Privacy Policy

1. Controller and contact

PureAlbum is a paid software product offered by the PureAlbum project. The project is the controller of personal data handled directly by PureAlbum. Contact: hello@purealbum.net.

2. Data we process

• Purchases: email address, order and receipt identifiers, product, price, currency, purchase date, refund status, and update-entitlement date received from the merchant of record.
• Trials and delivery: email address, download token, delivery timestamps, and whether and when a download link was first or most recently used.
• Optional product updates: email address, language, subscription source and consent-text version, pending, confirmed, or unsubscribed status, and request, confirmation, and unsubscribe timestamps.
• Licensing: license key, device fingerprint, optional device name, activation/deactivation timestamps, license status, and update entitlement. A fingerprint is a one-way device identifier; we do not receive the underlying disk serial or MAC address.
• Support: messages and diagnostic information you choose to send.
• First-party website analytics: random visitor and session identifiers, referring and campaign source, landing page, limited trial and pre-payment checkout events, and coarse country and first-level region codes.
• App Usage & diagnostics: In App versions that include Usage & diagnostics, the App sends a random non-account-linked installation ID, App and schema versions, coarse license state, limited product milestones, and daily aggregate successful playback counts by path. The App does not submit location data. Our receiver derives an approximate country and first-level region from hosting connection metadata; VPNs, proxies, and mobile networks can make that approximation inaccurate. The installation ID is not linked to your account, email address, order, license key, or device fingerprint.
• Technical records: IP address, request time, user agent, and security/error logs that may be recorded by our hosting, email, download-storage, and merchant providers.
• Preferences: a locale cookie used only to remember language preference.

3. What stays on your device

PureAlbum is self-hosted. We do not receive your music files, audio or media content, library metadata, album, artist, or track names or identifiers, playlists, queues, file paths or URIs, individual listening history, search terms, NAS credentials, renderer names or addresses, or detailed logs through normal product use or usage analytics. Usage analytics receives only the limited milestones and aggregate counts described in this policy. Online license activation separately sends only the license key, device fingerprint, and an optional device name. Offline activation is available.

4. Why we process data

• Perform the purchase or trial contract: deliver downloads, issue and validate licenses, provide updates, recover access, and process refunds.
• Operate and secure the service: prevent token abuse, enforce activation limits, investigate errors, and protect accounts and infrastructure.
• Measure first-party website source, aggregate trial and delivery outcomes, pre-payment checkout intent, and limited App usage. Website session analytics ends at accepted Continue-to-payment intent and is not linked to completed orders.
• Comply with legal, accounting, tax, fraud-prevention, and consumer-protection obligations.
• Respond to support and rights requests.

Where GDPR-style legal bases apply, these purposes rely on contract performance, legal obligation, and legitimate interests in operating, measuring, and securing a paid software service. We do not send marketing email unless you separately request and confirm PureAlbum product updates. You may withdraw that consent at any time using the unsubscribe link in each product-update email.

5. Service providers and disclosures

We disclose only the data needed for these provider categories:

• The merchant of record shown at checkout, which independently handles payment, tax, receipts, chargebacks, and refunds under its own privacy notice.
• Email delivery providers, currently including Resend.
• Website, database, and infrastructure hosting providers.
• Download storage and delivery providers, currently including Cloudflare R2 and, when offered, Alibaba Cloud OSS.
• Professional advisers or authorities when reasonably necessary to comply with law, protect rights, or address fraud and security incidents.

We do not sell personal data or share it for cross-context behavioral advertising.

6. International processing

Providers may process data in countries other than yours. Where required, transfers are made using the provider's recognized transfer mechanism or other safeguards available under applicable law.

7. Retention

Order, entitlement, and license records are retained while needed to provide permanent license and download services and afterwards as required for tax, accounting, dispute, and fraud-prevention purposes. Trial and recovery records are retained only as long as reasonably needed to deliver and protect those services. Deactivated device records and operational logs are deleted or anonymized when no longer needed, subject to backups and legal obligations. Support correspondence is retained while the issue remains relevant.

Detailed website events and trial links expire 90 days after their recorded times. Website session records are removed after 90 days without session activity, once retained child detail has expired. When first-touch data reaches 90 days, its original first-seen time, source, campaign, referrer, country, and first-level region are replaced with neutral values. The random visitor ID remains only while needed to preserve recent sessions and their attribution. That visitor record is removed after 90 days without activity, once dependent detail has expired.

App daily activity, playback, and milestone detail expires after 12 calendar months. In versions that report Usage & diagnostics, the active anonymous installation record keeps the random installation ID, first and latest App versions, latest coarse license state, and first/last activity dates. Its last-activity date and latest bounded fields are refreshed when a report includes equally recent or newer activity, and the record is removed after 12 calendar months without reported activity, once dependent detail has expired. Coarse country and first-level region are stored only in the expiring daily activity detail at installation level.

De-identified monthly aggregate counts contain no visitor, session, or installation IDs and may be retained long term.

Pending and active product-update subscription records are retained only while needed to operate the requested subscription and demonstrate its status. After unsubscribe, we retain a minimal suppression record so that the address is not contacted again unless its owner submits and confirms a new request.

8. Cookies, analytics, and Do Not Track

We use first-party website analytics to measure source, coarse region, trial and download outcomes, and the pre-payment checkout funnel. We do not use advertising cookies or third-party behavioral analytics, and website session analytics is kept separate from the App installation ID.

In App versions that include Usage & diagnostics, that feature reports daily aggregate path usage for UPnP, Diretta, HQPlayer, and MemoryPlay. A successful playback is counted only after at least 10 seconds of confirmed playback; track-level events and content fields are not sent. Those versions have Usage & diagnostics on by default and allow you to stop future App usage reporting at Settings → About → Usage & diagnostics.

The locale cookie is functional and contains no direct identifier. Because no behaviorally targeted tracking is performed, browser Do Not Track or Global Privacy Control signals do not change site behavior; we honor applicable opt-out rights if those practices change.

9. Your choices and rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection, and may complain to a privacy regulator. Email us from the address connected to the record. We may verify the request. Deleting entitlement data can make license validation, download recovery, device management, refunds, or updates unavailable; records legally required for tax, fraud, or disputes may be retained. Product-update consent can be withdrawn at any time through the unsubscribe link in each message without affecting trial delivery, purchases, licenses, or essential service email.

10. Children and security

PureAlbum is not directed to children under 13 and we do not knowingly collect their data. We use reasonable technical and organizational safeguards, but no online system can be guaranteed completely secure.

11. Changes

We will update the effective date and post revisions here. If a material change affects existing customers, we will provide an appropriate in-product, download-page, or direct notice where required. This policy is linked from the PureAlbum appliance About screen.