Informativa sulla privacy

Controller

Controller within the meaning of the GDPR: [Name and address as in the Imprint] Email: hello@outboard.audio

Overview of processing

We process personal data to provide the website (server logs), manage accounts and magic-link sign-in (Auth.js + Resend), process orders and payments (we are the seller; PayPal or Stripe processes the payment), manage licenses in our database (Postgres at Neon, EU region) and send transactional email (Resend). Le statistiche facoltative iniziano solo con il tuo consenso. Outboard registra percorsi pubblici selezionati, lingua, ID evento e orario. Un identificatore casuale in sessionStorage distingue le schede e viene rimosso alla chiusura della scheda o alla revoca. Il database riceve un hash diverso ogni giorno UTC, senza email, indirizzo IP, parametri URL, frammenti o pagina di provenienza. Le cifre rappresentano sessioni di schede partecipanti, non persone identificate. Gli eventi oltre 90 giorni vengono cancellati durante la pulizia giornaliera. Account e checkout sono esclusi. Con la stessa scelta attiviamo Vercel Web Analytics, che tratta visualizzazioni e informazioni tecniche sul dispositivo secondo le impostazioni del servizio: https://vercel.com/docs/analytics/privacy-policy. Queste statistiche sono separate dal nostro archivio eventi di 90 giorni. Puoi revocare il consenso nelle impostazioni dei cookie. La revoca interrompe nuovi eventi e rimuove l’identificatore della scheda; non annulla gli eventi già registrati.

Hosting (Vercel)

This site is hosted by Vercel Inc. (USA). Your browser transmits technically necessary data (IP address, user agent, requested URL, timestamp) to Vercel on each visit. Legal basis: Art. 6 (1) (f) GDPR. Vercel processes data in the US under Standard Contractual Clauses.

Email delivery (Resend)

Transactional email (magic-link sign-in, license receipts) is sent via Resend Inc. (USA). Transmitted: email address and message contents. Legal basis: Art. 6 (1) (b) GDPR. A Data Processing Agreement and SCCs are in place.

Payments (PayPal / Stripe)

We are the seller. Your selected payment provider, PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) or Stripe Payments Europe, Limited (Ireland), processes the payment. We receive contact, billing and order details to deliver your license and issue an invoice (Art. 6 (1) (b) and (c) GDPR). Full card and wallet credentials are entered directly with the payment provider. Stripe also processes device and usage data for security and service improvement; international transfers and sharing with the selected payment method provider may occur. See https://www.paypal.com/privacy and https://stripe.com/privacy. Stripe Checkout cookies are described at https://stripe.com/legal/cookies-policy.

Account and licenses

After a purchase we create an account keyed by your email address and store it in our database (Postgres at Neon, EU region) together with license keys, activation counts, per-device hardware-fingerprint hashes and order IDs. The hardware hashes are salted one-way HMACs of stable machine identifiers (never the raw values), used only to enforce the per-license device limit; after activation the plugin stores a 14-day license token locally and verifies it offline. Legal basis: Art. 6 (1) (b) GDPR. The session cookie set by Auth.js identifies you for the duration of the session only — no tracking cookies are set.

Web fonts

We use the typefaces Inter Tight and JetBrains Mono. They are self-hosted via Next.js' next/font; no request goes to Google servers from your browser.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Requests: hello@outboard.audio. The right to lodge a complaint with a supervisory authority (Art. 77 GDPR) remains unaffected.