This site is small and so is the data it touches. This page says exactly what is collected, why, and what your rights are — in plain language, because there is not much to hide behind.
01Who is responsible
The data controller is the individual operator of Pointless Audio, based in Italy. For anything privacy-related, write to hello@pointlessaudio.studio.
02Cookies
This site sets no cookies. No consent banner appears because there is nothing to consent to: no advertising trackers, no profiling, no third-party pixels, no fingerprinting. The fonts are served from this site, not from a third party. The only things stored in your browser are two small values. Session storage holds where your visit started and a random number for this visit (see Analytics); your browser deletes it when you close the tab. If you close the newsletter card or subscribe, local storage keeps the date, so the card does not come back.
Hosting. The site is served by Cloudflare Pages (Cloudflare, Inc.), which handles the technical data any web server needs to deliver a page, such as your IP address and browser, to send the pages and keep the site secure. Legal basis: legitimate interest (art. 6(1)(f) GDPR) in running the site. See Cloudflare’s privacy policy.
03Analytics
The site uses Cloudflare Web Analytics, a cookieless measurement tool. It counts page views in aggregate without setting cookies, without storing identifiers on your device, and without tracking you across sites. Details: Cloudflare Web Analytics.
We also run a small counter of our own, to learn which sites send people to us. When a page loads, and when you click a link to our store, it records the page, the website you came from (the domain only, never the full address), the campaign tag in the link if there is one, your country as seen by Cloudflare, whether your screen is a phone, a tablet or a desktop, and a random number that lasts for one visit, so that we can tell which page a visit entered on and which link it clicked. It records no IP address, no cookie and no identifier that follows you from one visit to the next. It runs on the home page, the plugin pages and the manuals. Links to our Gumroad store carry two short labels, where your visit started and the page you came from, so that we can tell which source led to a download.
- Legal basis: legitimate interest (art. 6(1)(f) GDPR) in knowing which pages are read and which sources bring visitors. Nothing here identifies you.
- Processor: Cloudflare, Inc. (Workers and D1, data stored in Cloudflare’s Eastern Europe region). See Cloudflare’s privacy policy.
- Opting out: if your browser sends Global Privacy Control or Do Not Track, our counter does nothing at all.
- Retention: 24 months, then deleted.
04The newsletter (“The dev log”)
If you subscribe to the dev log, we process one piece of data: your email address.
- Legal basis: your consent (art. 6(1)(a) GDPR), given via double opt-in — you confirm the subscription from your inbox, so nobody can sign you up by accident.
- Processor: the list is managed by Kit (Kit.com, formerly ConvertKit, USA). Transfers outside the EU are covered by the EU–US Data Privacy Framework and standard contractual clauses. See Kit’s privacy policy.
- Retention: until you unsubscribe. Every email contains an unsubscribe link that works immediately, no questions asked.
- What we send: release notes, free plugins, occasional development notes. Roughly one email a month. No third-party offers, ever.
05The beta program
The beta program is closed. If you took part, we keep one piece of data: your email address, only to send you pre-release builds of new plugins and to ask what went wrong.
- Legal basis: your consent (art. 6(1)(a) GDPR), given via double opt-in.
- Processor: Kit, as for the dev log.
- Your feedback: if you reply with feedback, we read it and use it only to fix the plugin.
- Retention: until you leave the beta. Every email contains an unsubscribe link.
06If you downloaded a plugin
When you download a plugin from our Gumroad store, Gumroad shares with us your email address, the products you got, your country and the page you came from. We use them for three things only:
- Telling you about updates to the plugins you have: fixes, new versions, things you should know before you update.
- Telling you about our other plugins, now and then. Never third-party offers.
- Counting downloads and where they come from. For this we keep your email only as a pseudonymous code that cannot be read back.
- Legal basis: our legitimate interest in staying in touch with people who use our plugins (art. 6(1)(f) GDPR), within the limits Italian law sets for emailing existing customers about similar products (art. 130(4), Italian Privacy Code). You can object at any time (art. 21 GDPR).
- Who gets your email: only people who left Gumroad’s “can contact” option on are added to our mailing list.
- Processor: Kit, as for the dev log. The counting data sits on Cloudflare, as for Analytics.
- Opting out: every email has an unsubscribe link that works immediately. Replying “stop” works too.
- Retention: until you unsubscribe. The counting data: 24 months.
This is different from the dev log, which you join yourself, with double opt-in.
07Purchases and downloads
Plugins are sold and delivered through Gumroad (Gumroad, Inc.), which acts as the merchant of record and as an independent data controller for the checkout. Payment details, invoices and download delivery are handled entirely on Gumroad’s side — this site never sees your payment data. See Gumroad’s privacy policy.
08Your rights
Under articles 15–22 GDPR you can request access, rectification, erasure, restriction, portability, and object to processing. Write to hello@pointlessaudio.studio and it will be handled directly. You also have the right to lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali).
09Changes
If this policy changes, the date at the top changes with it. No silent edits.