Gameplay AutoReverb Intelligent Immersion Download

Privacy Policy

Dated September 6, 2026.

Controller

Name / company
Luis Fritsch
Address
Wallensteinstraße 41/16, 1200 Vienna, Austria

Website and server log data

The website is provided through Cloudflare Pages by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When the website is accessed, Cloudflare processes technically necessary access data, in particular the IP address, date and time, requested file, referrer, and browser and device information. The purpose is the secure, stable, and fast delivery of the website. The legal basis is our legitimate interest in operating and securing the website under Article 6(1)(f) GDPR.

Cloudflare Pages uses a globally distributed network; processing is therefore not limited to a specific server location within the European Economic Area. We do not intend to separately retain complete HTTP access logs on a permanent basis. Cloudflare disables retrievable HTTP log retention by default. According to Cloudflare's current documentation, live Pages Functions logs are not stored persistently. If we enable additional log retention or persistent Workers Logs in the future, this policy will be updated accordingly.

More information: Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.

Installer, component downloads, and updates

The free web installer is supplied through GitHub Releases. During installation, it primarily downloads the required app and runtime packages through Cloudflare R2; if a primary download fails, designated packages may instead be downloaded through GitHub Releases or the official PyTorch source. Existing current runtime components are not downloaded again. If ATK Audio for OBS is missing, the installer automatically downloads its package from the third party's public GitHub repository and then launches its separate installer. When the app starts, it automatically checks GitHub Releases for an available update. Downloading and launching an available installer requires your confirmation.

For these connections, Cloudflare, GitHub, or the relevant download source processes data including your IP address, date and time, the requested resource, and browser or software information. The purpose is to install, supply, and update the software and its required components. The legal basis is performance of a contract under Article 6(1)(b) GDPR. The providers also process data under their own responsibility when providing their services.

To measure reach, we store the application version and download time rounded to the minute, but no IP address or user identifier. The legal basis is our legitimate interest in reach measurement under Article 6(1)(f) GDPR.

More information: Cloudflare Privacy Policy and GitHub General Privacy Statement. Download link: GitHub Releases.

Pro purchases through Paddle

To display the localised Pro price on the home page, Paddle.js is loaded from Paddle and a price request is sent to Paddle. Paddle therefore receives technical connection data, in particular your IP address and browser information, even before you open checkout. The purpose is to display the price applicable to your location; the legal basis is our legitimate interest in accurate pricing under Article 6(1)(f) GDPR.

Pro purchases are processed by Paddle as Merchant of Record and authorised reseller. During checkout, Paddle may process data including your name, email address, billing address and country, payment details, tax information, and order and customer numbers. Full payment credentials, such as complete card numbers, are processed by Paddle and its payment providers and are not disclosed to us. Paddle is responsible for payment, taxes, invoicing, refunds, and chargebacks.

After a completed purchase, Paddle sends transaction, customer, product, and checkout metadata to our Cloudflare Worker. The Worker obtains the purchaser's email address from Paddle, creates the license through Keygen, stores the transaction-to-license assignment in Cloudflare D1, and instructs Resend to send the license key and contractual PDF by email. A random purchase-session identifier links the checkout to the success page; only its hash is stored, while the browser receives the secret in a short-lived, secure, HttpOnly cookie. These data are processed for fulfillment, support, license activation, proof of entitlement, and compliance with legal obligations. Depending on the processing, the legal basis is performance of a contract under Article 6(1)(b) GDPR or compliance with a legal obligation under Article 6(1)(c) GDPR.

Where required for the purchase, the applicable legal-text version, confirmation of the requested immediate start of digital delivery, acknowledgement of the loss of the right of withdrawal, and the time of that confirmation may be linked to the order. The purposes are to carry out the purchase and to document the agreed terms and confirmations. The legal bases are performance of a contract under Article 6(1)(b) GDPR and our legitimate interest in reliable contract records and in establishing, exercising, or defending legal claims under Article 6(1)(f) GDPR.

