Privacy policy

This policy explains which personal data Titanscore Audio collects through titanscoreaudio.com and the Ostinato and Piano plugins, why, and for how long. It follows the Swiss Federal Act on Data Protection (FADP) and, for visitors and customers in the European Union and the EEA, the General Data Protection Regulation (GDPR).

This site uses no analytics, no tracking pixels, no advertising networks and no social widgets. No profile is built about you, your data is never sold, and no decisions about you are made automatically.

Tunes of Fantasy GmbH, Häberlinstrasse 65, 8500 Frauenfeld, Switzerland, trading as Titanscore Audio. Write to us through the contact form for anything concerning your data.

Hosting: the site runs on Cloudflare. To deliver the pages and protect them from attacks, your IP address and the technical details of each request (time, page, browser, operating system) are processed. We do not keep these server logs ourselves.

Fonts: the typefaces are loaded from Google Fonts, so your browser connects to a Google server when a page opens, and Google receives your IP address.

Cookies: the site itself sets a single cookie, and only when you sign in to your account. It keeps you signed in for thirty days and is removed when you sign out.

Legal basis in the EU: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

When you write to us, we receive your name, your email address, the topic and your message, and keep them only as long as the conversation needs it. To keep out spam, the form is protected by Google reCAPTCHA, which is loaded only on the contact page and may set cookies of its own, and your IP address is held for one hour to limit the number of messages.

Legal basis in the EU: answering your request and, where it concerns a purchase, taking steps towards a contract (Art. 6(1)(b) and (f) GDPR).

An address left for the newsletter is used for that newsletter and nothing else, and kept until you leave the list. Every mail carries a way to leave, and asking is enough too. Legal basis in the EU: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Payments are handled by Paddle.com Market Ltd, London, United Kingdom, as merchant of record. Paddle processes your payment and billing data as its own controller under Paddle's privacy policy; we never see your card or bank details.

From Paddle we receive your name, your email address, the order number, the products and the amount. With these we issue your licence keys and send them to you. We keep them, together with your keys and the machines they are activated on, for as long as your licence exists, because your licence depends on them. Order records are kept for as long as Swiss accounting law requires.

Signing in to your account needs only your email address. A sign-in link is valid for thirty minutes and can be used once; a session lasts thirty days.

Legal basis in the EU: performing the contract with you (Art. 6(1)(b) GDPR) and legal retention duties (Art. 6(1)(c) GDPR).

Activation: when you activate, the plugin sends the email and licence key you entered, the product name, the plugin version, the operating system, an identifier of the machine and the name of your computer as it is set in your system (often something like your first name followed by “PC” or “MacBook”) to our licence server. This is used only to check the licence, to count your machines and to show them to you by name in your account, so you know which one to release. A machine entry is deleted when you release it.

Licence check: when the computer is online, the plugin occasionally sends the licence key, the product name and the machine identifier to confirm the licence is still valid.

Update check: each time the plugin is loaded, it reads a small file from titanscoreaudio.com that says which version is current. It sends nothing but the product name and version.

Activations, releases and sign-ins are logged with the licence they belong to, so that we can help with support questions and notice misuse. Nothing else leaves your computer: the plugins do not send your music, your MIDI or your projects anywhere.

Legal basis in the EU: performing the contract with you and our legitimate interest in protecting the licence against misuse (Art. 6(1)(b) and (f) GDPR).

We use these providers, each only for the purpose named above:

• Cloudflare, Inc., USA: hosting, security, licence server and database
• Google LLC, USA, and Google Ireland Ltd: fonts and spam protection on the contact form
• Resend, Inc., USA: sending our emails, such as sign-in links and licence keys
• Paddle.com Market Ltd, United Kingdom: payment and billing

Your data may therefore be processed in the United Kingdom and the USA. Switzerland and the EU recognise the United Kingdom as providing adequate protection. Transfers to the USA rely on the Swiss-US and EU-US Data Privacy Framework where the provider is certified, and otherwise on the standard contractual clauses approved for this purpose.

You can ask at any time which data we hold about you and receive a copy, have it corrected or deleted, object to its use or have it restricted, receive it in a common format, and withdraw any consent you have given. Write to us and it is done within thirty days, unless the law requires us to keep something.

If you believe we handle your data wrongly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) in Bern or, if you live in the EU or EEA, to the data protection authority in your country.

If this policy changes, the new version appears on this page with a new date.