Privacy Policy

YEKE PLUG is an independent audio plugin label operated by Carlos Bellmunt, based in Spain. For the purposes of the EU General Data Protection Regulation (GDPR) we act as the data controller of the personal data described below.

You can reach us at cbellmunt24@gmail.com for anything related to your data, your account, or this policy.

We try to collect as little as possible while still letting you download your plugins, recover your account and receive updates. The data we hold falls into a small number of buckets:

• Account data — your email address, an encrypted hash of your password, the date you signed up, and the timestamp of your last sign-in. If you sign in with Google we additionally store the display name and avatar URL that Google returns.
• Download log — the plugin ID, version, timestamp and a short user-agent string for every plugin you download. This lets us show you your library and reissue downloads.
• Purchase data — for paid plugins, the order ID from our payment processor, the amount paid, the currency and the license key issued to you. We do not see or store your card details — they are handled entirely by the payment provider.
• Newsletter preference — whether you have opted in to receive product updates and production tips. You can toggle this any time in your account.
• Technical data — your browser sends an IP address and basic request headers when interacting with our backend. These are used for rate-limiting and abuse prevention and are kept only for short periods of time.

We process your data on the following legal bases (Art. 6 GDPR):

• Contract — to deliver the plugin you signed up to download, manage your license keys, and let you re-download your purchases.
• Legitimate interest — to keep the service secure, detect abuse, and improve the product based on aggregate usage.
• Consent — to send you our newsletter when you opt in. You can withdraw consent at any time.
• Legal obligation — to retain limited invoicing data for the period required by Spanish and EU tax law (typically 5 years for invoices).

We use a small number of trusted service providers to run YEKE PLUG. They only receive the data they need to perform their function and are bound by their own data-processing agreements:

• Supabase (hosted on AWS in the EU) — stores your account and download data. Their privacy policy: supabase.com/privacy.
• Brevo (formerly Sendinblue, EU) — sends transactional emails such as verification codes and password resets. brevo.com/legal/privacypolicy.
• Lemon Squeezy (US) — acts as the seller of record for paid plugin purchases, handles the payment and any VAT/sales tax on our behalf, and issues license keys. They store your billing details, not us. lemonsqueezy.com/privacy.
• GitHub Pages — currently hosts the static site you are reading. They may log standard request information.

We never sell your data, and we never share it with advertisers or data brokers.

Your account data is stored in Supabase’s EU region (Frankfurt, Germany). Some of our service providers (notably Lemon Squeezy for payments) are based in the United States; when your data travels outside the EEA it is protected by the Standard Contractual Clauses approved by the European Commission.

• Account & downloads — for as long as your account exists. Delete your account and we delete both, except anonymised aggregates we may retain for product analytics.
• Purchase records — for the period required by tax law (currently 5 years in Spain). After that we delete or anonymise them.
• Newsletter — until you unsubscribe.
• Security logs — short periods, typically 30 days.

Under GDPR you have the right to access, rectify, port, restrict processing of and erase your personal data. You can also object to processing based on legitimate interests, and withdraw consent for the newsletter at any time.

The fastest way to exercise most of these rights is from your account page: update your preferences or contact us to fully delete your account. For anything else, write to cbellmunt24@gmail.com and we will reply within 30 days as required by GDPR.

If you believe we are not handling your data lawfully, you have the right to lodge a complaint with the Spanish data-protection authority (Agencia Española de Protección de Datos, AEPD).

YEKE PLUG uses only the strictly necessary cookies required to keep you signed in (session cookies set by Supabase Auth) and to remember basic UI preferences. We do not run third-party advertising or tracking cookies. If we ever add product analytics we will update this policy and ask for consent first where required.

YEKE PLUG is not aimed at people under 16. We do not knowingly collect personal data from children. If you are a parent and believe we hold data about your child, contact us and we will delete it.

We may update this policy when the service changes or to comply with new rules. We will update the “last updated” date at the top of the page and, for material changes, notify signed-in users by email.