Privacy Policy

ModulTone is a trade name of Ivo.j music, a sole proprietorship registered with the Dutch Chamber of Commerce (KVK) under number 96501305, at Veldenseweg 56, 5914 ST Venlo, the Netherlands. We decide what happens to the personal data this site collects. For anything in this policy, email info@modultone.com.

That makes us the controller of the personal data described here.

This site has no advertising and no tracking cookies. We count visits with Plausible, which sets no cookies and doesn't store your IP address (section 10). Everything your browser loads comes from modultone.com, fonts included. We collect an email address when you buy, sign in, download MS Widener or join the newsletter. We use it for that, and when you buy or download MS Widener, also for our mailing list about new plugins and sales. We never sell or rent it to anyone.

Checkout runs on Paddle's own checkout, which opens over this site. Paddle.com, our online reseller, is the merchant of record: it takes the payment and handles VAT, invoicing and fraud checks, and it's the controller of the payment data it collects, under its own privacy policy (paddle.com/legal/privacy). Your card details go to Paddle and never reach us. Orders placed before our checkout moved to Paddle went through Stripe's payment page, with Stripe in that same role under its own privacy policy.

From Paddle, or from Stripe for orders placed before the move, we receive your email address, your country, what you bought and an order number. In their dashboards we can also see the name and address details you entered. We store your email address, the order number, the order date, the plugins in the order and the amount you paid, so we can email your licence keys, show your purchases when you sign in to your account, and work out what the rest of a bundle costs you. Each licence key contains your email address, the plugin and the date.

If you bought through KVR Marketplace, KVR took the payment under its own privacy policy and gave you a code; it doesn't tell us who you are. When you redeem the code in your account, we store the code, the address you're signed in with and the date, and add the plugins to your account the same way as a purchase here, with licence keys made the same way.

We need this to deliver what you paid for (the contract between us). We keep it for as long as your licence exists, because that's what lets you download the plugin again and get your keys back. You can ask us to delete it. After that we can no longer resend your keys or show the purchase in your account, but plugins you've already activated keep working.

Buying a plugin on this site also puts your address on our mailing list about new plugins and sales (section 7). This is in our legitimate interest in telling customers about our other plugins. Every email has an unsubscribe link, and you can also email us, before or after you buy, to be left off. Redeeming a KVR Marketplace code doesn't put you on the list.

A few days after a purchase we send you one email with what the rest of our bundle would cost you, if you own part of it and haven't unsubscribed. For that we store your email address and the date it's due. It's one of the list's emails, with the same unsubscribe link.

The first time you activate a plugin on a computer, it sends us your licence key, an identifier the plugin creates for that computer, and the computer's name. We store the identifier, the name and the date, to hold a licence to three machines and to show you which machines are using it. After that one activation the plugin doesn't contact us again.

This is part of the contract, and in our legitimate interest in keeping a licence to three machines. The record stays until you free the machine in your account or ask us to delete it.

You sign in with a link we email you. To stop anyone flooding an inbox with those links, we count how many were sent to an address in the last hour, stored as a hash of the address rather than the address itself.

Once you're signed in, the site sets one cookie, modultone_account, which keeps you signed in for up to 30 days or until you sign out. It's needed for the account to work at all, so it doesn't ask for consent, and it isn't used for anything else.

MS Widener is free in exchange for your email address. We use it to send you a confirmation link and then the download. The service that sends our email keeps a record of the messages it delivered for a limited time.

Under the button, the form says you'll also get the occasional email about new plugins and sales. When you download through the link in your email, your address joins our mailing list (section 7). It joins at that click, after you've opened the email, so someone who types in your address can't sign you up. This is in our legitimate interest in telling people who use our plugins about new ones. Every email has an unsubscribe link.

Our mailing list is for news about new plugins and sales. Addresses on it are kept as contacts at Resend, which sends the emails. Every email has an unsubscribe link, and Resend remembers that you unsubscribed, so buying another plugin later doesn't sign you up again. We also keep our own record of when and how you joined, or that you asked not to, so we can show how an address got on the list. You can ask us to delete that record and your contact at any time.

The form at the bottom of each page says "Get an email when a new plugin ships", and that is what an address given there is for. It's stored with the form submissions at Netlify, our host. The legal basis is your consent, which you can withdraw at any time by emailing info@modultone.com, after which we remove your address.

We also see which links in our emails are clicked, per address. The links in every email we send, licence and sign-in emails included, go through links.modultone.com, run by Resend for us, which notes the click and sends you on to the page. We use it to see which emails are worth sending, in our legitimate interest in not sending things nobody reads. We don't track whether you open an email.

If you email us, we keep the conversation for as long as it takes to help you, and for up to two years after your last message, so a later question about the same licence doesn't start from nothing.

The site and its server functions run on Netlify. Like any web host, Netlify processes your IP address and the details of each request in order to serve the page, and keeps logs for a short time. Our own function logs record errors, with email addresses shortened so they can't be read in full. This is in our legitimate interest in keeping the site secure and working.

We count visits with Plausible Analytics, made by Plausible Insights OÜ in Estonia and hosted in the EU. It sets no cookies. For each page view it receives the page address, the site you came from, your browser, operating system and type of device, and the country your IP address belongs to. To count unique visitors per day, your IP address and browser details are combined with a random value that is replaced every day into a code that can't be turned back into either. The IP address itself isn't stored, and the daily change means a visit today can't be linked to one tomorrow.

We also count four actions, without anything that identifies you: asking for MS Widener, downloading it, adding a plugin to the cart, and going on to checkout. The counting script and these counts pass through modultone.com on their way to Plausible. This is in our legitimate interest in knowing how many people visit and what brings them here. A content blocker that stops it doesn't break anything on the site.

Besides the account cookie, the cart remembers what you put in it in your browser's local storage. It holds the ids of the products in it and nothing about you, and it stays in your browser until you press Pay.

Netlify (hosting, server functions, data storage and forms) and Resend (sending our email and keeping our mailing list) process data for us under data processing agreements. Both are based in the United States, so your data can be transferred outside the European Union, with the safeguards EU law requires for that, such as the European Commission's standard contractual clauses.

Plausible Insights OÜ (visitor statistics, section 10) processes data for us in the EU. Paddle processes payment data as the merchant of record, under its own responsibility and privacy policy, and Stripe did the same for orders placed before our checkout moved to Paddle. Emails you send us are held by our email provider.

We keep your data behind access controls at our host, send it only over encrypted connections, and never hold card details.

You can ask to see the personal data we hold about you, to correct it, to delete it, to limit how we use it, to receive it in a portable format, and to object to processing based on our legitimate interest. Email info@modultone.com; we answer within one month.

If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). We'd rather hear about it first, though.

When the site starts handling data differently, this page changes with it, and the date at the top shows when that last happened.