Privacy policy

At rumcake, accessible from rumcakerecords.com, the privacy of our visitors and customers matters to us. This policy explains what we collect, why, and what you can do about it. It applies only to our online activities and to visitors to this website; it does not apply to information collected offline or through other channels.

Who we are

The data controller is Dimension Warriors Limited, trading as rumcake, registered in England and Wales (company number 13327493). For any privacy question, or to exercise your rights below, contact contact@rumcakerecords.com.

Consent

By using this website you consent to this privacy policy. Where we rely on your consent specifically, for example, to send you product updates, we ask for it explicitly and you can withdraw it at any time.

Information we collect

We collect only what we need to run the shop:

• When you buy a plugin. Our payment provider, Paddle (Paddle.com Market Ltd), acts as the merchant of record and collects your name, email, billing address, and card details. We receive your email and the order metadata and store a license record (your email, the license key, and the transaction id). We never see or store your card number.
• When you subscribe to updates. We store the email address you give us and a record that you ticked the consent box (with the date and source IP address as proof of consent).
• When you download a trial. The download page asks for your email address. We store it, along with which installers you downloaded, so we can send you relevant follow-ups about the product you tried.
• When you activate or trial Kronos 3 Editor. We store your license key's activation records: an anonymised device identifier, your computer's name, and activation and trial timestamps. See The plugins below for exactly what the app sends.
• When you contact us. We receive your email address, the contents of your message, and anything else you choose to include.
• Automatically. Our host, Vercel, keeps standard server logs (IP address, browser type, date and time, and the pages requested) and provides privacy- friendly, cookieless web analytics that count visits in aggregate without identifying you. If, and only if, you accept analytics cookies in our cookie banner, we additionally use Google Analytics to understand how the site is used (pages visited, approximate location, device and browser type). We do not run advertising trackers.

How we use your information

• Deliver your license key and provide support, including re-sends.
• Enforce license terms: the two-computer activation limit, the 7-day trial, and disabling refunded licenses.
• Follow up on trial downloads and send product updates.
• Operate, maintain, secure, and improve the website.
• Detect and prevent fraud and abuse.
• Comply with our legal obligations, including UK tax law.

Legal bases

Under UK GDPR we rely on: performance of a contract (to deliver and support a plugin you bought, and to operate its license activation); your consent (to send you updates you subscribed to, and to set Google Analytics cookies); our legitimate interests (to keep the site secure and working, to enforce license terms, and to follow up with people who downloaded a trial, with an opt-out in every such email); and legal obligation (to keep tax records).

Cookies

The only cookies this website sets itself are Google Analytics cookies (names beginning _ga), and only after you choose Accept in our cookie banner. If you decline, no analytics cookies are set and the site works exactly the same; our built-in Vercel analytics are cookieless either way. You can change your mind at any time via Cookie preferences in the footer, which also removes the cookies if you withdraw consent. Google's privacy policy is at policies.google.com/privacy.

Paddle Checkout (which you reach by clicking Buy) uses cookies to process the payment; their policy is at paddle.com/legal/privacy. You can disable cookies in your browser settings. Two things live in your browser's own local storage rather than cookies: the email you enter on the download page (so we do not ask you twice) and your cookie choice itself. Both stay on your machine and you can clear them with your browser data.

Who we share it with

We never sell your personal data. We share it only with the service providers we use to run the shop, and only as needed:

• Paddle: payments and merchant-of-record invoicing.
• Neon: the database that holds license, activation, trial, download, and subscriber records.
• HostPapa: the mail server that delivers your license email.
• Vercel: website hosting and cookieless analytics.
• Google: web analytics (Google Analytics), only if you accept analytics cookies.

Some of these providers may process data outside the UK or EEA; where they do, appropriate safeguards apply. We may also disclose information if required by law.

How long we keep it

We keep transaction and license records for six years to meet UK tax requirements. Activation and trial records are kept while the license or trial is live, so the device limit and trial clock work. We keep your subscription email until you unsubscribe or ask us to delete it, and download records until you ask us to delete them. Other data is kept only as long as needed for the purpose it was collected.

The plugins

The physics plugins (CymaticPlate, Mercury, Lichtenberg, Loopdove, Bloom, Ferro) are offline. They do not phone home, do not report usage, and do not transmit any data from your machine. Their license verification is performed locally with an RSA signature; no server is contacted at runtime.

Kronos 3 Editor works differently: it contacts our activation server to enforce its two-computer license limit and its 7-day trial, and to disable a license if the purchase is refunded. Specifically, it sends:

• your license key and an anonymised device identifier (a one-way hash derived from a hardware id; the id itself never leaves your machine), when you activate, roughly once a month afterwards, and when you deactivate a device;
• your computer's name (for example "Simon's MacBook Pro"), so you can recognise your devices on your account page and free a slot yourself;
• on starting a trial, the same anonymised device identifier, so the 7-day clock cannot be reset by reinstalling.

That is the entire list. Kronos 3 Editor does not report usage or analytics, and nothing about your instrument, your sounds, or your MIDI data is ever transmitted. Between checks it works fully offline, and a failed check never locks you out on the spot.

Marketing and unsubscribing

If you subscribed to updates, you can opt out at any time using the unsubscribe link in any update email, or by emailing contact@rumcakerecords.com.

Your rights

Under UK and EU data protection law you have the right to access, correct, erase, restrict, or object to our processing of your personal data, and the right to data portability. Where we rely on consent, you can withdraw it at any time. If you are a California resident, you may request the categories and specific pieces of personal data we hold, request deletion, and opt out of any sale of your data, and we do not sell your data. To exercise any of these, email contact@rumcakerecords.com; we will respond within one month. We will delete everything except the records we are legally required to keep. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Children's information

Our website and plugins are not directed at children, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, contact us and we will remove it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised; please check back occasionally.