Política de privacidad

Controller

Controller within the meaning of the GDPR: [Name and address as in the Imprint] Email: hello@outboard.audio

Overview of processing

We process personal data to provide the website (server logs), manage accounts and magic-link sign-in (Auth.js + Resend), process orders and payments (we are the seller; PayPal is the payment service provider), manage licenses in our database (Postgres at Neon, EU region) and send transactional email (Resend).

Hosting (Vercel)

This site is hosted by Vercel Inc. (USA). Your browser transmits technically necessary data (IP address, user agent, requested URL, timestamp) to Vercel on each visit. Legal basis: Art. 6 (1) (f) GDPR. Vercel processes data in the US under Standard Contractual Clauses.

Email delivery (Resend)

Transactional email (magic-link sign-in, license receipts) is sent via Resend Inc. (USA). Transmitted: email address and message contents. Legal basis: Art. 6 (1) (b) GDPR. A Data Processing Agreement and SCCs are in place.

Payments (PayPal)

We are the seller. Payment is processed on our behalf by PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) as payment service provider. We collect your name, email and billing address to issue an invoice and account for VAT; your card or PayPal details are entered directly with PayPal and are not visible to us. See https://www.paypal.com/privacy.

Account and licenses

After a purchase we create an account keyed by your email address and store it in our database (Postgres at Neon, EU region) together with license keys, activation counts, per-device hardware-fingerprint hashes and order IDs. The hardware hashes are salted one-way HMACs of stable machine identifiers (never the raw values), used only to enforce the per-license device limit; after activation the plugin stores a 14-day license token locally and verifies it offline. Legal basis: Art. 6 (1) (b) GDPR. The session cookie set by Auth.js identifies you for the duration of the session only — no tracking cookies are set.

Web fonts

We use the typefaces Inter Tight and JetBrains Mono. They are self-hosted via Next.js' next/font; no request goes to Google servers from your browser.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Requests: hello@outboard.audio. The right to lodge a complaint with a supervisory authority (Art. 77 GDPR) remains unaffected.