Privacy policy

Who is responsible

SWEG DSP LLC, advertised as [SWEG] DSP, is responsible for the personal information it uses to operate this store.

Contact us about privacy at privacy@swegdsp.com.

Information we use

• Account information: your sign-in provider’s account identifier, email address, and display name, plus a hashed session token and expiry. For email sign-in, we store your email and a short-lived hashed sign-in token tied to the requesting browser. Connected sign-in methods share one customer account. We do not receive your provider password or store its access or refresh tokens.
• Orders: product and transaction identifiers, purchase amount, currency, status, and timestamps. Paddle handles payment details; our application does not store full card numbers.
• Downloads: the release and file format served to your account, with the most recent download timestamp, so your library can identify updates you have not downloaded. Downloads alone do not track installation or device usage.
• License activations: when you activate a product on a computer, we store the product, the installation identifier the product generates, a one-way hash of a hardware key derived from stable components of that computer, the platform, an optional machine label you choose, and activation, deactivation and renewal timestamps, linked to the purchase. We also keep a record of each license file we sign (the signing key identifier, the issue and expiry times, and a hash of the signed contents) so support can recognise a file you send us. We do not store the hardware key itself, and the hash cannot be reversed to identify your hardware.
• Waitlists: your email, requested product, consent version, confirmation and unsubscribe records, and email delivery records.
• Testing invitations: the invited device, issuing administrator, redeeming account, access deadline, revocation status, download history. Invitation codes are stored only as hashes.
• Support: information you choose to send us about a problem.
• Technical information: hosting and security providers may process IP addresses, request information, and error logs. Our email abuse controls use short-lived hashed identifiers, not a database of raw IP addresses.

Why we use it

We use account and order information to provide requested purchases, protect downloads, and support customers. Where data-protection law requires a legal basis, this processing is necessary for a contract or steps requested before a contract. Security and abuse prevention rely on our legitimate interests in protecting the service. Recordkeeping required by law relies on legal obligations. Optional product notifications rely on your consent, which you can withdraw at any time without affecting prior lawful processing.

Device update checks

The public update service receives the product identifier, file format, installed version, release channel, and platform. It does not require an account, license ID, or machine identifier, set cookies, or record update checks in the customer database. Hosting and security providers may still process request information and IP addresses. Signing in and downloading through the website are separate actions.

License activation and renewal

Activating a product, renewing its license file, and deactivating a seat are separate requests that you authorize by signing in through your browser. They send the installation identifier and the hardware key described above, which we store only as a hash, together with the platform and your optional machine label. A product that is online renews its license file at most once a day using an authorization you already granted; this renewal sends the same identifiers and nothing else. Products work without internet access and never send audio, project, or usage information to us. You can see and remove your activated computers from your account at any time, and you can activate a computer that is offline by entering its identifiers on your account page and copying the license file to it.

Email choices

Requesting a product notification starts an email confirmation process. Only confirmed addresses receive the requested availability announcement. This is not consent to a general newsletter. Every message includes an unsubscribe option; you can stop all waitlist emails without signing in. We do not add open-tracking pixels or marketing click tracking to these messages. Operational messages about an order or security are separate from optional marketing.

Service providers

Cloudflare hosts the site and stores account, purchase, and private download data. The sign-in provider you select verifies your identity under its own privacy terms. Paddle processes payments and its related fraud, tax, and recordkeeping obligations under Paddle’s Privacy Notice. When email delivery is enabled, Resend receives the recipient address and message content to deliver requested emails. We share information as needed for these functions, lawful requests, or protection against fraud. We do not sell personal information or use it for cross-context advertising.

Cookies and external content

Our own cookies support sign-in and account security. There are no advertising or analytics cookies in the storefront code. Payment services load only when you choose to continue to payment. Video links open YouTube separately; no YouTube player loads while you browse the store. See the cookie notice for names, purposes, and lifetimes.

Retention

Session cookies expire after 30 days; sign-in security cookies expire after 10 minutes. Expired server sessions are removed during sign-in. Email sign-in links expire after 10 minutes; expired verification records are cleared by subsequent email sign-in requests. Email rate-limit records expire after two hours and are cleared by subsequent signup requests. The maintenance process removes unconfirmed signups after 30 days and completed email payloads after 90 days. We retain confirmation records while a requested notification is pending and limited unsubscribe records to honor your choice. Account and order records are retained while needed to provide access, resolve disputes, or meet legal recordkeeping obligations; we review deletion requests against those needs. Download history is retained while your account provides access to those releases and is removed when the account is deleted. Support and provider logs are retained only as needed for their stated purposes and configured service retention.

Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to certain processing. You can withdraw notification consent using an email unsubscribe link. Contact the privacy address above for other requests. We may verify your identity and retain information where the law requires it. Deleting an account may affect access to downloads; we will explain the consequences before completing the request. You may complain to your local data-protection authority. We do not use automated profiling to make decisions with legal or similarly significant effects.

International processing and security

Our service providers may process data in countries other than your own. Where required, transfers must be covered by appropriate contractual or other recognized safeguards. We use access controls, encrypted connections, and private download storage, but no system can guarantee absolute security. This store is not directed at children under 13; contact us if a child has supplied personal information.

Changes

The effective date and revision number above identify this version. We will update the notice when our practices change and provide additional notice or seek consent when required.

Terms and Conditions · Refund policy · Privacy · Cookies · Contact