privacy policy
Last updated: 14 November 2026
This policy explains what personal data we process when you visit this site, buy the MinimalLyric Kit and activate your license, and what rights you have under the GDPR (Regulation (EU) 2016/679).
1. who is responsible
2. what we collect and why
| Where | Data | Purpose | Legal basis |
|---|---|---|---|
| License move form | Purchase email, new Machine ID, TikTok handle (optional) | Move your license to a new PC | Contract (art. 6(1)(b)) |
| Instagram DM | Your Instagram profile, messages, Machine ID | Answer you and issue your license | Contract (art. 6(1)(b)) |
| Purchase via Gumroad | Name, email, country, order details (we do not see your card details) | Deliver the Kit, match activations to purchases, handle refunds | Contract (art. 6(1)(b)); legal obligations for accounting (art. 6(1)(c)) |
| Activation (installer) | License key, Machine ID, TikTok handle; Gumroad returns your name, email and order number | Check the subscription, sign a license for your PC, put your handle on your videos | Contract (art. 6(1)(b)) |
| Making a video (build server) | Song settings, title, lyrics, word timings, beat grid, song length, license, Machine ID, IP address. Never the audio. | Lay out the video, check the license and subscription, prevent abuse (rate limits, request log) | Contract (art. 6(1)(b)); legitimate interest in security (art. 6(1)(f)) |
| License records | Name, handle, Machine ID, license date | Prevent license sharing, move licenses when you change PC | Contract (art. 6(1)(b)); legitimate interest in protecting the Kit (art. 6(1)(f)) |
| Visiting the site | IP address, browser data in server logs | Run and secure the site | Legitimate interest (art. 6(1)(f)) |
The Machine ID is a short code derived from your computer's identifier. It does not contain your name, files or hardware details.
The Kit runs on your computer: audio, stems and rendered videos never leave it. Only the layout step runs on our build server, which receives the data listed above for each video. The build server keeps the lyrics only while it builds the page; its request log keeps the time, IP address, license, song title and preset.
3. who receives the data
- Gumroad, Inc. (USA): payment, checkout, memberships, license keys and file delivery, as merchant of record under its own privacy policy.
- DigitalOcean (server in Frankfurt, Germany): hosts our build server.
- Meta Platforms (Instagram): if you contact us by DM.
- Hosting provider of this site: server logs.
- Email provider (Microsoft Outlook) used to receive license move requests and answer you.
- Our accountant and public authorities, where the law requires it.
Some of these providers are outside the European Economic Area. Transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses, as offered by each provider.
4. how long we keep it
- Activation requests and license records: as long as your license is active, so we can re-issue it.
- Purchase and accounting records: for the period required by applicable accounting and tax law.
- Server logs: for a short period set by the hosting provider.
5. your rights
You can ask for access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. Contact us using the details above. We reply within one month.
You can also complain to the data protection authority in the country where you live or work, or where you think the breach happened. In the EU, the list of authorities is on the European Data Protection Board website.
We do not make automated decisions with legal effects about you, and we do not sell your data.
6. security
Licenses are signed with a private key that is never shared. Activation data is kept only in our own accounts and files, with access limited to the seller.
7. changes
We will update this page if what we collect changes, and change the date at the top.