Further information is available in the Paddle Privacy Notice, Paddle Buyer Terms, and Paddle Refund Policy. The applicable Paddle contracting entity is identified during checkout and on the purchase receipt.

License activation in the app

License generation and verification are provided by Keygen LLC, USA. On first activation, the app transmits the license key and a SHA-256 fingerprint derived from a locally generated random device label to Keygen. The fingerprint contains neither the Windows user name nor the computer/host name and is not derived from hardware identifiers. Keygen stores the pseudonymous fingerprint, random device label, platform, license assignment, and activation information. On every subsequent app launch, the license key and the same fingerprint are transmitted to validate the activation and perform the required license check-in. Technically necessary connection data such as the IP address and request time are also generated.

The license key, Keygen license ID, random device label, and license status are stored locally in the app configuration; the license key is protected using Windows DPAPI. Pro features remain locked without a successful online verification. The purpose is to activate and verify the Pro license. The legal basis is performance of a contract under Article 6(1)(b) GDPR. Further information: Keygen Privacy Policy.

License and purchase-document email through Resend

We use Resend, a service of Plus Five Five, Inc., USA, to send the separate fulfillment email after a successful Pro purchase. Resend receives the purchaser's email address, license key, Paddle transaction identifier, email content, and the contractual PDF attachment. Delivery and event metadata such as recipient, sending time, delivery status, and technical connection data may also be processed. The purpose is to deliver the purchased license and the versioned contractual documents. The legal basis is performance of a contract under Article 6(1)(b) GDPR and, for documenting delivery, our legitimate interest under Article 6(1)(f) GDPR. Further information: Resend Privacy Policy.

Model downloads through Hugging Face

The app requires a local AI model for scene detection. If the required model is not already present on your device, it is downloaded automatically from the Hugging Face Hub when the app starts and is then cached locally. Additional models you select are downloaded from the same service. During a download, Hugging Face may process technical connection data such as your IP address, request time, requested files, and device or software information. No audio, screenshot, or video content from the app is transmitted to Hugging Face. The purpose is to provide model files required for the app's local functionality. The legal basis is performance of a contract under Article 6(1)(b) GDPR.

More information: Hugging Face Privacy Policy.

Support

When you contact support, we process your email address, message, purchase or license information, and any technical details you provide. The purpose is to handle your request. Depending on the request, the legal basis is performance of a contract, steps taken before entering into a contract, or our legitimate interest in providing support and resolving errors under Article 6(1)(b) or (f) GDPR.

Messages sent to our addresses under gameplayautoreverb.com, in particular support@gameplayautoreverb.com and business@gameplayautoreverb.com, are forwarded through Cloudflare Email Routing to a Proton Mail mailbox. Cloudflare processes the message for forwarding and states that it does not permanently store or access the content of routed emails. Messages and email metadata are stored in the Proton Mail mailbox. Replies are currently sent through Proton Mail and may therefore display a different Proton sender address.

More information: Cloudflare Email Routing and Proton Mail Privacy Policy.

Local processing in the app

Through your local OBS connection, the app retrieves images from the selected OBS source and analyses them using the locally stored AI model to control suitable reverb settings. OBS connection data, selected sources, app settings, and model files are also stored only on your device. A stored OBS password is protected using Windows DPAPI. No audio recordings, screenshots, or video content are transmitted to us, the checkout or licensing providers, or Hugging Face.

The microphone demo on the website processes a short sample exclusively in your browser's memory. The recording remains there until you reset the demo or leave or reload the page and is not uploaded.

Cookies, local storage, and tracking

To display your license key securely, our Cloudflare Worker sets the technically necessary gar_purchase_claim cookie when you start the purchase process. It contains a random secret identifying your purchase session, is only available over HTTPS, and cannot be read by JavaScript (Secure and HttpOnly). It expires after 24 hours; starting another purchase replaces it. We do not use our own advertising or analytics tracking. Depending on the security features enabled, Cloudflare may use technically necessary cookies. The app stores individual interface and configuration values locally on your device. If non-essential cookies, web analytics, or marketing pixels are added later, an appropriate consent solution will be implemented first.

