Who is responsible for your data
The data controller is the publisher of DJ-PAD-MUSIC:
- Publisher
- IT-DIR - GALTIER Pierre, sole proprietorship (entreprise individuelle), Toulouse, France
- SIRET
- 824 403 851 00010
- contact@dj-pad-music.com
- Host
- OVH SAS, 2 rue Kellermann, 59100 Roubaix, France
Scope
This policy applies to the website www.dj-pad-music.com, its sound pack pages, the WEB PADS web app (the “App”), its Premium offers and the related emails. It complements our Terms of Service.
The App works without an account: we do not ask for your name, and nobody can see what you play.
Data kept on your device
To work without an account, the App saves the following in your browser’s storage. This data is never sent to us:
- your pad layouts for each sound pack (which sound sits on which pad, with its mode, volume, pitch, choke group and colour);
- your settings, such as the last pack played and the effects you use;
- the audio files you import, kept in your browser’s database (IndexedDB) so they come back on your next visit. They are played by your browser only and are never uploaded;
- if you buy Premium, a signed Premium key that lets the App check your purchase, and, while you pay, a note of the pack you were opening so the App can take you back to it;
- a marker recording that you closed the cookie notice.
You can erase it at any time by clearing this site’s data in your browser settings. Erasing it also removes your imported sounds and Premium from that device; Premium can be brought back with the “Already subscribed?” option.
Data we process
Technical logs
Like any website, our host records technical data for each request: IP address, date and time, page or file requested, browser type and referring page. These logs are used for security, abuse prevention and troubleshooting.
Premium check and restore
When you come back from payment, or open the App with Premium, the App sends the payment reference or the signed key to our server so it can confirm with Stripe that your Premium is active. When you ask to restore Premium on another device, you enter your email address. We use it only to look up your purchases at Stripe and send you a link valid for 24 hours. We do not keep your address in a database; to prevent abuse, a one-way fingerprint of it is kept for 10 minutes.
Takedown requests
If you ask us to remove content, the form (run by Jotform) collects your name, your contact details, the content concerned and the information you give about your rights. We use it only to assess and answer your request.
Messages you send us
If you write to us, we receive your email address and your message, and use them only to answer you.
Third-party services
- Google Fonts: the fonts are loaded from Google’s servers, which receive your IP address and browser information.
- YouTube: the demo video on the home page uses YouTube’s privacy-enhanced mode (youtube-nocookie.com). YouTube receives your IP address when the player loads and may store data on your device once you play the video, under Google’s privacy policy.
- Stripe: the payment page and receipts (section 5).
- Jotform: the takedown request form, under Jotform’s privacy policy.
- Social networks: the Facebook, X (Twitter) and YouTube links only take you to those services when you click them. What happens next is governed by their own policies.
Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Providing the App and Premium, restoring Premium | Purchase data, email | Performance of the contract, art. 6.1.b |
| Security and abuse prevention | Technical logs, email fingerprint | Legitimate interest, art. 6.1.f |
| Handling takedown requests | Identity, contact, content details | Legal obligation, art. 6.1.c, and legitimate interest, art. 6.1.f |
| Answering your messages | Email, message | Legitimate interest, art. 6.1.f |
| Accounting and tax obligations | Payment records | Legal obligation, art. 6.1.c |
Retention
- Data on your device: until you erase it;
- technical logs: up to 12 months;
- restore email fingerprint: 10 minutes;
- purchase records: for as long as your Premium is active, then 10 years for accounting records required by French law;
- takedown requests: up to 3 years after the request is closed;
- emails exchanged with us: up to 3 years after our last exchange.
Transfers outside the EU
Stripe, Google (Fonts and YouTube) and Jotform may process data in the United States. These transfers rely on the EU-US Data Privacy Framework, where the company is certified, or on the European Commission’s standard contractual clauses.
Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to give instructions on what happens to your data after your death.
Write to contact@dj-pad-music.com. For Premium, please send the email address used for payment. We answer within one month.
If you think your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or with the supervisory authority of your country.
Children
WEB PADS can be played by everyone, and the free App collects no personal data. Premium is a purchase: people under 18 need the permission of a parent or guardian to buy it. We do not knowingly collect personal data from children under 15.
Security
The site and the App are served only over HTTPS. Premium keys and restore links are signed, and restore links expire after 24 hours. Payment data is handled by Stripe, which is PCI DSS certified. No method of transmission or storage is completely secure, but we take reasonable care to protect your data.
Changes to this policy
We may update this policy, for example when a feature or partner changes. The date at the top shows the latest version. If a change significantly affects your data, we will tell you in the App and, for Premium subscribers, by email.
Contact
For any question about this policy or your data: contact@dj-pad-music.com.
See also our Terms of Service, which set out how the App and Premium work.