Privacy Policy

Last updated 13 September 2026  /  Los Angeles, California

This policy explains what personal data Ridge Sound collects, why, and what you can do about it. The short version: we collect very little, we do not track you, and the plugins themselves collect nothing at all.

The plugin never connects to the internet. License verification happens entirely on your own computer using cryptography, not by checking in with a server. Our software makes no network connections, sends no telemetry, and reports nothing about you, your machine, or what you make with it.

1. Who is responsible

Ridge Sound, a sole proprietorship of Gil Abrams, Los Angeles, California, United States, is the data controller for the personal data described here. Contact: support@ridgesound.com.

Paddle.com Market Limited is our merchant of record and is a separate controller for the payment data it collects. Their privacy notice is at paddle.com/legal/privacy.

2. What we collect, and when

When you buy something

Paddle collects your name, email address, billing country, and payment details in order to take payment and work out the tax. We never receive your card details. What we receive from Paddle is limited to what we need to issue your license:

When we issue your license

We store a license record so you can re-download your license file later. It contains your transaction reference, the name that appears on the license, a one-way hash of your email address (a scrambled form we can match against but cannot read back), and the signed license file itself. This is held in Cloudflare Workers KV storage in encrypted form.

We keep license records indefinitely, because a customer who bought two years ago still needs to be able to get their license file back. You can ask us to delete yours. See section 6.

When you visit this website

This site runs the Meta Pixel, so that we can advertise Fold EQ on Facebook and Instagram and see whether those adverts lead to anything. It sets cookies and it tells Meta that a browser visited this site. It also reports three specific actions: opening the checkout, completing a purchase, and requesting the free trial. We send Meta no name, no email address and no payment details, but Meta is able to connect that visit to your Meta account if you have one.

We also run FirstPromoter, which powers our affiliate programme. If you arrive here from an affiliate’s link, it records that click so the person who referred you gets paid if you buy. It sets a cookie for that purpose and nothing else. If you arrive any other way it has nothing to record.

We do not run Google Analytics, and there is no other third-party tracker on this site.

You can stop it. Browser tracking protection, an ad blocker, or the "off-Facebook activity" controls in your Meta account settings all prevent this, and the site works normally either way. Nothing on this site requires the pixel to load.

The site is served by GitHub Pages and Cloudflare, who process standard server request logs (including IP addresses) for security and delivery. That happens at the infrastructure level and we do not build profiles from it.

If you open a checkout, Paddle's checkout software loads at that point and may set cookies necessary for the payment to work. That is governed by Paddle's privacy notice.

When you ask for the free trial

If you use the trial form we store the email address you gave us, the date, the country your request came from, and whether you ticked the marketing box. We use that address to send you the download link. That first email is a direct reply to your request, so we send it whether or not you tick anything.

The marketing box is separate and starts unticked. Tick it and we may also email you occasionally about updates and new plugins, no more than about once a month. Leave it unticked and you will only ever hear from us about the thing you asked for. Every marketing email carries an unsubscribe link, and you can ask us to remove you at any time by writing to support@ridgesound.com.

We keep trial records for as long as we run this business, and delete them on request.

When you ask for a licence link

If you use the licence lookup we take the email address you enter and ask Paddle whether it has any orders. If it does, we email you links to your licences. We do not tell the person filling in the form whether an address has orders or not, because that would let anyone check whether someone else has bought from us. The address is used for that lookup and that email, and is not added to any marketing list.

When you email us

We keep support correspondence so we have context if you write again. Our email is hosted by Google Workspace.

3. What we do not do

4. Legal basis

Where the GDPR applies, we rely on: performance of a contract for issuing and re-issuing your license; legal obligation for records Paddle must keep for tax; and legitimate interests for answering support email and keeping our infrastructure secure.

Advertising measurement through the Meta Pixel is a separate case. We rely on legitimate interests in understanding whether our advertising works. If you would rather it did not apply to you, the controls above stop it, and you can object at any time by writing to support@ridgesound.com.

5. Who else processes your data

These providers act on our behalf or as independent controllers for their own part of the process. We do not add anyone else without updating this page.

6. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent. Residents of California have rights under the CCPA/CPRA, including the right to know and the right to delete; we do not sell or share personal information as those terms are defined there.

To exercise any of these, email support@ridgesound.com. We will respond within 30 days. We will not ask you for anything beyond what we need to confirm the request is really yours.

One practical note: if you ask us to delete your license record, you lose the ability to re-download your license file from the portal. Keep a backup of the file first. The plugin will keep working. It verifies offline and does not need us.

7. International transfers

We are based in the United States and our providers operate globally. Where data moves out of the European Economic Area or the United Kingdom, our providers rely on Standard Contractual Clauses or equivalent safeguards.

8. Security

License records are stored with a major infrastructure provider and served only over HTTPS. The private key used to sign licenses is held offline and never leaves our control. Email addresses in license records are stored as one-way hashes rather than in readable form.

9. Children

Our products are not directed at children under 13 and we do not knowingly collect their data.

10. Changes

If this policy changes materially we will update the date at the top of this page. Continued use of the site after a change means you accept the updated policy.

11. Contact

Privacy questions, requests, or complaints: support@ridgesound.com. If you are in the EEA or UK and are not satisfied with our response, you have the right to complain to your local supervisory authority.