Privacy Policy

Auburn Sounds takes your privacy seriously. This policy explains what little we collect, why, on what legal basis, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) and the French Loi Informatique et Libertés.

The Company

Guillaume Piolat EI, trading as Auburn Sounds ("the Company"), is a French sole proprietorship (« entreprise individuelle ») founded in 2015 and based in Grenoble, France. The Company is the data controller for the processing described here.

  • SIREN: 811428168
  • RCS: 811428168 R.C.S. Grenoble
  • VAT: FR64811428168
  • Address: 16 rue des Clercs, 38000 Grenoble, France
  • Privacy contact: [email protected]

The Company is a one-person business and is not required to appoint a Data Protection Officer, so it has not.

The short version

We have no customer database. We run no analytics, advertising, tracking pixels, or profiling of any kind. The website stores nothing about its visitors. The only personal data we actively hold is the email address of people who signed up for our newsletter.

What we collect, and why

Visiting the website

The website is hosted by OVH SAS (Roubaix, France) and served through the Cloudflare content delivery network (CDN). To deliver pages and block attacks and abuse, these providers automatically process technical data such as your IP address, the page requested, the date and time, your browser's user-agent, and referral information.

  • Why: to serve the website and keep it secure and online.
  • Legal basis: our legitimate interest in running and protecting the website (GDPR art. 6(1)(f)).
  • Retention: we keep no server logs of our own and build no profiles. OVH and Cloudflare keep short-lived technical logs under their own privacy policies. Cloudflare may also set a strictly-necessary security cookie (see Cookies below).

Newsletter

If you subscribe to our newsletter, we collect your email address only, with double opt-in: nothing is stored until you confirm by clicking a link in a first email.

  • Why: to send you Auburn Sounds news and product updates.
  • Legal basis: your consent (GDPR art. 6(1)(a)), which you can withdraw at any time using the unsubscribe link in every email, or by writing to us.
  • Processor: Brevo (Brevo SAS, France) stores the address and sends the emails on our instructions under a data processing agreement. The subscription form is hosted by Brevo.
  • Retention: until you unsubscribe or ask us to delete the address, after which it is removed.

Embedded YouTube videos

Some product pages contain a YouTube video. The video is not loaded until you click play: until then the page shows only a still preview image. Displaying that preview, and playing the video, cause your browser to contact YouTube (Google Ireland Limited / Google LLC), which then receives your IP address and, once you press play, may set cookies on your device.

  • Why: to let you watch a demonstration video without leaving the page.
  • Legal basis: your consent, given by clicking play (GDPR art. 6(1)(a); ePrivacy).
  • Processing by Google: governed by Google's Privacy Policy. We have no control over what Google does with this data.

Buying a Full Edition

Full Editions are sold by third-party resellers, most commonly itch.io. Each reseller acts as Merchant of Record and as an independent data controller for your purchase: payment, billing and refund data is handled entirely by them, under their own privacy policies. We never see your payment details and keep no order database.

Some resellers pass us nothing about the buyer. itch.io makes the purchaser's email address visible to us as the plug-in's developer; we do not copy it into any system of our own, we do not use it, and under itch.io's terms we are not permitted to contact you with it.

  • Legal basis: our legitimate interest in identifying our customers for support, accounting and legal obligations (GDPR art. 6(1)(f)), limited to the access the reseller grants.

Contacting us

If you email us, we receive your email address and whatever you put in the message. We use it only to answer you (legitimate interest, GDPR art. 6(1)(f)) and delete old correspondence periodically.

Cookies

The Auburn Sounds website sets no analytics, advertising or tracking cookies, and shows no cookie banner because none is needed for what it does. The only cookies you may encounter are:

  • Cloudflare security cookies
  • YouTube cookies, and only if you play an embedded video

Recipients and processors

We do not sell or rent personal data. It is shared only with:

  • OVH SAS (France) - website hosting.
  • Cloudflare, Inc. (USA) - content delivery and security.
  • Brevo SAS (France) - newsletter delivery, if you subscribe.
  • YouTube / Google Ireland Limited & Google LLC (Ireland / USA) - only if you play an embedded video.
  • itch.io and other resellers - independent controllers for your purchases.

International transfers

OVH and Brevo process data within the European Union. Cloudflare and Google may process data in the United States; those transfers are covered by the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

How long we keep data

  • Newsletter email address: until you unsubscribe or request deletion.
  • Email correspondence: as long as needed to handle your request, then deleted periodically.
  • Website / CDN technical logs: none kept by us; short-term retention by OVH and Cloudflare under their own policies.
  • Purchase data: held by the reseller under its own policy; nothing stored by us.

Your rights

Under the GDPR you have the right to: access your data, have it corrected, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw any consent you have given (without affecting processing already carried out). You may also give instructions on what happens to your data after your death.

To exercise any of these, email [email protected]. We will reply within one month (longer only if the request is complex). For data held by a reseller such as itch.io, please also contact them directly, as they are the controller for your purchase.

Complaints

If you believe your data is being handled improperly, you may lodge a complaint with the French supervisory authority:

CNIL - 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France - www.cnil.fr/fr/plaintes

Automated decisions

We carry out no automated decision-making, scoring or profiling.

Changes to this policy

We may update this policy; the current version is always the one published on this page.

 

Last updated 10th September 2026.