Who controls your data
The data controller is Stain Web Development LLC, a Delaware limited liability company trading as Vitric Audio, based in Cleveland, Ohio, USA. Data questions and requests go to support@vitricaudio.com.
What we collect
- Email address, and a name if you give one, when you join the waitlist, request a 3 day trial, buy a plugin, or write to support. It is how licenses reach you and how we answer you.
- Machine codes when you activate a plugin. The plugin's license panel shows a code that identifies that computer to the licensing system; we store it so we can enforce the applicable machine-binding limit and let you deactivate or reactivate a previously bound machine. Deactivation does not erase the binding. A machine code contains no files, usage data, or audio.
- Order references from Paddle when you buy: transaction id, product, and the email Paddle has for you, so we can issue and later look up your license.
- IP addresses, transiently, to rate limit the licensing endpoints. They are not attached to your profile or used for anything else. Our hosting provider also keeps short-lived server logs that include IP addresses, for security and debugging.
- Reviews you choose to post: the name you give, your rating, title and text, published on the product page. Only license holders can review.
- Support messages: what you write to us and any attachments, so we can answer and keep the history of your case.
Payments and plugin connections
Paddle.com, our merchant of record, processes payments and stores full card details. We receive transaction references, totals, currency and the order and customer information Paddle supplies for fulfillment and support. License-file verification runs locally. Online activation contacts our licensing service using your license key and machine code; plugins can also contact our update service. Full licenses can be activated on offline machines by downloading a signed license file from the license portal.
Google Customer Reviews
After a confirmed checkout, we share your order reference, checkout email, delivery country and expected delivery date with Google to display its optional Customer Reviews invitation. Google sends a survey only if you choose to receive one in that invitation. Your choice does not affect your purchase, license or downloads. Google handles the survey and may use cookies or web beacons to provide this service. You can manage cookies in your browser settings. See Google's Privacy Policy.
A temporary checkout receipt stays in this tab's session storage so our server can verify the order before showing the invitation. It contains an order reference, country code and random verification token, never your email or payment details, expires after two hours and is removed when the invitation appears. Closing the tab also clears it.
Referee and Blueprint
Referee and Blueprint analyze your track inside your browser. The audio never leaves your computer. To write the advice, the numbers they measured (such as loudness, spectral balance, stereo width, dynamics and section timings) and the genre you pick are sent to our server and to Anthropic, whose Claude model writes the critique. Anthropic processes them as our service provider and does not use them to train its models. We do not store these numbers with your email or license.
Support email
Support mail is handled in Google Workspace (Gmail). We may use AI tools, such as Anthropic's Claude, to help sort messages and draft replies; a person reviews every reply before it is sent, and these tools act as our service providers.
Analytics and cookies
We use Vercel Analytics and Speed Insights for aggregate visits and page performance. When Google Analytics is enabled through Google Tag Manager, we measure page views, product interest, downloads, trial requests, checkout errors and completed checkouts. Free claims and paid orders are counted separately. These website events do not include your email, machine code, license key or audio.
Google analytics storage is denied by default in the EEA, the UK and Switzerland; elsewhere it may use analytics cookies. We also deny analytics storage when your browser sends Global Privacy Control or Do Not Track. Denied storage can still send cookieless measurement signals. Google advertising storage, ad personalization and advertising user-data consent remain denied.
Meta advertising measurement
We use the Meta Pixel to measure our Facebook and Instagram advertising. Meta receives product-page visits, plugins added to a custom bundle, paid checkout activity and completed paid purchases, including product identifiers, value, currency and an order reference used to prevent duplicate counting. Meta also receives browser and network information, such as your IP address and browser type, and may associate events with its cookies and your Meta account. Free claims and trial requests are not reported as purchases.
In the United States this measurement is on by default, and you can turn it off at any time with Advertising preferences in the footer. Everywhere else it starts only after you allow Meta measurement in Advertising preferences. We pick between the two from the country your request arrives from and keep only the result, never the country, in a cookie named vitric-ad-region. Declining does not affect shopping, trials or downloads. Global Privacy Control and Do Not Track block Meta measurement in every country, even if an earlier choice allowed it. We remember your choice in this browser for 180 days; clearing browser storage removes it, which in the United States returns measurement to on. Turning it off stops future measurement and removes the Meta cookies this site can access, but does not remove events already received by Meta.
We do not send email addresses, names, license keys, machine codes or audio to Meta, and do not enable automatic advanced matching. See Meta's Privacy Policy for how Meta uses information and the choices available in your Meta account.
TikTok advertising measurement
We use the TikTok Pixel to measure our TikTok ads. TikTok receives public product-page visits, plugins added to a custom bundle, paid checkout starts and completed paid purchases, including product identifiers, value, currency and an order reference to prevent duplicate counting. TikTok also receives browser and network information, including your IP address, browser type, page URL and referring page, and may link these events to its cookies and your TikTok account. Free claims and trial requests are not reported as purchases.
