Privacy Policy

Effective date: 15 July 2026

1. Who We Are

Louder (louderstore.com) is a marketplace for unfinished DAW project files. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding it.

For any privacy-related questions, contact us at [email protected].

2. Data We Collect

2.1 Account Information

When you register, we collect your email address, chosen username, and display name. If you sign in via Google OAuth, we receive your name and email from Google.

2.2 Profile Information

You may optionally provide a bio and avatar. This information is publicly visible on your profile page.

2.3 Payment Information

Payment processing is handled entirely by Stripe. We do not store or have access to your full credit/debit card number, CVV, or banking details. We store only what Stripe returns: a payment intent ID and transaction status. Sellers additionally share their Stripe Connect account ID with us so we can route payouts.

2.4 Uploaded Content

Sellers upload ZIP archives (DAW project files) and audio preview files. Project files are stored in private cloud storage accessible only to the seller and to buyers after a completed purchase. Audio previews are stored publicly for playback on the Platform.

2.5 Transaction Records

When a purchase occurs, we store the buyer ID, seller ID, listing ID, amount paid, platform fee, payout amount, and Stripe payment reference. This data is necessary for financial record-keeping, payout processing, and dispute resolution.

2.6 Technical Data

We collect standard server logs including IP addresses, browser user-agent strings, and request timestamps for security, debugging, and abuse prevention purposes.

3. How We Use Your Data

  • Service delivery: To operate the marketplace, process transactions, deliver project files, and route seller payouts.
  • Account management: To authenticate you, manage your profile, and maintain your purchase and listing history.
  • Security: To detect fraud, validate uploaded files, and protect the Platform and its users.
  • Communication: To send transactional emails (purchase confirmations, download links, dispute updates). We do not send marketing emails without your explicit consent.
  • Legal compliance: To maintain financial records required by applicable tax and commercial law.

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we process your data on the following legal bases:

  • Contract performance: Processing necessary to fulfil your purchase or sale, including transaction records and file delivery.
  • Legitimate interests: Security monitoring and fraud prevention.
  • Legal obligation: Financial record retention required by applicable law.
  • Consent: Where we rely on consent (e.g. marketing communications), you may withdraw it at any time.

5. Third-Party Services

We share data with the following third parties as necessary to operate the Platform:

Supabase

Provides our database, authentication, and cloud file storage. Data is hosted in the EU region. Privacy Policy

Stripe

Processes all payments and seller payouts. Stripe operates as an independent data controller for payment data. Privacy Policy

Cloudflare

Provides CDN, DDoS protection, and tunnel connectivity. May process IP addresses and request metadata. Privacy Policy

Zoho

Transactional email delivery. We share your email address and relevant transaction context with Zoho solely to deliver emails to you. Privacy Policy

Google

We use Google Analytics / Google Ads (gtag.js) to understand site usage and measure advertising. These tools set cookies and are loaded only after you accept analytics cookies (see section 6). Privacy Policy

We do not sell your personal data to any third party.

6. Cookies & Analytics

We use a small number of cookies and similar technologies. Strictly necessary cookies (for example, authentication and session state) are always active because the Platform cannot function without them, and they do not require consent.

With your consent, we also use analytics and advertising cookies via Google Analytics / Google Ads (gtag.js) to measure how the Platform is used and the effectiveness of our advertising. These are loaded only after you click "Accept" on our cookie banner. If you decline, these cookies are not set and the Google tag is not loaded.

You can change your choice at any time by clearing this site's cookies and local storage in your browser, which will make the cookie banner appear again on your next visit.

7. Data Retention

  • Account data: Retained for the lifetime of your account. Deleted within 30 days of a verified account deletion request, except where retention is required by law.
  • Transaction records: Retained for a minimum of 5 years after the transaction date for financial and tax compliance purposes.
  • Project files: Seller-uploaded files are retained while the listing is active. Files may be retained for up to 90 days after listing deletion to support buyer download access.
  • Server logs: Retained for up to 90 days.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data where there is no compelling reason for its continued processing.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted storage, row-level security on database access, signed URLs for file delivery, and security validation of all uploaded files. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Children

The Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Platform. The effective date at the top of this page reflects the date of the most recent revision.

12. Contact

For any privacy-related questions or requests: [email protected]

100%