The short version: we collect the minimum needed to sell and activate the plugin — your email, your purchase, and an anonymous machine identifier for license activation. No analytics, no ads, no cookies on this site, and we never sell your data.
1. Who is responsible
The data controller is Situ Music Ltd, trading as Noir Plugins, registered in England & Wales (company number 16328131, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom). Contact: support@noirplugins.com.
2. What we collect and why
Account data. When you purchase, an account is created with your email address and a password you choose. We use this to deliver your license, let you activate the plugin, and contact you about your purchase (order confirmation, password reset, important product notices). Legal basis: performance of a contract.
Purchase data. Payments are processed by Stripe. Stripe handles your card details — we never see or store them. We receive confirmation of the purchase, the email used, and billing country (for tax purposes). Legal basis: performance of a contract and legal obligation (tax and accounting records).
Activation data. When you sign in from the plugin, it sends a one-way hashed machine identifier to our license server so we can enforce the 2-machine activation limit. This identifier is derived from your device with a cryptographic hash — no raw hardware details, file names, audio, or project data ever leave your machine. Legal basis: performance of a contract and our legitimate interest in preventing license abuse.
Update check. The plugin periodically fetches a small static version file from our website to see whether an update is available. This is an ordinary HTTPS request; like any web request it exposes your IP address to the hosting provider's standard logs. No account or usage data is sent.
Support email. If you write to us, we keep the correspondence so we can help you and keep context for future requests. Legal basis: legitimate interest.
Mailing list. If you enter your address in the sign-up form on our home page, we store that address, the date you signed up and the exact wording you consented to, so that we can mail you when Invention goes on sale and when a release worth hearing ships. Legal basis: your consent. We store no name and build no profile; we do not track opens or clicks. To stop the rate of sign-ups being abused by scripts we briefly keep a salted, one-way hash of the submitting IP address (deleted after one hour); legal basis: our legitimate interest in keeping the form working. You can withdraw consent at any time using the unsubscribe link in any mail, or by writing to us — withdrawing is as easy as signing up, and does not affect anything else.
This website sets no cookies, runs no analytics and no trackers, and serves its fonts from our own server. Nothing is sent anywhere until you deliberately submit the mailing-list form.
3. What we don't do
- We do not sell, rent or trade your personal data.
- We do not send marketing email unless you have explicitly opted in, and every such email includes an unsubscribe link.
- The plugin does not record, upload or analyse your audio, your projects or your playing. The capture buffer lives entirely on your machine.
4. Who we share data with
We use a small number of service providers ("processors") to run the business:
- Stripe — payment processing (stripe.com/privacy).
- Supabase — account and license database, hosted in the London (UK) region (supabase.com/privacy).
- Google Workspace — business email (policies.google.com/privacy).
Each provider processes data only on our instructions. We do not share your data with anyone else unless required by law.
5. How long we keep it
Account and license data is kept for as long as your license is active, since it is what your activation depends on. Purchase records are kept for as long as UK tax law requires (currently 6 years). Support correspondence is kept for up to 2 years after the last message. Mailing-list addresses are kept until you unsubscribe, after which we keep a record of the unsubscribe itself so we do not mail you again by mistake. If you ask us to delete your account, we delete everything not subject to a legal retention duty — note that deleting your account disables future activations of your license.
6. Your rights
Under UK GDPR (and EU GDPR where it applies) you have the right to access, correct, delete and receive a copy of your personal data, to object to or restrict processing, and to withdraw consent where processing is based on consent. To exercise any of these, email support@noirplugins.com — we respond within one month.
You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
7. International transfers
Our license database is hosted in the UK. Stripe and Google may process data outside the UK/EEA; where they do, transfers are protected by recognised safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
8. Changes to this policy
We may update this policy from time to time; material changes will be posted on this page with an updated date. If a change significantly affects how we use your data, we will notify you by email.
Questions about your data? Write to support@noirplugins.com.