In the United States TikTok measurement is on by default, and you can turn it off at any time, separately from Meta, under Customize in Advertising preferences in the footer. Everywhere else it begins only after you choose Allow all, or select TikTok under Customize and save your choices; an earlier Meta permission does not enable TikTok. Declining does not affect shopping, trials or downloads. Global Privacy Control and Do Not Track block this measurement in every country, even after an earlier grant. Your choice is stored in this browser for 180 days; clearing browser storage removes it, which in the United States returns measurement to on. Turning it off stops future events and removes the TikTok cookies this site can access, but does not erase events TikTok already received.
We do not send customer names, email addresses, phone numbers, license keys, machine codes or audio to TikTok. Automatic advanced matching and enhanced data postback are disabled. Account, license and token-bearing pages are excluded from our pixel measurement. See TikTok's Privacy Policy for how TikTok uses information and the choices available in your TikTok account.
Browser preferences
The product comparison saves up to three selected product identifiers in this browser's local storage, without an account. Opening a shared comparison also updates that selection. Remove individual plugins or use Clear on the comparison page to empty it.
The background motion control also stores an on/off preference in this browser. These preferences contain product identifiers and a motion setting, not your email, license key or audio. If browser storage is unavailable, the controls keep a temporary preference for the current session.
Follow-up and offer emails
If you buy or claim a plugin or request a trial, we may send a few follow-ups about it: an installation checklist, suggestions for plugins that pair with yours, a short feedback request, and a note after a trial ends. The suggestion, feedback and trial follow-up emails each carry an unsubscribe link, and the Email preferences switch in your account turns all of them off or back on, including the checklist. A free claim button also offers “Send only my license email”: tick it and none of these follow-ups are sent. We record when you explicitly opt in. License delivery, account security and the notice that a running trial is about to end do not depend on this.
If you claimed a free plugin, we may also send occasional offers on other Vitric plugins. In the EU, the EEA, the UK and Switzerland we send these only if you opted in. Every one carries an unsubscribe link, and ticking “Send only my license email” when you claim keeps them from starting. We never sell or rent your address. If you join the Bedroom Producers Blog newsletter on our BPB offer page, we pass your confirmed address to Bedroom Producers Blog, which sends that newsletter under its own privacy policy.
Where your data lives
License and trial records are stored in a Neon Postgres database. Email is sent through Resend, which processes the recipient address to deliver the message. Paddle holds the payment records. The site and the installer downloads are hosted by Vercel, support mail lives in Google Workspace, and Anthropic writes the Referee and Blueprint advice. Analytics and advertising measurement go to Google, Meta and TikTok as described above. Each is an established provider with its own security and privacy commitments, and each receives only what its job needs.
We are based in the United States, and these providers process data in the United States and other countries. When data moves from the EEA, the UK or Switzerland, we rely on the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
Why we use it
- To provide what you asked for (performing our contract with you): issuing and managing licenses and trials, delivering downloads, signing you in, and answering support.
- Legitimate interests: keeping the licensing system secure and preventing abuse, rate limiting, follow-ups about a plugin you have, and offers to free claimants outside the EU, the EEA, the UK and Switzerland. You can object at any time.
- Consent: analytics and advertising measurement where the law requires your permission, and offers in the EU, the EEA, the UK and Switzerland. You can withdraw it at any time, which does not affect what happened before.
- Legal obligations: keeping order and tax records and answering lawful requests.
How long we keep it
License records are kept for as long as the license exists, so we can reissue keys and honor activations years later. Waitlist emails are kept until you unsubscribe. Support email is kept as long as it is useful for helping you.
Your rights
Under the GDPR, UK GDPR, California law and similar laws you can ask what we hold about you and get a copy, have it corrected, have it deleted, restrict or object to how we use it, receive it in a portable format, and withdraw any consent you gave. Email support@vitricaudio.com from the address in question and we will answer within one month; deletion removes your personal details from license, order, and trial records. Note that deleting the email attached to a license means we can no longer resend that license to you. We will not treat you differently for using these rights. If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority.
We do not sell personal information. In the United States, the Meta and TikTok measurement described above may count as sharing for cross-context behavioral advertising under California law. You can opt out with Advertising preferences in the footer, and a Global Privacy Control signal opts you out automatically.
The site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us data, write to us and we will delete it.
We protect data with access controls and encryption in transit. If a breach affects your personal information, we will notify you and the authorities as the law requires.
Every marketing email we send includes an unsubscribe link. Transactional email, such as a license delivery you just requested, is sent regardless because it is the product working.