your e-mail address, language, creation and last-visit dates, the purchases made with that address (to download them again, show what you own and compute your tier), your favourites and, if you answer, how you found the site. You sign in with a link sent by e-mail, without a password, with a Cloudflare anti-bot check (Turnstile).

On the site: the cart, favourites (before sign-in), volume setting and account tier are kept in your browser (local storage), and your account sign-in by a session cookie (30 days), only for the site to work. The site’s font and scripts are served by the site itself. No advertising cookies.

Audience measurement, only if you accept it in the banner: Microsoft Clarity (pages viewed, clicks, scrolling, journeys and, for Clarity, session recordings with input fields masked). For a signed-in member, these tools link the visit to a fingerprint of the account, never to the address. Your choice is kept for 6 months and can be changed at any time with the “cookies” link at the bottom of the page.

Plays, cart and share links: what is played (how long, how far), added to the cart or paid for, and the link the visit came from, counted by the site itself, without cookies or anything that identifies you (country, device type, and a fingerprint that changes every day, no IP address). If you are signed in to your account and have accepted audience measurement in the banner, your plays, cart and started payments are linked to your e-mail address, to better understand what you like and to be able to follow up on an interrupted payment. Refusing audience measurement (“cookies” link at the bottom of the page) or deleting your account immediately detaches your address from this data.

Activity log: actions taken on the site (newsletter sign-up and unsubscribe, account creation, sign-in and deletion with the reason given, purchases, gifts, refunds, messages) are recorded with the e-mail address concerned, in a log reserved for the publisher, to follow the site’s activity and prevent abuse (legitimate interest).

Security: the IP address of sensitive requests (sign-in, payment, newsletter, contact) is kept for 24 hours at most, to block abuse (legitimate interest).

Purposes and legal bases

Fulfil the order and deliver the files (performance of contract); run the customer account, its files and tiers (performance of contract); keep accounting records (legal obligation); answer messages (legitimate interest); send the newsletter and the welcome discount code (consent, which you can withdraw at any time); follow the site’s activity and count plays and sales, without anything that identifies you (legitimate interest); link your plays and cart to your account (consent, which you can withdraw at any time); measure the audience (consent, which you can withdraw at any time).

Recipients

Stripe (payment and invoices), Cloudflare (hosting, file storage, anti-bot) and Resend (e-mail delivery); Microsoft Clarity (audience measurement), only with your consent. Some are based in the United States; transfers rely on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Retention

Order data: 10 years (accounting obligation). Messages: 3 years after the last exchange. Newsletter: until you unsubscribe, then deleted; proof of consent is kept for 3 years. Activity log, plays and purchase path: 13 months. Audience measurement: 13 months at most (Clarity recordings: 30 days).

Your rights

Newsletter: unsubscribe at any time, in one click, with the link in every e-mail.

Customer account: delete it at any time from your account page, confirmed by a link sent by e-mail, favourites included; the reason for leaving, if you give it, is recorded in the activity log (13 months); purchases are kept for 10 years (accounting obligation).

Access, rectification, erasure, restriction, objection and portability: write to [email protected]. You may also complain to the CNIL, the French data protection authority (cnil.fr), or to your local authority.