Privacy

This notice applies when account services are active. It covers account records, downloads and optional marketing.

1. Controller

Move Big Rocks B.V., trading as bitsnacks, is the controller. Privacy questions and rights requests can be sent to privacy@bitsnacks.com.

2. Account and product access

Account sign-in uses your email address. We keep the products linked to your account and your email choices. We record when a requested download is delivered, when Vending Machine reports a successful installation or update, and the first time an installed device licence successfully authorizes its product on that device. The licence observation contains no audio, project, host, session, preset or parameter data. If you create or use a friend invitation, we keep its random identifier, the participating account and order records, and its available, reserved, expired or used state. We do not ask the paying customer for the friend's name or email address. A necessary first-party cookie keeps an accepted invitation ready for checkout for up to 90 days. Limited security data supports abuse prevention and legal requests.

A support request contains your name, reply email, selected product, system details and message. We use those details to investigate and reply. Standard request data, including the IP address and browser identifier, supports abuse prevention and service security.

3. Human verification

Account sign-in begins with one short security check, including Cloudflare Turnstile. We collect the email address after that check succeeds. After a successful sign-in, we may store a random first-party browser credential that is valid for up to six months. A valid credential allows the next account security check to use Turnstile without another Chicken Game. Browser recognition uses the credential and its server record. We delete that record after the credential expires or is revoked. Fingerprinting signals are excluded. Short-lived challenge results support rate limiting and abuse prevention.

4. Optional marketing

Marketing consent starts unchecked. Withdrawal is recorded as an event and leaves product access intact. Each marketing message carries an unsubscribe route.

5. Processors and transfers

Cloudflare provides human verification and edge security. Postmark delivers transactional email; private object storage holds release files. We review provider locations and safeguards before production use.

6. Retention

Account and product licence records remain while the account is active or as needed to provide the licence and answer support or legal requests connected with that account. Single-use authentication records expire quickly. Security and delivery logs stay only as long as their operational or legal purpose requires; we then delete or anonymise them.

7. Your rights

You may request access, correction, deletion or restriction, and you may object or withdraw consent where applicable. A portable copy is available where the law requires it; you may also complain to the Dutch Data Protection Authority.