Privacy policy

In force from 6 October 2026. This is a translation; the Polish version is binding.

1. Controller

The controller of your personal data is Shadow Marcin Klaman, ul. Okólna 128/7, 87-100 Toruń, Poland, NIP PL8792072892, REGON 340271069. For anything about your data: hello@shadowrack.eu.

2. What data, why, and on what basis

Visiting the website. When you open shadowrack.eu, the server records your IP address, the time, the page and your browser's details. We use them to show the website, protect it from attacks and see overall visitor statistics (no tracking of individuals, no analytics cookies). Basis: our legitimate interest (Art. 6(1)(f) GDPR). The first time, the website picks Polish or English from the country you visit from. When you open the Polish version of the website or switch with EN | PL, it remembers that language in the sr-lang cookie (section 6).

E-mail and the ideas and bug reports form. When you write to us, or send an idea or report through the website's form, we process your message and, if you give it, your e-mail address to answer. A form message is kept in our report inbox on Cloudflare's servers, which only we can open, and is never published. Basis: our legitimate interest, or steps before or for a contract (Art. 6(1)(f) and (b) GDPR).

Account and licences. When you open an account you give your name, e-mail address and a password. The account holds your licences, purchases and activated Macs. Basis: performing the contract (Art. 6(1)(b) GDPR).

Activation and licence checks in the app. When you activate it, and at every start while there's internet, the app contacts Moonbase's licence server and sends: the licence identifier, a device identifier (derived from the Mac's properties), the computer name set in macOS, the app version and your IP address. This is what makes the licence work and keeps it on at most 3 Macs. Basis: performing the contract (Art. 6(1)(b) GDPR).

Problem reports and crash reports from the app. The app sends none of these on its own. After a crash it asks whether to send the report (Send, Always send or Not now), and a report from Help > Report a problem is sent by you, after seeing what's in it. What's sent: your description and e-mail (if you give them), the crash report (where it happened and in which plugin), the app version and a description of the Mac: model, macOS version, memory, the audio interface and its settings, and how many channels and plugins the session has - nothing from the sessions themselves. It reaches our report inbox (as above) through our server; without internet it waits on your Mac and goes at the next start with a connection. It's used to fix bugs and to answer you. Basis: your consent (Art. 6(1)(a) GDPR) - with "Always send", consent given once, which you withdraw in Setup > About > Report a problem.

Apart from that, the app does not send usage statistics or anything about your sessions and plugins. The musicians' phones (Rack IEM) talk to the Mac only on the local network; none of it reaches us.

Buying. Payment, billing details and the receipt or invoice are handled by Moonbase as the seller, which is a separate controller for that and applies its own privacy policy, shown at checkout. Moonbase tells us what you bought so the licence appears in your account.

Newsletter. If you tick it, we send you news about Shadow Rack. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

3. Who receives data

We use companies that process data for us or alongside us:

• Cloudflare - the website's servers, protection against attacks, our report inbox, and receiving mail to @shadowrack.eu;
• Google - the mailbox that receives mail sent to hello@shadowrack.eu (Gmail), and the website's fonts (Google Fonts) - your browser loads them from Google's servers, which shows Google your IP address;
• cdnjs (Cloudflare) and unpkg - the servers your browser loads the website's animation libraries from;
• Moonbase - accounts, licences, Mac activations, sales and payments;
• accountants and legal advisers - where needed for bookkeeping or legal claims.

Cloudflare and Google may process data outside the European Economic Area, including in the USA, on the basis of the European Commission's EU-US Data Privacy Framework decision or the Commission's standard contractual clauses.

4. How long

• Technical data from visits - as Cloudflare keeps it, usually days to weeks; statistics are aggregated.
• E-mails - as long as needed to deal with the matter, then until claims are time-barred.
• Messages from the form and reports from the app (crash reports included) - at most 2 years, then they delete themselves; sooner if you ask.
• Account, licences and activations - while you have the account; what's needed for bookkeeping and legal claims, for as long as the law requires.
• Newsletter - until you withdraw your consent.

5. Your rights

You have the right to access your data, correct it, have it erased, restrict its processing, receive it in a portable form and object to processing based on our legitimate interest. You can withdraw consent at any time, without affecting what happened before. Write to hello@shadowrack.eu.

You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or to the authority in your own country.

Giving data is voluntary, but without an e-mail address you can't open an account or activate the app online. We make no automated decisions about you and don't profile you.

6. Cookies and browser storage

The website uses no advertising or analytics cookies. It only keeps what it needs to work:

• the sr-lang cookie - the website's language (Polish or English), for one year, so the website opens in your language. It is set when you switch with EN | PL or open the Polish version of the website;
• in the browser's local storage: your language, your cart and your account sign-in - until you clear them or sign out;
• in session storage: small website settings for a single visit.

On the payment page Moonbase may set its own cookies needed for the purchase. You can clear stored data in your browser settings; the website keeps working and just forgets your choice.

7. Changes

If we change how data is processed (if the app starts sending something new, for example), we update this policy first.