Privacy policy

Who is responsible

[legal entity name] ("Ozner Audio", "we") runs the website, the app and the plugins, and is responsible for the data described here. Our address is [company address]. To ask us anything about your data, write to support@ozneraudio.com.

What we hold

• Your account: your name, your email address, whether the address is verified, and a hash of your password. We never hold the password itself.
• Your language, if you picked one in your account.
• Your sign-ins: each session keeps when it started and ends, the IP address it came from and your browser's description, so you can see and end your sign-ins.
• Your devices: when the app asks to sign in to your account, a short code links the two for a few minutes.
• Your machines: for each machine where you activate a plugin, a random id the plugin sends, and when it was first and last activated. An account can have up to three active machines.
• What your account owns: which plugins and units are yours, and whether each came free, by a claim, as a gift or by purchase.
• Referrals: if a promoter's link or creator code brought you here, which promoter and how. If you are a promoter yourself: your public display name, your code, who added or recruited you, your status and its dates, and the invitations you sent or accepted.
• The mailing list: your email address, when you joined and where you signed up. You can be on it without an account.
• Abuse counters: for sign-in, sign-up and mail requests we count the requests that came from one IP address or for one email address over a few minutes, to stop guessing and spam.
• Server logs: Cloudflare, which serves the website, records requests to it (time, address asked for, IP address) in its own logs.

We do not sell your data, show advertising or run analytics or tracking tools. We hold no card or payment details. If we sell through Lemon Squeezy later, Lemon Squeezy will take the payment, and this policy will say so before it starts.

Why we hold it

• To give you an account and to sign you in. This is needed to provide the service you asked for.
• To send the emails the account needs: the link that verifies your address, the link that resets your password, and a note to an address that already has an account. This is needed to provide the service.
• To keep the mailing list, only if you chose to join it. This is your consent, and you can withdraw it at any time.
• To limit each account to its machines, and to credit a promoter for the accounts they bring. This is needed to provide the service and to run the promoter program.
• To keep the site safe and working: the abuse counters and the server logs. This is our legitimate interest in keeping the service secure.

How long we keep it

• Your account and what belongs to it: for as long as the account exists, until you ask us to delete it.
• A session: up to 60 days, renewed when you use the site. It ends when you sign out or reset your password.
• A verification link lasts 24 hours, a password reset link one hour and an app sign-in code 15 minutes.
• The mailing list: until you ask us to take you off it.
• Promoter records stay after a promoter leaves, marked as removed, so that past referrals still make sense.
• Server logs: Cloudflare keeps them for as long as its plan for our site allows. We do not copy them.

Who handles it for us

• Cloudflare serves the website and keeps the release files. It sees every request to the site.
• Neon holds the database with everything under "What we hold" except the logs.
• Resend sends our emails. It receives the recipient's address and the message.
• Lemon Squeezy, later, if paid items are sold. It will be added here first.

Where the database is hosted: [database region]. We share your data with no one else, unless the law requires it.

Cookies

The site sets three cookies. All three are ours, all three are needed for something you asked the site to do, so there is no cookie banner. None is used for advertising or tracking.

• better-auth.session_token (on a secure connection, __Secure-better-auth.session_token) keeps you signed in. It lasts up to 60 days, renewed when you use the site.
• oa_lang remembers the language you picked. It is set only when you pick one, and lasts a year.
• oa_ref remembers which promoter's link you followed, so that sign-up can credit them. It is set only for an approved promoter's link, and lasts 90 days.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, or to hand it to you in a form you can reuse. You can also withdraw your consent to the mailing list and complain to your data protection authority. Write to support@ozneraudio.com from the address on the account; we will answer as soon as we can.

Changes

When this policy changes we change this page and its date at the top. If a change affects what we hold about you, we will tell you before it starts.