Privacy

Account data. Your email address, and a display name and profile photo if you add one. If you sign in with Google, we receive your email, name and profile picture from Google.

Purchase data. Which assets you bought, the amount and the order reference. Card details never reach us; Polar handles payment and holds that information.

Download data. Which files you downloaded, when, and the IP address of the request. This is what enforces daily limits and protects the library from bulk copying.

Messages. Anything you send through the contact form, plus our replies, so the conversation stays readable for both sides.

Newsletter. Only if you ask for it. We store the email address you entered and the date you subscribed, so we can tell you when new assets land. You can unsubscribe from any email, or switch it off in settings. Opting out never affects your library or purchases.

To give you an account and a permanent library, to deliver what you bought, to apply free download limits fairly, to answer your messages, and to see which assets are worth making more of. Aggregate numbers, like how many downloads an asset gets, are never tied back to you publicly.

In legal terms: account, order and download data is processed to perform our contract with you; download logs and IP addresses rest on our legitimate interest in preventing abuse; newsletter emails are sent only with your consent, which you can withdraw at any time.

These companies handle data on our behalf, each under their own privacy terms:

• · Supabase (EU, Frankfurt) · accounts, database, authentication
• · Cloudflare R2 · file and image storage
• · Polar · checkout, payments, tax, receipts
• · Vercel · hosting and delivery
• · Google · only if you choose to sign in with Google

Some of these providers operate outside the EEA, which means your data may be processed in other countries, including the United States. They handle it under the safeguards their own terms provide, such as standard contractual clauses.

We don't sell data, rent it out, or share it with advertisers.

We use cookies for one thing: keeping you signed in. There are no advertising or tracking cookies, and no cross-site profiling. Clearing them signs you out, nothing else breaks.

Account, purchase and library data stays while your account exists, because that's what keeps your downloads available. Order records are kept longer where accounting rules require it. Download logs are pruned once they're no longer useful for limits and abuse checks. Messages are kept until you ask us to remove them.

You can see and edit your name and photo in settings, and your purchases and messages are visible in your account at any time.

You can ask for a copy of your data, a correction, or deletion of your account. Write to us through the contact page and we'll act within 30 days. Deleting the account removes your library, favourites, messages and download history; purchase records may be retained where the law requires.

If you're in the EU, UK or Turkey, you also have the right to complain to your local data protection authority.

The site isn't aimed at children, and accounts are meant for people aged 18 or over.

If this policy changes, the date at the top changes with it. Material changes will be announced on the site.

Questions about your data, or a request you'd like handled, go through the contact page. It reaches the person responsible for odrmlab.com directly.