Informativa sulla privacy

Controller

Controller within the meaning of the GDPR: [Name and address as in the Imprint] Email: hello@outboard.audio

Overview of processing

We process personal data to provide the website (server logs), manage accounts and magic-link sign-in (Auth.js + Resend), process payments via Lemon Squeezy as Merchant of Record, manage licenses in our database (Postgres at Neon, EU region) and send transactional email (Resend).

Hosting (Vercel)

This site is hosted by Vercel Inc. (USA). Your browser transmits technically necessary data (IP address, user agent, requested URL, timestamp) to Vercel on each visit. Legal basis: Art. 6 (1) (f) GDPR. Vercel processes data in the US under Standard Contractual Clauses.

Email delivery (Resend)

Transactional email (magic-link sign-in, license receipts) is sent via Resend Inc. (USA). Transmitted: email address and message contents. Legal basis: Art. 6 (1) (b) GDPR. A Data Processing Agreement and SCCs are in place.

Payments (Lemon Squeezy)

Payments are processed by Lemon Squeezy as the Merchant of Record. Name, email, billing address and payment data are submitted directly to Lemon Squeezy — we only receive the order metadata needed to issue the license. See https://www.lemonsqueezy.com/privacy.

Account and licenses

After a purchase we create an account keyed by your email address and store it in our database (Postgres at Neon, EU region) together with license keys, activation counts, per-device hardware-fingerprint hashes and order IDs. The hardware hashes are salted one-way HMACs of stable machine identifiers (never the raw values), used only to enforce the per-license device limit; after activation the plugin stores a 14-day license token locally and verifies it offline. Legal basis: Art. 6 (1) (b) GDPR. The session cookie set by Auth.js identifies you for the duration of the session only — no tracking cookies are set.

Web fonts

We use the typefaces Inter Tight and JetBrains Mono. They are self-hosted via Next.js' next/font; no request goes to Google servers from your browser.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Requests: hello@outboard.audio. The right to lodge a complaint with a supervisory authority (Art. 77 GDPR) remains unaffected.