Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Curate Software
Marius Menkel
Voecklinghauserstrasse 21
45130 Essen, Germany
E-Mail: info@curatesamples.com

2. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Germany. When you visit this website, your IP address and browser request data are processed by Hetzner's infrastructure to deliver the page. This processing is necessary for the technical operation of the website.

The download page fetches release metadata and download links from Hetzner Object Storage (nbg1 region, Germany), also operated by Hetzner Online GmbH. This request transmits your IP address to Hetzner's infrastructure in the same way as a regular page load.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating a reliable and secure website.

Hetzner's privacy policy is available at hetzner.com/legal/privacy-policy.

3. Website Analytics (Umami)

This website uses Umami, a privacy-friendly, open-source analytics tool. Umami is self-hosted on our own server — your data does not leave our infrastructure and is not shared with any third party.

Umami does not use cookies. It does not track you across websites and does not collect any personally identifiable information. IP addresses are anonymized before processing. The data collected (page views, referrer, browser type, country) is aggregated and cannot be linked to individual users.

Do Not Track: Umami respects the browser's Do Not Track (DNT) setting. If DNT is enabled in your browser, no analytics data will be collected.

Opt-out: You can also opt out of analytics at any time by clicking Disable analytics for this browser. This sets a flag in your browser's local storage that prevents the analytics script from collecting data. To re-enable, clear your browser's local storage for this site.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in understanding how our website is used in aggregate, without infringing on your privacy. No consent is required as no personal data is processed.

Retention: Aggregated analytics data is retained indefinitely. No individual-level data is stored.

4. Payment Processing (Polar.sh)

Purchases are handled by Polar Software, Inc. (Polar.sh), who acts as the Merchant of Record for all transactions. When you click a purchase link, you are redirected to Polar's checkout page. Polar collects and processes your payment data (name, email address, payment details) directly.

Polar is legally responsible for the transaction, including VAT collection, consumer protection compliance, and payment processing. Your payment data is subject to Polar's Privacy Policy.

We receive from Polar only the information necessary to fulfill your license: your email address and license status. This data is processed to perform the contract with you.

Legal basis: Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract.

Retention: License and order data is retained for the duration of the contractual relationship and for the statutory retention periods under commercial and tax law (up to 10 years, Ss 147 AO, 257 HGB).

Third-country transfer: Polar Software, Inc. is based in the United States. Data transfers are covered by appropriate safeguards (Standard Contractual Clauses or equivalent). See Polar's Privacy Policy for details.

5. Desktop Application

The Curate desktop application operates primarily offline. Your audio files and sample library remain on your local computer at all times — we do not upload, access, or store your audio files.

When you activate or verify a license, the application contacts Polar's license validation API. This request transmits your license key and your IP address solely for the purpose of validating your license. No other personal data is collected.

Legal basis: Art. 6(1)(b) GDPR — processing is necessary for the performance of the license contract.

6. Contact

When you contact us by email, we process your email address and the content of your message solely to respond to your inquiry.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in responding to inquiries. If the inquiry relates to a contract, Art. 6(1)(b) GDPR applies.

Retention: Email correspondence is deleted once it is no longer necessary, unless statutory retention obligations apply.

7. Local Storage

This website stores your theme preference (light/dark mode) in your browser's localStorage. This is a purely functional, technical storage mechanism that does not contain any personal data and is not transmitted to any server. No consent is required (S 25(2) No. 2 TTDSG).

8. Your Rights

Under the GDPR, you have the following rights:

• Access (Art. 15): You may request information about the personal data we hold about you.
• Rectification (Art. 16): You may request correction of inaccurate data.
• Erasure (Art. 17): You may request deletion of your data, subject to statutory retention obligations.
• Restriction (Art. 18): You may request that we restrict processing of your data.
• Data portability (Art. 20): You may request a copy of your data in a structured, machine-readable format.
• Objection (Art. 21): You may object to processing based on legitimate interests (Art. 6(1)(f) GDPR).
• Withdrawal of consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights, contact us at info@curatesamples.com.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for North Rhine-Westphalia (Germany) is:

Landesbeauftragte fuer Datenschutz und Informationsfreiheit NRW (LfDI NRW)
Postfach 20 04 44
40102 Duesseldorf
www.ldi.nrw.de

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated date. We recommend checking this page periodically.