Privacy policy

What happens to your email address

This is a one-person shop selling one synthesiser. An account needs an email address and a password, and everything they are used for is listed below. No marketing email is ever sent, and no address is ever sold.

Last updated: 2026-09-08


What is stored

This is the whole list. Your name, postal address, phone number and date of birth are needed neither to buy the plugin nor to run it.

  • Your email address and password. The password is stored as a hash — the characters you typed are not kept. If you register a passkey, its public key is stored.
  • Purchase and licence records: the amount, currency and status of an order, and the licence key issued for it. Card numbers never pass through this site; Stripe receives them directly.
  • Activated devices: a device name, a platform, and a hash derived from the machine's configuration. This exists only to enforce the three-device limit.
  • Traffic counts: a per-day tally by page and by referring host. No per-visitor row is created, no identifier is assigned, and no analytics cookie is used. Only the referring host is stored, never the full URL — so search terms and private page paths are not kept.
  • Short-lived abuse data: to stop password guessing and bulk sign-ups, an IP address is held as a rate-limit marker for at most one hour. It expires automatically and is never tied to an account.

What it is used for

Only these things.

  • Creating your account and confirming the address exists.
  • Resetting your password.
  • Checkout, issuing your licence, managing your three devices, and serving the installers.
  • Replying to questions and bug reports.
  • Seeing where people drop off, as counts that identify nobody.

What is never done

These are not policy statements only — there is no mechanism in the site to do any of them.

  • Your email address, or anything else personal, is never sold or rented.
  • No marketing email, no newsletter. The only mail sent from here is verification, password reset, and replies about a purchase or a question.
  • Nothing is handed to a third party for advertising or behavioural targeting. No analytics product and no ad tag is loaded on this site.

Outside services

Running the shop takes these services. Each handles data only as far as the purposes above require, and for nothing else. Several are US companies, so data is processed outside Japan.

  • Cloudflare (US) — hosting, database and file storage. Account details and purchase records live here.
  • Resend (US) — sending verification and password-reset email. It receives the destination address.
  • Stripe (US, Japan) — payments. It receives your email address and payment details at checkout. Card data is handled by Stripe and never reaches this site.
  • Google (Gmail) — receiving support email. Mail to satodeyannsu@gmail.com arrives in Gmail and passes Gmail's ordinary spam filtering. Message bodies are not sent to any AI service.
  • Google Fonts (US) — the typefaces. Opening a page makes your browser connect to Google's servers, which gives Google your IP address and browser details.
  • YouTube (youtube-nocookie.com) — the walkthrough video. The thumbnail is served by this site; your browser only reaches YouTube if you press play.

How long it is kept

Account details, purchase records and licences are kept while the account exists and for as long as the law requires (transaction records: seven years as a rule). A login session lasts 30 days, a verification link 24 hours, a password-reset link one hour. Traffic counts are per-day totals, so nothing there leads back to a person. To have your account deleted, write to satodeyannsu@gmail.com: everything goes except the transaction records the law requires be kept.


Cookies

Three cookies, all first-party: your login session, the language you picked, and the password gate on the test deployment. There is no advertising or tracking cookie, and the traffic counts use no cookie at all.


Who runs this

This shop is run by Kaito Sato, who is responsible for how personal data is handled here. Write to satodeyannsu@gmail.com. A postal address is disclosed promptly on request. The commercial terms are set out in the legal notice.


Changes

When this policy changes, this page and the date above change with it. If a change would widen what already-collected data is used for, it will be announced on the shop itself.


satodeyannsu@gmail.com · Legal notice

Privacy policy — IMFMSynth