Privacy Policy
What we collect when you browse, buy or get in touch, and nothing more. We don't sell your data, and we don't use advertising trackers.
Last updated 23 October 2026
Who we are
Zynthion is run from Norway and is the data controller for the information described here. Questions or requests go to info@zynthion.com.
What we collect, and why
- Purchases. Your email address, what you bought, the price and the payment reference. We need these to deliver your files, send your receipt and handle any questions about the order. Card details are entered on Stripe's page and never reach us.
- Accounts. If you create an account: your email address, name and a password, or your Google sign-in. Used to keep your purchases and downloads in one place.
- Service orders. For mixing, mastering and production: the brief you write, your project title, the audio files you upload, and the messages exchanged about the order. Used only to do the work.
- Enquiries. Your name, email address and message when you use the contact form, so we can reply.
- The free pack list. Your email address, if you ask for the free pack. Used to send it and the occasional new release. Unsubscribe at any time.
- Visit statistics. We count page views and a few actions (playing a demo, adding to cart, starting checkout) to see what works. We use Vercel Web Analytics and our own count, stored in our database. Neither sets cookies, stores your IP address or identifies you: the only link between page views is a random number that disappears when you close the tab, plus the country and the site that sent you.
Stored in your browser
If you shop without an account, your cart is kept in your browser's local storage so it survives a page reload. It never leaves your device until you check out. We use no advertising or tracking cookies.
Who processes it for us
We rely on a few providers, each handling only what its job needs:
- Stripe: payments
- Google Firebase: database, accounts and file storage
- Resend: sending receipts, download links and replies
- Vercel: hosting and visit statistics
- Cloudflare: domain and incoming email
Some of these providers process data outside the EEA. Where they do, it is covered by the European Commission's standard contractual clauses or an equivalent safeguard.
How long we keep it
Order and payment records are kept for as long as Norwegian bookkeeping law requires, currently five years. Account data is kept until you delete your account. Enquiries, service files and the free pack list are kept while they're useful to you and deleted on request.
Your rights
You can ask to see, correct, export or delete what we hold about you, or object to how we use it. Write to info@zynthion.com and we'll reply within 30 days. If you think we've handled your data wrongly, you can complain to Datatilsynet, the Norwegian Data Protection Authority.
Security
Everything is sent over encrypted connections. Our database is closed to the public and only reachable by our own servers and signed-in owners of the data. Download links are single-use and expire.
