Privacy Policy

Controller

Name / company

Luis Fritsch

Address

Wallensteinstraße 41/16, 1200 Vienna, Austria

Contact

business@gameplayautoreverb.com

Website and server log data

The website is provided through Cloudflare Pages by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When the website is accessed, Cloudflare processes technically necessary access data, in particular the IP address, date and time, requested file, referrer, and browser and device information. The purpose is the secure, stable, and fast delivery of the website. The legal basis is our legitimate interest in operating and securing the website under Article 6(1)(f) GDPR.

Cloudflare Pages uses a globally distributed network; processing is therefore not limited to a specific server location within the European Economic Area. We do not intend to separately retain complete HTTP access logs on a permanent basis. Cloudflare disables retrievable HTTP log retention by default. According to Cloudflare's current documentation, live Pages Functions logs are not stored persistently. If we enable additional log retention or persistent Workers Logs in the future, this policy will be updated accordingly.

More information: Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.

Installer, component downloads, and updates through GitHub

The free web installer is supplied through GitHub Releases. During installation, it automatically downloads the required app and runtime packages from GitHub Releases; existing current runtime components are not downloaded again. If ATK Audio for OBS is missing, the installer automatically downloads its package from the third party's public GitHub repository and then launches its separate installer. You can also manually check for updates in the app and download an available installer.

For these connections, GitHub processes data including your IP address, date and time, the requested resource, and browser or software information. The purpose is to install, supply, and update the software and its required components. The legal basis is performance of a contract under Article 6(1)(b) GDPR. GitHub also processes data under its own responsibility when providing its services.

More information: GitHub General Privacy Statement. Download link: GitHub Releases.

Pro purchase through Lemon Squeezy

Pro is purchased through Lemon Squeezy, operated by Sold through Link, LLC (formerly Lemon Squeezy LLC), USA. During checkout, Lemon Squeezy processes data including your name, email address, billing address and country, payment details, tax information, order and customer numbers, and license key. Full payment credentials, such as complete card numbers, are processed by Lemon Squeezy and its payment providers and are not disclosed to us. Lemon Squeezy acts as the Merchant/Seller of Record for payment, taxes, invoicing, refunds, and chargebacks.

We receive the purchase and license information made available to us from Lemon Squeezy and process it where necessary for support, license activation, proof of entitlement, and compliance with legal obligations. Depending on the processing, the legal basis is performance of a contract under Article 6(1)(b) GDPR or compliance with a legal obligation under Article 6(1)(c) GDPR.

Before redirecting to checkout, the website also sends the identifier of the applicable legal-text version, confirmation of the requested immediate start of digital delivery, acknowledgement of the loss of the right of withdrawal, and the time of that confirmation as custom checkout data. Lemon Squeezy links this information to the order. The purposes are to carry out the purchase and to document the agreed terms and confirmations. The legal bases are performance of a contract under Article 6(1)(b) GDPR and our legitimate interest in reliable contract records and in establishing, exercising, or defending legal claims under Article 6(1)(f) GDPR.

More information: Lemon Squeezy Privacy Policy and Lemon Squeezy Data Processing Agreement.

License activation in the app

On first activation, the app transmits the license key and a device label composed of the Windows user name and computer/host name to the Lemon Squeezy licensing interface. Lemon Squeezy returns an instance ID and license information. On every subsequent app launch, the license key and instance ID are transmitted to verify the saved activation. Technically necessary connection data such as the IP address and request time are also generated.

The license key, instance ID, and license status are stored locally in the app configuration; the license key is protected using Windows DPAPI. Pro features remain locked without a successful online verification. The purpose is to activate and verify the Pro license. The legal basis is performance of a contract under Article 6(1)(b) GDPR.

Model downloads through Hugging Face

The app requires a local AI model for scene detection. If the required model is not already present on your device, it is downloaded automatically from the Hugging Face Hub when the app starts and is then cached locally. Additional models you select are downloaded from the same service. During a download, Hugging Face may process technical connection data such as your IP address, request time, requested files, and device or software information. No audio, screenshot, or video content from the app is transmitted to Hugging Face. The purpose is to provide model files required for the app's local functionality. The legal basis is performance of a contract under Article 6(1)(b) GDPR.

More information: Hugging Face Privacy Policy.

Support

When you contact support, we process your email address, message, purchase or license information, and any technical details you provide. The purpose is to handle your request. Depending on the request, the legal basis is performance of a contract, steps taken before entering into a contract, or our legitimate interest in providing support and resolving errors under Article 6(1)(b) or (f) GDPR.

