Privacy notice

Noah Pfister, Dr.-Stumpf-Straße 85a/24, 6020 Innsbruck, Austria. hello@npaural.com, +43 677 61446810. There is no data protection officer.

What

IP address, page requested, time, browser's user agent — the standard web server log.

Why

Delivering the pages and keeping the site up.

Legal basis

Our legitimate interest in operating the site.

How long

About an hour of server logs at the host, copied nowhere else.

Usage measurement

Which pages are opened, which plugin pages are looked at, and which buttons are pressed — a download, starting a purchase, a purchase being refused and why. Sent to PostHog, named below.

Not collected

It does not record your screen, it does not capture what you type, and it does not collect the text of what you click. Every event is a name and a short list of values written out by hand in the source. Your email address is never part of one.

Device storage

The measurement stores nothing on your device and reads nothing from it — no cookie, no local storage, no identifier of any kind. You are a new anonymous visitor on every page you open: nothing joins one page to the next, or one visit to another. That is what your browser sends; the server events below are filed under an id. Switching it off is the one exception: that answer is kept in your browser, because the alternative is asking you again on every page.

Legal basis

Our legitimate interest in knowing which plugins are read about and where a purchase goes wrong. Objecting is the button below, it takes effect at once, and it holds in this browser until you change it. A browser that sends Global Privacy Control or Do Not Track has objected already and is never measured.

How long

Held by PostHog in the EU, under the retention their plan applies — seven years on this account, and there is no shorter period we can set. Your IP address is discarded on arrival, so what your browser sent is kept as a count of page opens and button presses with nobody attached to it. What the server sent keeps the id it was filed under, for the same period.

From the server

Some events are sent by our server rather than by your browser, and those carry an identifier. Filed under the random account id this site generated for you: a payment taken, a payment taken twice for the same plugin, a payment refunded, a payment charged back, a licence issued, a licence email failing to send, a free licence taken, a withdrawal honoured, the device reporting switched off, the device reporting switched back on. Filed under the random id of a licence rather than a person: a licence flagged as running on more machines than one person plausibly runs, approvals on a licence reaching the end of their span. Filed under no identifier of yours at all: our own turnover reaching a step of its limit. Never your address, and never anything you typed. Legal basis: our legitimate interest in knowing whether the licence, payment and refund machinery works. The button above does not stop these — it is your browser's setting, and these do not come from your browser. Write to us to object to them.

Rate limiting

Signing in, starting a plugin link, taking a free licence, starting a payment, leaving a note, and a plugin reporting a machine we have not seen before each store a keyed hash of the IP address the request came from — not the address. Signed in, a note counts against the account id instead. Pressing one of the idea buttons stores that same hash together with the name of the idea, so that one press counts once rather than as often as it is repeated. A row stops counting an hour after it is written and is deleted by a daily clean-up, so none of them lasts more than about a day. Legal basis: our legitimate interest in stopping the site being used to send mail nobody asked for, to fill it with junk, or to press one idea often enough to outrank the rest.

What

The text you type into the note field on the home page. Signed in, the note is stored against your account — the account id, nothing copied out of it.

Not collected

No address is asked for and none is attached. Nothing else about the visit is stored with the note: not the page you were on, not the time you spent there.

Why

Deciding what to build next, and being able to see who asked. Once a week the notes from the last four weeks are read for the plugin ideas in them, and the three most people have asked for become buttons under the same field, so the next person can agree with an idea instead of typing it again.

Legal basis

Our legitimate interest in acting on what people ask for.

How long

No fixed period. Deleting your account detaches the note from you instead of taking it with it.

Optional

Entirely. Signed out, a note is stored with no account against it and nothing kept with it points at you.

What

What you put in the form on the community page: which of the two tracks, a name or handle, an email address, one link, and your message. Signed in, the account id is stored with it — nothing copied out of the account.

Why

Reading the application and answering it. The address is there for the answer and for nothing else: it is not added to a list, it does not create an account, and no newsletter follows from it.

Legal basis

Steps taken at your own request before a possible agreement. You asked us to consider working with you, and this is what considering it needs.

Recipients

The application is mailed to the operator at the address in the imprint, through the mail provider named below, so that a person reads it rather than a table collecting them.

How long

Until it is answered, and then a year — long enough to remember a conversation and pick it up again. Ask and it goes sooner.

Optional

Entirely. Nothing on this site needs an application, and not applying costs you nothing: the free plugins are free to anybody and the suggestion box on the same page asks for no address at all.

What

Your email address, which plugin, when, the licence issued, and — if you paid — the payment reference, the country you pick at checkout, and the country your connection appears to come from.

Why

Issuing the licence, letting you sign in and get it again, and keeping the books. The country decides where the sale is taxed. It is used for nothing else.

Legal basis

Performing the contract with you, and the legal obligation to keep accounting records.

How long

The licence is perpetual, so the record of it lasts as long as it does. Records with tax relevance are kept the seven years tax law requires, counted from the end of the calendar year they belong to — so in practice up to eight.

Optional

No. We cannot issue your licence without an email address.

Country guess

The buy form starts on the country your connection appears to come from. Read from the request, never stored on its own, and your own answer is the one recorded against the sale. Legal basis: our legitimate interest in a form that saves you time.

Card details never reach this site. The payment form is Stripe's, it runs inside their own frame, and what comes back to us is a reference and a result.

Starting a payment loads Stripe's script, and that script sets its own cookies — __stripe_mid and __stripe_sid — which Stripe uses to tell a real payment from a fraudulent one. They appear only on the step where you are paying, never from browsing.