Recipients and service providers

  • Cloudflare for hosting, content delivery, software downloads, reach measurement, DNS, and security functions.
  • Cloudflare Email Routing for forwarding incoming emails.
  • Proton AG for the email mailbox and sending emails.
  • GitHub for supplying the installer, designated fallback downloads, ATK Audio downloads, and the automatic update check when the app starts.
  • Paddle for checkout, payment, invoicing, refunds, and transaction-related buyer support.
  • Keygen LLC for license generation, device activation, check-in, and license verification.
  • Plus Five Five, Inc. (Resend) for sending license keys and contractual documents by email.
  • Hugging Face for downloading AI model files.

Transfers to third countries

Cloudflare, GitHub, Hugging Face, Keygen, and Resend are based in the United States or may process data there. Cloudflare and GitHub state that relevant transfers rely in particular on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. Keygen states that it relies on the EU Standard Contractual Clauses for relevant transfers. Information about the safeguards used by the other providers is available in their respective privacy notices. Paddle may also process data outside the EEA; information about Paddle's processing and safeguards is available in its Privacy Notice.

Proton AG is based in Switzerland, which is covered by an adequacy decision of the European Commission. According to Proton, the servers used for Proton Mail are located exclusively in Switzerland, Germany, or Norway. The Proton Data Processing Agreement provides for adequacy decisions, standard contractual clauses, or other permitted safeguards for any necessary further transfers.

Retention periods

Personal data is stored only for as long as necessary for the stated purposes or for as long as statutory retention obligations apply. We do not store our own complete HTTP access logs. Individual count timestamps are deleted after 90 days; aggregate download totals are retained for long-term reach comparisons. Under the Cloudflare Data Processing Addendum, Cloudflare processes personal data until the agreement ends or until processing is no longer necessary for performance of the agreement, whichever occurs first.

Ordinary support requests and other general correspondence are deleted no later than twelve months after they have been finally resolved. Recognisable spam and obviously misdirected messages are deleted once identified. This does not affect purchase and license information that is required separately under the criteria below. If a message contains business records, receipts, or correspondence relevant for tax or accounting purposes, only the necessary parts are retained for seven years from the end of the relevant calendar year and, where necessary, for longer while administrative or court proceedings are pending.

Purchase and license information, in particular the order association, license key, license status, activation data, documented legal-text version, and confirmations relating to immediate digital delivery, is retained for the duration of the indefinite license and thereafter for as long as it is required for license activation, support, proof of entitlement, or the establishment, exercise, or defence of legal claims. This makes it possible to identify and support an existing license even after a long period. If a license is finally terminated or refunded, this data is deleted or restricted once no statutory retention duties or potential claims require otherwise. To the extent that individual records form part of our own tax or accounting records, they are retained for seven years from the end of the relevant calendar year.

According to Proton, deleted data may remain in encrypted offline backups for up to 30 days. Data processed by GitHub, Hugging Face, Paddle, Keygen, or Resend under their own responsibility is retained according to the criteria stated in their respective privacy policies.

App settings and license data stored locally remain on your device until you remove the associated app data or they are overwritten with new information. Model files remain in the local cache until you delete them in the app or from the cache. A microphone sample recorded in the browser is held only temporarily in memory as described above. Valid erasure or objection requests are handled without undue delay, independently of the annual deletion cycle.

Required data and automated decisions

Technical access data is required to access the website. The data requested during checkout is required for purchase, payment, license generation, and email delivery; the license key, pseudonymous fingerprint, random device label, and Keygen license ID are required to activate and continuously verify the Pro license. Contacting us is voluntary, but we cannot reply by email without a reachable email address.

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR. The automated license check only verifies whether a valid activation exists and then technically unlocks or locks the Pro features. If a valid license is rejected in error, you can contact us.

Your rights

Under the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw consent at any time with effect for the future. You can use the contact address above to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority.