Politique de confidentialité

Controller

Controller within the meaning of the GDPR: [Name and address as in the Imprint] Email: hello@outboard.audio

Overview of processing

We process personal data to provide the website (server logs), manage accounts and magic-link sign-in (Auth.js + Resend), process orders and payments (we are the seller; PayPal or Stripe processes the payment), manage licenses in our database (Postgres at Neon, EU region) and send transactional email (Resend). Les statistiques facultatives commencent uniquement avec ton accord. Outboard enregistre des chemins publics sélectionnés, la langue, l’ID de l’événement et l’heure. Un identifiant aléatoire dans sessionStorage distingue les onglets et est supprimé à la fermeture de l’onglet ou au retrait de l’accord. La base de données reçoit un hash différent chaque jour UTC, sans email, adresse IP, paramètres URL, fragments ou page d’origine. Les chiffres représentent des sessions d’onglets participants, pas des personnes identifiées. Les événements de plus de 90 jours sont supprimés lors du nettoyage quotidien. Compte et paiement sont exclus. Le même choix active Vercel Web Analytics, qui traite les vues et les informations techniques de l’appareil selon les réglages du service : https://vercel.com/docs/analytics/privacy-policy. Ces statistiques sont distinctes de notre stockage d’événements sur 90 jours. Tu peux retirer ton accord dans les réglages des cookies. Cela arrête les nouveaux événements et supprime l’identifiant de l’onglet ; les événements déjà enregistrés ne sont pas annulés.

Hosting (Vercel)

This site is hosted by Vercel Inc. (USA). Your browser transmits technically necessary data (IP address, user agent, requested URL, timestamp) to Vercel on each visit. Legal basis: Art. 6 (1) (f) GDPR. Vercel processes data in the US under Standard Contractual Clauses.

Email delivery (Resend)

Transactional email (magic-link sign-in, license receipts) is sent via Resend Inc. (USA). Transmitted: email address and message contents. Legal basis: Art. 6 (1) (b) GDPR. A Data Processing Agreement and SCCs are in place.

Payments (PayPal / Stripe)

We are the seller. Your selected payment provider, PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) or Stripe Payments Europe, Limited (Ireland), processes the payment. We receive contact, billing and order details to deliver your license and issue an invoice (Art. 6 (1) (b) and (c) GDPR). Full card and wallet credentials are entered directly with the payment provider. Stripe also processes device and usage data for security and service improvement; international transfers and sharing with the selected payment method provider may occur. See https://www.paypal.com/privacy and https://stripe.com/privacy. Stripe Checkout cookies are described at https://stripe.com/legal/cookies-policy.

Account and licenses

After a purchase we create an account keyed by your email address and store it in our database (Postgres at Neon, EU region) together with license keys, activation counts, per-device hardware-fingerprint hashes and order IDs. The hardware hashes are salted one-way HMACs of stable machine identifiers (never the raw values), used only to enforce the per-license device limit; after activation the plugin stores a 14-day license token locally and verifies it offline. Legal basis: Art. 6 (1) (b) GDPR. The session cookie set by Auth.js identifies you for the duration of the session only — no tracking cookies are set.

Web fonts

We use the typefaces Inter Tight and JetBrains Mono. They are self-hosted via Next.js' next/font; no request goes to Google servers from your browser.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Requests: hello@outboard.audio. The right to lodge a complaint with a supervisory authority (Art. 77 GDPR) remains unaffected.