Signing in sends a one-time link to your address. The link is stored only as a hash, expires, and is spent on first use. Once you are signed in there is one cookie, holding a signed session and nothing else. Legal basis: performing the contract with you.

It lasts a day from the last time you used the site, and a week from signing in whatever you do — whichever runs out first. Signing out ends every session on the account at once.

This is the plugins with a licence. The 3 free ones are built without any of it: no licence, no identifier, nothing sent, nothing recorded.

What

Licence id, a random identifier the plugin generated for that installation, two dates — first seen and last seen, dates rather than timestamps — and the plugin version that installation is running. Whether you have approved that machine, and the day you did, because that is what the approval expiring is counted from. A name you give a machine yourself is stored too, if you give it one. One more date: the day that machine was last named in a mail about an approval running out.

Not collected

Not your name, not your hardware, nothing derived from your hardware, no fingerprint, no audio, no project data, no location beyond what any internet request reveals.

Why

So you can keep track of every machine using your licence.

Legal basis

Our legitimate interest in a licence being used on the machines it was bought for.

How long

While the licence exists. Delete a machine from your account page and the record goes, and the approval on it goes too — the machine reappears, unapproved, if the plugin runs there again.

You can object, on your account page, in one click, or by writing to hello@npaural.com.

It stays off until you say otherwise. Reporting stops, nothing about a new machine is recorded, and a machine already in demo stays there. Machines you had approved keep working, and a new one is added by activating it from inside the plugin. Switching it back on is the same one click and it takes new installs, not the ones already stopped: a plugin told to stop holds that on its own machine and never asks again until you bring it back from inside the plugin.

Two things are decided automatically. First: when a machine checks in and nobody has approved it, it runs the demo from then on. Approving it is a single click — the plugin picks that up on its next check.

Second: on a licence running on more machines than one person plausibly runs, approvals expire after a fixed span and the machine has to be approved again. A daily job applies that, and no person reviews it in between. You are emailed about it — before the deadline where there is time, and on the day it passes — a machine can be renewed from the account page in its last month, and replying to that email reaches a person.

Each of these does one job, and each is under a processing contract. Nothing is sold. Below them are the payment providers you can choose at the checkout, which are not processors of ours: choosing one hands that payment to a company that decides for itself what it does with it.

Vercel

Hosting and server-side functions. Functions for this site are pinned to Frankfurt, so requests are handled inside the EU. vercel.com/legal/privacy-policy

Cloudflare (D1)

Database holding accounts, licences and machines. Created with an EU jurisdiction, which restricts both where it is stored and where queries against it run. cloudflare.com/privacypolicy

Stripe

Payments. Stripe is an independent controller for its own fraud prevention and regulatory duties, and its notice covers that part. stripe.com/privacy

PostHog

Usage measurement, and a second stream from our own server. Pinned to its EU cloud, with IP addresses discarded at ingestion. It receives event names and the values listed in the source. What your browser sends carries no identifier that outlives the page it was sent from; what the server sends is filed under the random ids set out above, never under your address. posthog.com/privacy

Resend

Sending licence, sign-in and notice emails, and receiving anything you send back. It sees the address and the message. Pinned to Resend's Irish region, and there is no open or click tracking in any message. resend.com/legal/privacy-policy

Stripe Link

Switched off. Link is Stripe's saved-details service; the payment form removes it, so no data reaches it from this site.

Apple Pay, Google Pay

Both appear as buttons in the payment form. Pressing one hands the payment to Apple or to Google, who see it as their own transaction under their own policies. Nothing reaches either wallet unless you press its button.

Inside Stripe's payment frame

The payment form is Stripe's own page embedded in ours, and what it loads is Stripe's decision — including the anti-fraud checks it runs, which have at times included a captcha provider. It runs under Stripe's policy, not this one, and appears only when you start paying.

PayPal, iDEAL, Bancontact, EPS, Revolut Pay

Other methods the payment form offers. Each is a separate controller for the payment you make through it, under its own notice. None of them is contacted unless you choose it.

Some of these are US companies or have US parents, so data can reach a third country. Where it does, the transfer runs on the European Commission's standard contractual clauses and, where the recipient is certified, on the EU–US Data Privacy Framework. You can ask for a copy of the clauses that apply.

What

Your email address, and whether you said yes, with the date you said it and the date you changed your mind.

Why

Telling you when a new plugin or an update exists. A few times a year, nothing else.

Legal basis

Your consent. It is off unless you tick the box.

How long

Until you turn it off. The dated record of the consent is kept after that.

One click on your account page turns it off, and one turns it back on. Emails about your licence, your machines, and updates that keep the plugin working are not marketing and are not affected.

• Access: ask what is held and get a copy.
• Rectification: correct a wrong address. A licence reissued to the corrected one still works.
• Erasure: delete the account. The licence goes with it and the plugins fall back to demo behaviour. Tax records stay the seven years tax law demands, and a note you left stays without you attached to it.
• Restriction and portability: your data, in a machine-readable file, on request.
• Objection: two, in the two places they belong. The usage measurement is switched off by the button beside it above, in this browser, at once. The device reporting is switched off by one click on your account page and back on by one more; see above for what stopping it costs. For anything else, write.

Ask at hello@npaural.com. No form, no fee, and an answer within a month.

You can complain to a supervisory authority at any time. The Austrian one is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at, dsb.gv.at. If you live elsewhere in the EU, take it to your own country's authority instead — it will take the complaint just the same.

Changes here are published on this page with the date at the top. If one materially changes what happens to data already held, you get an email about it rather than a silently updated page.