Legal
Privacy notice
What is held about you, why it is held, and how to get rid of it.
Last updated 27 August 2026.
Dillan Stephenson Audio Products is the controller of the personal data described here. Ask about any of it at support@dillanstephensonaudio.co.uk.
The short version: there is no advertising, no analytics, no tracking pixels and no third party scripts on this site. Nothing about you is sold or shared for marketing. What is held is what is needed to run an account and a licence.
What is held, and why
| Email address | To identify your account, send your licence and answer you. Needed for the contract. |
|---|---|
| Username and display name | To identify your account. Your choice what they are. |
| Password | Never stored. What is stored is a scrypt hash, from which the password cannot be recovered, only checked. |
| Licence keys | Which plug-ins are on your account, and when they were added. |
| Sign in records | Session identifiers, the IP address and browser used, and the time. Kept so a session can be ended and so a compromised account can be investigated. Our legitimate interest in keeping accounts secure. |
| Download records | Which build you downloaded, when, and from which address. So a build that turns up somewhere it should not be can be traced. Our legitimate interest in protecting the work. |
| Machine fingerprint | A short code worked out from your computer name and disk serial number, used to count a licence against a machine. It is a one way hash: it cannot be turned back into either of those, and it does not identify you to anyone who does not already have your account. |
Lawful bases
Running your account and your licence is performance of a contract. Keeping accounts secure, tracing leaked builds, and keeping records of who was given what are our legitimate interests. Where the law requires a record to be kept, that is a legal obligation. We do not rely on consent for any of it, which is why there is no consent banner.
Cookies
Two, both strictly necessary, so neither needs your consent under the Privacy and Electronic Communications Regulations:
- a session cookie, so the site knows you are signed in;
- a token used to check that a form was submitted from this site and not from somebody else's.
There are no analytics or advertising cookies, because there is no advertising or analytics.
Who else sees it
- OVH, who host the server and carry the email. They process it on our instructions.
- Nobody else. No advertisers, no data brokers, no analytics companies. If a payment provider is ever added, this notice will say so before it is.
Data is held in the United Kingdom and the European Economic Area.
How long
- Account details, for as long as you have an account.
- Sign in records, twelve months.
- Download records, as long as the licence they relate to.
- Licence records outlive the account, because a key needs to stay traceable to whoever it was issued to. They are reduced to the key and the date once an account is closed.
Your rights
You can ask for a copy of what is held, ask for it to be corrected, ask for it to be deleted, ask us to restrict what we do with it, object to processing based on legitimate interests, or ask for it in a portable form. Email support@dillanstephensonaudio.co.uk and you will get an answer within a month. There is no charge.
Closing your account removes your email address, username, display name and password hash. What survives is the licence record, for the reason above.
If you are unhappy with how we have handled it you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you gave us the chance to put it right first.