Messages sent to our addresses under gameplayautoreverb.com, in particular support@gameplayautoreverb.com and business@gameplayautoreverb.com, are forwarded through Cloudflare Email Routing to a Proton Mail mailbox. Cloudflare processes the message for forwarding and states that it does not permanently store or access the content of routed emails. Messages and email metadata are stored in the Proton Mail mailbox. Replies are currently sent through Proton Mail and may therefore display a different Proton sender address.

More information: Cloudflare Email Routing and Proton Mail Privacy Policy.

Local processing in the app

Through your local OBS connection, the app retrieves images from the selected OBS source and analyses them using the locally stored AI model to control suitable reverb settings. OBS connection data, selected sources, app settings, and model files are also stored only on your device. A stored OBS password is protected using Windows DPAPI. No audio recordings, screenshots, or video content are transmitted to us, Lemon Squeezy, or Hugging Face.

The microphone demo on the website processes a short sample exclusively in your browser's memory. The recording remains there until you reset the demo or leave or reload the page and is not uploaded.

Cookies, local storage, and tracking

We do not set cookies ourselves on the website and do not use advertising or analytics tracking. Depending on the security features enabled, Cloudflare may use technically necessary cookies. The app stores individual interface and configuration values locally on your device. If non-essential cookies, web analytics, or marketing pixels are added later, an appropriate consent solution will be implemented first.

Recipients and service providers

• Cloudflare for hosting through Cloudflare Pages, content delivery, DNS, and security functions.
• Cloudflare Email Routing for forwarding incoming emails.
• Proton AG for the email mailbox and sending emails.
• GitHub for supplying the installer, automatic app, runtime, and ATK Audio downloads, and manual update checks.
• Lemon Squeezy for checkout, payment, invoicing, refunds, license keys, and license verification.
• Hugging Face for downloading AI model files.

Transfers to third countries

Cloudflare, GitHub, Lemon Squeezy, and Hugging Face are based in the United States or may process data there. Cloudflare and GitHub state that relevant transfers rely in particular on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. The Lemon Squeezy Data Processing Agreement generally provides for the EU Standard Contractual Clauses for transfers to third countries. Hugging Face states that it processes data in the United States and uses appropriate safeguards; processing carried out by Hugging Face under its own responsibility is governed by its privacy policy. The privacy policies and agreements linked above provide further information and make the relevant safeguards available for review.

Proton AG is based in Switzerland, which is covered by an adequacy decision of the European Commission. According to Proton, the servers used for Proton Mail are located exclusively in Switzerland, Germany, or Norway. The Proton Data Processing Agreement provides for adequacy decisions, standard contractual clauses, or other permitted safeguards for any necessary further transfers.

Retention periods

Personal data is stored only for as long as necessary for the stated purposes or for as long as statutory retention obligations apply. We do not store our own complete HTTP access logs. Under the Cloudflare Data Processing Addendum, Cloudflare processes personal data until the agreement ends or until processing is no longer necessary for performance of the agreement, whichever occurs first.

Ordinary support requests and other general correspondence are deleted no later than twelve months after they have been finally resolved. Recognisable spam and obviously misdirected messages are deleted once identified. This does not affect purchase and license information that is required separately under the criteria below. If a message contains business records, receipts, or correspondence relevant for tax or accounting purposes, only the necessary parts are retained for seven years from the end of the relevant calendar year and, where necessary, for longer while administrative or court proceedings are pending.

Purchase and license information, in particular the order association, license key, license status, activation data, documented legal-text version, and confirmations relating to immediate digital delivery, is retained for the duration of the indefinite license and thereafter for as long as it is required for license activation, support, proof of entitlement, or the establishment, exercise, or defence of legal claims. This makes it possible to identify and support an existing license even after a long period. If a license is finally terminated or refunded, this data is deleted or restricted once no statutory retention duties or potential claims require otherwise. To the extent that individual records form part of our own tax or accounting records, they are retained for seven years from the end of the relevant calendar year.

According to Proton, deleted data may remain in encrypted offline backups for up to 30 days. Data processed by GitHub, Lemon Squeezy, or Hugging Face under their own responsibility is retained according to the criteria stated in their privacy policies linked above.

App settings and license data stored locally remain on your device until you remove the associated app data or they are overwritten with new information. Model files remain in the local cache until you delete them in the app or from the cache. A microphone sample recorded in the browser is held only temporarily in memory as described above. Valid erasure or objection requests are handled without undue delay, independently of the annual deletion cycle.

Required data and automated decisions

Technical access data is required to access the website. The data requested during checkout is required for the purchase and payment processing; the license key, device label, and instance ID are required to activate and continuously verify the Pro license. Contacting us is voluntary, but we cannot reply by email without a reachable email address.

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR. The automated license check only verifies whether a valid activation exists and then technically unlocks or locks the Pro features. If a valid license is rejected in error, you can contact us.

Your rights

Under the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw consent at any time with effect for the future. You can use the contact address above to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority.