Privacy Policy

We keep data collection to the minimum needed to run a small software shop. Here’s exactly what that means — and the rights you have over your data.

Who’s responsible

The controller for your personal data is Pascal Zagarolo, trading as 13x.audio, Bozenerstraße 26, 42659 Solingen (NRW) (Germany). You can contact us about anything in this policy at support@13x.audio.

What we collect

• Newsletter / launch list: the email address you give us and which form you used.
• COLONY launch list:your email address, the language of the page, which form you used and — if the link you came through carried one — its campaign tag (for example, that it came from the AURORA plugin). For each thing you agree to (the launch email, a beta invite, plugin news) we store the exact wording you saw, when you agreed and when you confirmed by email. To stop abuse of the form, we count sign-ups per IP address and per email address for a short time; both are stored only as scrambled values (salted hashes) that can’t be turned back into the address, and are deleted after two days.
• LOFT launch list: your email address, the language of the page, which form you used and — if the link you came through carried one — where it came from (for example, the COLONY page or a campaign tag). For each thing you agree to (the email when LOFT is out and, only if you tick the box, occasional 13x news about new plugins and updates) we store the exact wording you saw, when you agreed and when you confirmed by email. The form is protected against abuse in the same way as the COLONY list (short-lived, salted hashes of the IP address and the email address, deleted after two days).
• Account & downloads (where offered): your email and the licences and downloads tied to it.
• Site analytics: aggregate, privacy-friendly usage data (page views, referrers) with no cross-site tracking and no advertising cookies.

Why we use it, and our legal basis

• To send launch news and updates you asked for — on the basis of your consent (withdraw any time via the unsubscribe link).
• To send the one COLONY launch email and, only if you ticked the boxes, a beta invite before release and news about new free plugins — on the basis of your consent(Art. 6(1)(a) GDPR). Nothing is sent until you confirm your address with the link we email you (double opt-in). You can withdraw any time with the link in each email; that doesn’t affect emails already sent.
• To send the one email when LOFT is out and, only if you ticked the box, occasional 13x news about new plugins and updates — on the basis of your consent(Art. 6(1)(a) GDPR). Nothing is sent until you confirm your address with the link we email you (double opt-in); if you don’t confirm, we send one reminder and nothing after it. Without the box ticked you get only the LOFT email, never the newsletter. You can withdraw any time with the link in each email; that doesn’t affect emails already sent.
• To be able to prove that you agreed (the wording and the times above) and to keep the sign-up forms free of abuse — our legitimate interest in running the launch lists lawfully (Art. 6(1)(f) GDPR; Art. 7(1) GDPR asks us to be able to show consent).
• To deliver your downloads, your account and support — to perform our contract with you.
• To keep the site secure and understand, in aggregate, what’s useful — our legitimate interest in running and improving the site.
• To keep order and tax records — to comply with our legal obligations.

Who we share it with

Only the processors that make the site work, each under a data-processing agreement:

• Resend — sending newsletter and transactional email.
• Vercel — website hosting and privacy-friendly, cookieless analytics.
• Neon — the database that stores subscriptions and download records.

We don’t sell your data or share it for advertising.

International transfers

Some of these providers operate outside the EEA. Where personal data is transferred internationally, it’s protected by appropriate safeguards such as the EU Standard Contractual Clauses.

Videos (YouTube)

The AURORA and COLONY pages show a video from our YouTube channel. Until you press play, the page shows only a picture from our own server and nothing is loaded from YouTube. When you press play, the video loads from YouTube in its privacy-enhanced mode (youtube-nocookie.com), operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. From then on YouTube receives your IP address and technical information about your browser and device, may store information on your device (for example in local storage), and may process data on servers of Google LLC in the United States.

We load the video only because you ask for it by pressing play — on the basis of your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG for storing information on your device). If you don’t want this, don’t press play; the same videos are on YouTube itself. Google LLC is certified under the EU–US Data Privacy Framework. How Google uses the data: policies.google.com/privacy.

How long we keep it

We keep newsletter data until you unsubscribe. Account and licence records are kept while your account is active. Order records are retained as long as required by tax and accounting law. COLONY launch list: a sign-up you don’t confirm is deleted after 30 days. Once COLONY is out and the launch email (and any beta invite) has gone out, the list isn’t used again; we keep the record of your consent — address, wording, times — only to be able to prove it, and delete it at the end of the third year after the last email we sent you. If you leave the list, we stop at once. Plugin news you asked for through the list is a normal newsletter subscription and runs until you unsubscribe.

LOFT launch list: the same rules. A sign-up you don’t confirm is deleted after 30 days. Once LOFT is out and its launch email has gone out, the list isn’t used again; we keep the record of your consent — address, wording, times — only to be able to prove it, and delete it at the end of the third year after the last email we sent you. If you leave the list, we stop at once. 13x news you asked for through the box is a normal newsletter subscription and runs until you unsubscribe.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to processing, and to withdraw consent at any time. To exercise any right, email support@13x.audio. If you’re in the EU/EEA and think we’ve mishandled your data, you can also complain to your local data-protection supervisory authority.

Cookies

We use only the cookies strictly necessary to run the site (for example, to keep you signed in). Our analytics are cookieless. A video you start may let YouTube store information on your device (see Videos above).

Children

The site isn’t directed at children under 16, and we don’t knowingly collect their data.

Changes

We may update this policy; the “last updated” date above changes when we do.

Contact

Privacy questions: support@13x.audio.