Privacy policy.

This policy describes the personal data we process, the purposes of that processing and your rights. Last updated: 12 August 2026.

1. Data controller. Personal data collected through harmonicodsp.com and the HARMONICO dsp software is processed by Nicolas Barreau, sole proprietor (entrepreneur individuel, France), trading as HARMONICO dsp. Contact: contact page.

2. Data processed and purposes. When you purchase a license: your name and email address, transmitted by our merchant of record at the time of sale, used to issue your license file, provide support and keep our sales records. When you download a free plug-in: your email address, used to send you the download link. When you contact support: the content of your message, used to reply to you. Payment and invoicing are handled by Paddle, merchant of record and data controller for those operations; we never have access to your payment details.

3. Legal bases. Performance of the contract (license delivery, support), legal obligation (accounting), legitimate interest (security and fraud prevention, including the license check described in section 6), consent (free download, product news).

4. Recipients and processors. Data is processed by our technical service providers: Cloudflare (hosting of the website, downloads and license data), Resend (transactional email delivery) and Paddle (payment and invoicing). No data is ever sold or shared with third parties for advertising purposes. Some of these providers operate outside the European Union; such transfers are covered by the safeguards of Articles 44 et seq. GDPR (adequacy decision or standard contractual clauses).

5. Retention. Sales records: ten years, as required by French accounting law. Email addresses collected for the free download: until you request deletion. Support correspondence: for the time needed to handle the request.

6. The website and the software. The website is static: no accounts, no cookies, no trackers, no analytics; fonts are served from our own domain. The plug-ins work offline and collect neither usage data nor audio. A plug-in activated with a purchased license may, when an internet connection is available and at most once every three days, query our server to check that the license is still valid (for example after a refund). This check transmits only the license token and an anonymous, non-reversible machine fingerprint; if the server cannot be reached, the plug-in keeps working normally.

7. Your rights. Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability over your data. To exercise them, contact us via the contact page; we reply within one month. You may also lodge a complaint with the CNIL (cnil.fr).