Privacy Policy
Who we are
KICKGRID is operated by Tristan Brinkman. You can contact us at [email protected].
What this page covers
This policy explains what happens to your data when you sign up on the KICKGRID website for the launch and newsletter, and when you buy and use the KICKGRID plugin.
What we collect
- Your email address, which you enter in the sign-up form.
- The time you signed up, the time you confirmed (see below), and the version of this policy you agreed to.
- Standard server logs (such as your IP address and the time of a request), kept by our hosting provider for security and abuse prevention for the maximum of 12 months.
We do not use tracking cookies and we do not run analytics on this website.
The KICKGRID plugin
When you activate, verify or deactivate a licence, the plugin sends the following to our server at kickgrid.nl over an encrypted connection:
- Your licence serial number.
- A one-way hash (SHA-256) of your email address. The address itself is not sent.
- A device identifier generated by your operating system. It is not your name or your hardware serial number. We use it to limit each licence to its allowed number of computers. Because it identifies a device, we treat it as personal data.
Our server also receives your IP address, as with any web request. The update check contacts our server in the same way. The plugin does not send audio, presets or usage statistics.
We keep a licence record with your name, email address, order reference, serial number and activated devices. Your name is stored encrypted on our server. The server returns your name so the plugin can show "Licensed to". The plugin also keeps a copy of your licence (serial, email and name) in your user folder so it works offline. That copy stays on your computer.
The legal basis is the contract you enter into when you buy KICKGRID (Article 6(1)(b) GDPR), and our legal obligation to keep purchase records (Article 6(1)(c) GDPR).
Why we use your data and on what basis
We use your email address to send you the KICKGRID launch announcement and newsletter. The legal basis is your consent (Article 6(1)(a) GDPR). You give that consent by clicking the confirmation link in the email we send you after you sign up. Without that click, we do not add you to the list and we do not send you newsletters.
We may also pick subscribers at random and invite them to test a pre-release version of KICKGRID. If you are picked, we send you an email asking whether you would like to take part, along with the conditions that come with it. It is entirely up to you: you do not have to reply, and declining has no effect on your subscription or on anything else. We use your email address for this on the same consent, because it is an email about KICKGRID to someone who asked for KICKGRID news.
How sign-up works
After you enter your email address we send one confirmation email from [email protected]. Your address only joins the list when you open the link in that email, and the link expires after 48 hours. If you did not ask to sign up, ignore the email and nothing further will be sent to you. Unconfirmed addresses are deleted after 7 days.
Your licence account
If you own a licence you can sign in at kickgrid.nl/account to see which machines your licence is active on, and to deactivate one. Signing in works by email: you enter your address and we send you a one-time link. There is no password, so there is no password of yours for us to store or lose.
For that page we process:
- Your email address — only as a one-way hash, to find your licence. The address itself is used to send the sign-in email and is not stored by the account system.
- The sign-in link and your session — stored only as one-way hashes, and deleted when they expire. A sign-in link lasts 20 minutes and works once; a session lasts 30 days.
- Your machine names — the computer name and operating system the plugin reports when you activate, so that you can tell your machines apart on that page. Stored encrypted.
- Your IP address — only as a one-way hash, and only to limit how many sign-in emails can be requested from one connection. Deleted after a day.
Who receives your data
We do not sell or rent your data. Your data is processed by the following service providers, who act on our instructions:
- Web hosting and database: Mijn.Host.
- Sending of the confirmation and newsletter emails: Mijn.Host.
Your email address is stored encrypted in our database.
How long we keep your data
- Unconfirmed sign-ups: deleted after 7 days.
- Confirmed subscribers: kept until you unsubscribe.
- Licence and purchase records: 7 years after purchase, as required for bookkeeping in the Netherlands.
- After you unsubscribe: we keep a record of your address (as a one-way hash) so that we do not add you again by mistake. Your address is not mailed again.
- Account sign-in links: 20 minutes, then deleted. Account sessions: 30 days, then deleted. Sign-in rate-limit records: one day.
- Machine activations: until you deactivate that machine, or until the licence ends.
Google Fonts
This website loads its fonts from Google (fonts.googleapis.com and fonts.gstatic.com). When your browser loads the page, your IP address is sent to Google, which may process it in the United States. Google processes this according to its own privacy policy.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw your consent at any time. Every newsletter email contains an unsubscribe link, and you can also email us.
To exercise these rights, email [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
Changes
If we change how we use your data, we will update this page and the version number above. If the change affects your consent, we will ask for it again.