Privacy policy

Visits to this site are counted by Plausible. It is cookieless and storage-free: nothing is written to your device, no identifier follows you from one visit to the next, and no profile is built about you. That is the only reason this site has no cookie banner.

What I get out of it is the aggregate picture. How many people came, which pages they read, which link or site sent them, roughly which country, and what kind of device and browser they were on.

A few actions are counted the same way, as anonymous totals: a click on a link that leaves this site, a file download, a newsletter or trial signup, and a completed order together with what it came to. These carry the name of the plugin involved and nothing about you: no email address, no name, no order number. They exist so I can tell which of my own announcements and adverts actually bring people here, and they are counted with the same cookieless script as everything above.

To count one person once instead of five times, Plausible turns your IP address and browser into a hash that is thrown away and regenerated every day. The IP address itself is never stored, and I never see it.

In GDPR terms this rests on my legitimate interest in knowing whether the site works and what brings people to it, which anonymous totals serve without touching you.

There is no Google Analytics on this site, no Meta Pixel, no advertising tag of any kind. Nothing about your visit goes to Google, Microsoft or Meta.

No cookies. The site does not set one.

Three things are saved in your browser’s own local storage, and they stay on your machine:

• what you have put in the cart
• a discount code, if you have applied one
• the currency and country the prices are shown in

None of it identifies you, and none of it is sent anywhere by itself. To remove all of it, clear the site data for feltinstruments.com in your browser.

Payments on this website are handled by Polar (Polar Software Inc., 3500 South DuPont Highway, Dover, DE 19901, United States), acting as the merchant of record. That means Polar, not Felt Instruments, is the seller for your purchase: it takes your payment, charges and remits any VAT or sales tax, and issues your receipt and invoice.

Your payment details are entered on Polar’s own checkout, never on this website. Felt Instruments never sees or stores your card number.

To fulfil your order and keep the records the tax authorities require, Polar passes me your name, email address and full billing address, together with what you bought, what you paid and the tax charged. If you buy as a business and give a VAT number, I receive that too. I use your email address to send your download code.

This is processing needed to perform the contract you entered at checkout, and to meet the record-keeping duties Polish tax law puts on me.

See Polar’s own privacy policy for what it does with the information you give it directly.

What Polar sends back is stored in a database I run on Supabase:

• your name, email address, billing address and country
• your VAT number, if you gave one
• what you bought, what you paid, and the tax charged
• the download codes issued to you
• the two confirmations Polar collects at checkout

Those two confirmations are your acceptance of the licence, and your agreement that delivery starts immediately. The second one waives the 14-day withdrawal right on a digital download.

If you arrived from an ad or a campaign link, the campaign tags in that link are stored alongside the order. That is how I know which ad worked. No cookie is involved, and no IP address, browser fingerprint or user agent is kept with it. This part rests on my legitimate interest in knowing which adverts pay for themselves.

Order records are kept for five years from the end of the tax year of the purchase, which is what Polish tax law requires. Your download codes are kept for as long as your licence lasts, so they can be sent again when you need them.

Both forms on this site, the newsletter and the free trial on every plugin page, go to Brevo (Sendinblue SAS, France), which runs my mailing list. The trial code arrives by email, and asking for a trial also puts you on the newsletter. The line under the form says so before you submit.

Brevo holds your email address, your first name if you gave one, which form you came from, and which trials you have asked for.

If you are in the EU, the EEA, the UK or Switzerland, a confirmation email comes first and nothing else is sent until you click the link in it.

The list runs on your consent, and you can withdraw it at any time. Every email has an unsubscribe link at the bottom and it takes effect straight away. Unsubscribing marks the record rather than removing it, so that a later signup from the same address is not treated as new consent by mistake; the marked record is deleted after two years. If you would rather it was deleted outright, email me and I will delete it.

The installer needs an internet connection to authorise your download code and fetch the sample files. It records four things:

• a confirmation that the code has been redeemed
• your IP address and machine ID
• your operating system
• the path you downloaded the content to

I use that for two things: troubleshooting an install that has gone wrong, and checking that a licence is not being shared beyond the machines its owner uses, which the licence terms do not allow. It goes to the same Supabase database as the order records, and to nobody else.

Redeeming the code is part of delivering what you bought, and the sharing check is my legitimate interest in protecting the licence. Install records are kept for as long as the licence lasts.

Students, teachers and people working at a non-profit can email me proof that they are enrolled, teaching, or part of the organisation, and I issue an edu discount code. Some of those documents will belong to people under 18, so send only what shows your status, and black out anything else. If you are under 18, applying for the discount and sending any documents requires your parent or guardian's consent.

I look at the document, issue the code, and delete the document. What I keep is a note that your address was verified as edu, and when, so I can answer questions about the code later. That note goes when the code expires. Sending the proof is your consent to this; if you change your mind before the code is issued, say so and the document is deleted unread.

When you write to hello@feltinstruments.com, your message and address sit in my mailbox so I can answer you and find the thread again if the same problem comes back. Nothing from it is added to the mailing list unless you ask for that separately. Answering you, and being able to look up what was said last time, is my legitimate interest here. Support threads are kept for as long as your licence lasts; anything else goes after two years.

My mail is hosted by Zoho (Zoho Corporation), on its European data centres, so your message passes through and rests on their servers.

Six companies handle your data on my behalf, each under a contract that binds them to it:

• Plausible (Plausible Insights OÜ, Estonia) counts the visits, as described above, on servers in the EU.
• Cloudflare hosts and serves this site. Its network tells the page which country a request came from, so prices can show in your currency. That country is all the page uses, and it is not stored against your visit.
• Supabase holds the order records, the download codes and the discount codes. Its servers are in the United States, where most Felt customers are, which keeps the site quick for them.
• Brevo holds the mailing list and sends the emails.
• Polar takes the payment, as described above.
• Zoho hosts my mailbox on its European data centres, so anything you email me sits with them, inside the EU.

Cloudflare, Supabase and Polar are United States companies, so some of this data is handled outside the European Economic Area under the European Commission’s standard contractual clauses. Nobody in this list is allowed to use your data for their own purposes, and none of it is ever sold, rented or traded.

You can ask me for a copy of everything I hold about you, have it corrected, have it deleted, have its use restricted, object to how it is used, or have it handed to you in a portable form. Where something rests on your consent, such as the mailing list, you can withdraw that at any time.

Email hello@feltinstruments.com and I will deal with it. Felt is a one-person company, so allow me a few days.

If you think I have got it wrong, you can complain to the Polish data protection authority, the Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl), or to the authority in your own country.

When something here changes, I edit this page and change the date at the top. There is no separate notification, so if this matters to you, check back now and then.