Privacy notice

Account data: name, email address and password hash. Passwords are hashed with a modern memory-hard algorithm and are never readable by us.

Order data: products purchased, price, VAT jurisdiction and invoice details. Card numbers are tokenised by our payment processor and never reach our servers.

Technical data: download timestamps, IP address and user agent, used strictly for licence enforcement, fraud detection and rate limiting.

To perform our contract with you: delivering files, issuing invoices and supporting refunds.

For legitimate interests: securing accounts, preventing licence abuse and improving discovery.

For legal obligations: retaining tax records for the period required in your jurisdiction.

Creators see aggregated sales data, buyer display name, country and purchase history for their own products only.

Creators never receive your email address, billing address or payment details.

Account and library data is kept while your account is open. Order and tax records are kept for seven years, as required by law.

Technical logs are retained for 90 days, then deleted or irreversibly aggregated.

You may request access, correction, export or erasure of your personal data from your account settings, or by contacting our privacy team.

Erasure requests remove account and marketing data; invoices required for tax compliance are retained in a restricted archive.

We use strictly necessary cookies for sessions, cart persistence and security. Analytics cookies are optional and off until you consent.

No advertising or cross-site tracking cookies are used anywhere on the marketplace.