Privacy Policy
This explains what LIMINALLOUD collects, how we use it, who we share it with, and your choices. It is written in plain language. If anything is unclear, email info@liminalloud.com.
By using the Services (our website, plugins, the Liminal Loud Hub, and the UI Kit), you agree to this policy. We do not sell, rent, or trade your personal information.
What we collect
We collect only what we need to run the Services:
- Account. Your email address and a password (stored only as a secure hash by our auth provider). This is how you sign in on the Site and in the Liminal Loud Hub.
- What you own. A record of which plugins and UI Kit packs are on your account (your entitlements), so we can deliver them and issue licenses.
- Purchase records. When you buy, our payment processor records the order. We receive the order reference, the products, the amount, and the email used, for fulfillment and support. We do not receive or store your full card number.
- Promo and referral attribution. If you used a creator or launch code, we record which code drove the order so credit can be attributed correctly.
- Consent records. When you create an account we record that you agreed to the Terms, and whether you opted in to product emails, with the date.
No telemetry in the plugins. The plugins do not phone home or track how you use them. Licensing is verified on your machine and works offline. The Liminal Loud Hub contacts us only to sign you in, list the catalog, and issue your license files.
Optional website measurement
If you allow measurement, a random first-party ID is stored in an HttpOnly cookie for 30 days. We record an approved landing-page path, a broad source category (search, social, referral or direct), website visits, store clicks, Hub download clicks and new account registrations. A download click does not tell us whether you installed or used a plugin.
For VST checkout, the random signed ID is passed to Polar as order metadata. After a verified paid-order notification, it connects the order reference, amount, currency and reported refunds to that visit. A free or fully discounted order is not counted as a paid order. Website measurement does not record audio, musical keys, DAW sessions, plugin usage, full referrer URLs or search queries.
Use “Measurement preferences” to decline or turn it off. Turning it off deletes this browser’s measurement journey and its associated measurement events and order attribution. Your account, licenses, marketing-email choice and operational purchase records are unaffected. Browser Do Not Track and Global Privacy Control signals disable optional collection. Records older than 90 days are removed when the next measurement visit or private report runs. Reports show the last 30 days of acquisition cohorts.
How we use it
- To create and authenticate your account and keep you signed in.
- To deliver the plugins and packs you own and issue their licenses.
- To process purchases and provide support.
- To send you account and service emails (for example, sign-in confirmation, password resets, and important changes).
- To send product news and deals only if you opted in. You can opt out at any time using the link in any such email or by emailing us.
- To detect and prevent fraud or abuse, and to comply with the law.
Who we share it with
We use a small number of trusted providers, sharing only what each needs:
- Supabase — hosts our database and handles authentication (your account, entitlements, and consent records). GDPR and SOC 2 compliant.
- Polar (Polar Software, Inc.) — our reseller and merchant of record. Processes checkout, payment, and tax, and handles payment-related inquiries and refunds. Polar handles your payment details; we do not see your full card information.
- Vercel — hosts our website and serverless functions.
- Fastmail — delivers our account and product emails.
We do not use third-party advertising networks or sell your data.
Where data is stored
Our database and most processing happen on infrastructure in the United States. By using the Services you consent to your information being transferred to and stored in the United States. If you access the Services from outside the US, we apply industry-standard safeguards during transfer.
Data retention
- Account and entitlements: kept while your account exists; deleted within 30 days of an account-deletion request.
- Purchase and consent records: kept as a financial and legal audit trail; we will anonymize them if you delete your account.
Your rights
You may at any time:
- Access or correct your account data by signing in to your account.
- Opt out of product emails using the unsubscribe link or by emailing us.
- Delete your account, or export the data we hold about you, by emailing info@liminalloud.com. We respond within 30 days.
If you are in the EEA, the UK, or California, you have additional rights under the GDPR, UK GDPR, or CCPA. Email us and we will honor them.
Security
- Connections to our servers use TLS.
- Database access is gated by row-level security so each account can only read its own data.
- We never store passwords in plain text, and we do not store full card numbers.
- No system is perfectly secure. If we discover a breach affecting your data, we will notify you promptly.
Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are under 18, please use the Services only with a parent or guardian's involvement. If we learn we have collected information from a child under 13, we will delete it.
Changes
We may revise this policy. The "Last updated" date reflects the latest version. For material changes we will notify signed-in users by email where appropriate. Continued use after a change means you accept it.
Contact
Privacy questions, data requests, and concerns:
info@liminalloud.com