Política de privacidad

Controller

Controller within the meaning of the GDPR: [Name and address as in the Imprint] Email: hello@outboard.audio

Overview of processing

We process personal data to provide the website (server logs), manage accounts and magic-link sign-in (Auth.js + Resend), process orders and payments (we are the seller; PayPal or Stripe processes the payment), manage licenses in our database (Postgres at Neon, EU region) and send transactional email (Resend). Las estadísticas opcionales comienzan solo con tu consentimiento. Outboard registra rutas públicas seleccionadas, idioma, ID de evento y hora. Un identificador aleatorio en sessionStorage distingue pestañas y se elimina al cerrar la pestaña o retirar el consentimiento. La base de datos recibe un hash distinto cada día UTC, sin correo, dirección IP, parámetros URL, fragmentos ni página de origen. Las cifras describen sesiones de pestañas participantes, no personas identificadas. Los eventos de más de 90 días se eliminan durante la limpieza diaria. Cuenta y pago quedan excluidos. Con la misma elección activamos Vercel Web Analytics, que procesa vistas e información técnica del dispositivo según la configuración del servicio: https://vercel.com/docs/analytics/privacy-policy. Estas estadísticas son independientes de nuestro archivo de eventos de 90 días. Puedes retirar el consentimiento en los ajustes de cookies. Se detienen los nuevos eventos y se elimina el identificador de la pestaña; los eventos ya registrados no se deshacen.

Hosting (Vercel)

This site is hosted by Vercel Inc. (USA). Your browser transmits technically necessary data (IP address, user agent, requested URL, timestamp) to Vercel on each visit. Legal basis: Art. 6 (1) (f) GDPR. Vercel processes data in the US under Standard Contractual Clauses.

Email delivery (Resend)

Transactional email (magic-link sign-in, license receipts) is sent via Resend Inc. (USA). Transmitted: email address and message contents. Legal basis: Art. 6 (1) (b) GDPR. A Data Processing Agreement and SCCs are in place.

Payments (PayPal / Stripe)

We are the seller. Your selected payment provider, PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) or Stripe Payments Europe, Limited (Ireland), processes the payment. We receive contact, billing and order details to deliver your license and issue an invoice (Art. 6 (1) (b) and (c) GDPR). Full card and wallet credentials are entered directly with the payment provider. Stripe also processes device and usage data for security and service improvement; international transfers and sharing with the selected payment method provider may occur. See https://www.paypal.com/privacy and https://stripe.com/privacy. Stripe Checkout cookies are described at https://stripe.com/legal/cookies-policy.

Account and licenses

After a purchase we create an account keyed by your email address and store it in our database (Postgres at Neon, EU region) together with license keys, activation counts, per-device hardware-fingerprint hashes and order IDs. The hardware hashes are salted one-way HMACs of stable machine identifiers (never the raw values), used only to enforce the per-license device limit; after activation the plugin stores a 14-day license token locally and verifies it offline. Legal basis: Art. 6 (1) (b) GDPR. The session cookie set by Auth.js identifies you for the duration of the session only — no tracking cookies are set.

Web fonts

We use the typefaces Inter Tight and JetBrains Mono. They are self-hosted via Next.js' next/font; no request goes to Google servers from your browser.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Requests: hello@outboard.audio. The right to lodge a complaint with a supervisory authority (Art. 77 GDPR) remains unaffected.