Privacy Policy

Updated: June 2026

This Privacy Policy explains how PolyFreq Limited collects and uses your personal data. Under the EU and UK General Data Protection Regulation (GDPR), PolyFreq is the “data controller”.

You can contact us anytime at contact@polyfreq.com.

Below is a summary of how we process data for different types of users. When we say “data”, we mean personal data as defined by the GDPR.

1. Website Visitors

1.1 Server Logs and Infrastructure

When you visit our website, your browser automatically sends certain technical information to our servers. Our website is hosted and secured using Cloudflare.

Why we collect it: To display the website correctly, keep it secure, and fix errors.
What we collect: Technical HTTP data, including your IP address, browser type and version, operating system, pages visited, referring URL, and the date and time of your visit.
Legal basis: Our legitimate interest in operating and securing our website (Article 6(1)(f) GDPR).
How we collect it: Automatically from your browser.
Who we share it with: IT service providers like Cloudflare, who act as our data processors under strict data processing agreements.

1.2 Analytics and Tracking (Cookieless)

We respect your privacy and aim to minimize data collection. We use privacy-friendly, cookieless analytics to understand how our website is used without requiring intrusive cookie consent banners.

a) PostHog (Cookieless Mode) We use PostHog for website analytics. We have explicitly configured PostHog to operate in “cookieless mode,” meaning it does not store tracking cookies on your device.

Why we collect it: To analyze general user behavior, page views, and website navigation to improve our site.
What we collect: Anonymized session data, page views, and basic device information.
Legal basis: Our legitimate interest in improving our website content and user experience (Article 6(1)(f) GDPR).

b) Google Analytics 4 (Server-Side) We use a server-side implementation of Google Analytics 4. Instead of placing Google tracking cookies (gtag.js) on your device, our server securely forwards anonymized page view events directly to Google.

Why we collect it: To measure the reach of our website and the effectiveness of our advertising campaigns (e.g., on our dedicated landing pages like /lp-phonon-granular-synth-trial).
What we collect: When you download a trial or make a purchase, your email address is securely hashed (SHA-256) on our server and sent to Google Analytics to attribute the conversion to our advertising campaigns. No raw email addresses are shared.
Legal basis: Our legitimate interest in measuring the success of our marketing efforts (Article 6(1)(f) GDPR).

2. PolyFreq Customers and Trial Users

Our storefront, user accounts, and licensing are securely handled by our e-commerce partner, Moonbase.

Why we collect it: To fulfill our contract with you. This includes setting up your account, providing trial licenses, processing purchases, and managing software licenses.
What we collect: Name, email address, billing information, order history, and license keys. Payments are processed securely via Moonbase’s integrated payment providers (e.g., Stripe, PayPal). PolyFreq does not store your credit card details.
Legal basis: Fulfilling our contract with you (Article 6(1)(b) GDPR) and meeting legal accounting obligations (Article 6(1)(c) GDPR).
How we collect it: You provide this data yourself during the checkout or trial registration process.
Who we share it with: Moonbase (our e-commerce processor) and their integrated payment gateways.

If you subscribe to our newsletter, we will send you occasional news about PolyFreq and our products.

Why we collect it: To send you the newsletter and analyze its reach.
What we collect: Name, email address, subscription timestamp, and interaction data (e.g., whether you opened the email).
Legal basis: Your consent (Article 6(1)(a) GDPR).
How we collect it: You provide your contact details yourself when you subscribe.
Who we share it with: We use Brevo as our processor to manage and send our newsletters.
Data retention: Data regarding newsletters will be deleted when you unsubscribe. You can withdraw your consent at any time by clicking the “unsubscribe” link at the bottom of any newsletter.

4. Help and Support Requesters

Why we collect it: To answer your questions and provide technical support when you contact us.
What we collect: Email address, name, and the content of your support request.
Legal basis: Fulfilling our contract with you relating to the products (Article 6(1)(b) GDPR) or our legitimate interest in providing customer support (Article 6(1)(f) GDPR).
How we collect it: You provide the data yourself when you send us an inquiry.

5. Third-Party Content (YouTube)

We embed videos from YouTube on some of our pages (such as the Phonon product page).

When you click play on a video, the file is loaded by YouTube. Technically, YouTube receives all the information your browser automatically transfers (including your IP address) and may set its own cookies on your device.

The collection and processing of this data is the sole responsibility of Google Ireland Limited. PolyFreq has no influence on Google’s data processing. For information about how Google processes personal data, please refer to the Google Privacy Policy: https://policies.google.com/privacy

6. Your Privacy Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to access: You can request information about the personal data we process about you.
Right to rectification: You can ask us to correct or complete inaccurate data.
Right to erasure: You can ask us to delete your data, as long as we are not legally required to keep it.
Right to restriction: You can ask us to restrict the processing of your data under certain conditions.
Right to object: You can object to us processing your data for direct marketing or based on our legitimate interests.
Right to withdraw consent: If you gave us consent to process your data, you can withdraw it at any time. This won’t affect processing that happened before you withdrew consent.
Right to complain: You have the right to file a complaint with a data protection supervisory authority if you believe we are violating applicable privacy laws.