Privacy policy

1. Who we are

Voidscan Audio publishes and sells Parasite, a software synthesizer. We decide what personal data is collected through this site and why, which makes us the data controller for it under the General Data Protection Regulation.

SIRET: 830 075 990 00036. Full identity and postal address are on the legal notice.

For anything in this policy, write to [email protected]. We are small enough that this reaches a person, not a queue.

2. What we collect, and why

Only what the product needs to work. There is no advertising tracking on this site, no analytics script, and nothing here is sold or shared for marketing.

Buying Parasite

When you buy, our payment provider sends us your email address, the order reference and the amount, so that a licence key can be created and sent to you. We never see your card details: they are entered on the payment provider's own page and never reach us.

Legal basis: performance of the contract. Order records are kept ten years, which French accounting law requires of us.

Your account, if you create one

An account is optional and exists to let you manage your licence, your machines and your presets. We store your email address, the username you choose, and your password in hashed form, meaning we cannot read it and neither can anyone who obtained the file.

Legal basis: performance of the contract. Kept for as long as the account exists. Delete it and this goes with it, except what we must keep for accounting.

Licences and activations

A licence records which machines it has been activated on, so that the limit stated at purchase can be enforced and so that you can move your licence to a new computer yourself. The plug-in sends an identifier derived from the machine, not an inventory of it. It also checks periodically that the licence is still valid, and asks the site whether a newer version exists.

Legal basis: performance of the contract, and our legitimate interest in preventing a licence being shared without limit. Kept while the licence exists.

Presets you sync or share

If you use preset sync, the presets you save are stored on our server so that your machines and your account stay in step. A preset is a set of synthesizer parameters; it contains no audio and nothing about you beyond the name you gave it. Sending a preset to another user is something you do deliberately, one preset at a time.

Legal basis: performance of the contract. Kept until you delete the preset or the account.

Emails we send you

Your licence key, address verification, password resets. These are part of the service, not marketing. If we ever start a mailing list it will be a separate, opt-in choice with an unsubscribe link on every message.

Server logs

Our servers record the usual technical lines: IP address, time, page or endpoint requested, and the browser's user agent. They exist to keep the service running and to spot abuse.

Legal basis: our legitimate interest in the security and reliability of the service. Kept six months.

3. Cookies and local storage

This site sets no cookies at all, and loads nothing from a third party. The fonts are served from our own domain specifically so that visiting this page tells no one else that you did.

Three values are kept in your browser's local storage, and only after you sign in:

• td-token keeps you signed in, so that every page does not ask for your password again.
• td-email and td-username let the dashboard show who is signed in without asking the server first.

All three are strictly necessary to a service you asked for, which is why no consent banner appears. They stay in your browser, are never sent anywhere except to our own API to prove who you are, and signing out removes them. Clearing your browser data removes them too.

If we ever add anything that is not strictly necessary, advertising measurement being the realistic candidate, we will ask you first, in a banner where refusing takes exactly as many clicks as accepting, and this page will say so before it happens.

4. Who else sees it

Four kinds of company, each doing one job, none of them free to use your data for their own purposes:

• Our hosting and content delivery provider, Cloudflare, Inc., which serves this site and the plug-in downloads.
• Our server provider, which hosts the application and the database behind api.voidscan-audio.com.
• Our email provider, which delivers licence keys, verification and password resets.
• Our payment provider, PayKickstart, which runs the checkout and takes the payment. For the payment itself it decides on its own how it processes your data, so its own privacy policy applies to that part.

We do not sell personal data, and we do not share it with advertising networks.

5. Data outside the European Union

Some of those providers are established in the United States, so some of your data is processed there. Such transfers are covered either by the European Commission's adequacy decision for the EU–US Data Privacy Framework, where the provider is certified under it, or by the standard contractual clauses adopted by the Commission.

If you want to know which mechanism applies to a specific provider, ask us and we will tell you.

6. Your rights

Over the data we hold about you, you can ask for: access to it, correction of it, erasure of it, restriction of how we use it, a copy of it in a portable format, and you can object to processing we base on our legitimate interest. Where we rely on your consent, you can withdraw it at any time, and withdrawing it is as easy as giving it was.

Write to [email protected]. We answer within one month. We may need to check that the request comes from you before acting on it, which for an account holder usually means writing from the address on the account.

Under French law you may also give directives about what happens to your data after your death.

If you think we have handled your data badly, tell us first and we will try to put it right. You can also complain to the French data protection authority, the CNIL, at cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

7. Changes to this policy

If this policy changes, the date at the top changes with it. A change that affects what we collect or why, rather than wording, will be announced on the site before it takes effect, and if it needs your consent we will ask for it rather than assume it.