Privacy Policy

Last updated 9 November 2026

This policy explains what personal data DirektDSP handles when you visit direktdsp.com, create an account, buy or activate our software, and use our plugins, why we handle it, who else is involved, and the rights you have.

In short

  • Our plugins process your audio on your own computer. They do not send your audio anywhere.
  • Accounts, purchases and licences run on Moonbase, our store and licensing platform, with data held in the EU.
  • Google Analytics only sets cookies if you accept them in the cookie banner. You can change your choice at any time.
  • We do not sell your personal data.

Who we are

DirektDSP is run by Seamus Mullan, 12 Haydens Park Grove, Lucan, Co. Dublin, Ireland, who is the controller of your personal data ("DirektDSP", "we", "us"). For anything about this policy or your data, email [email protected].

When you visit direktdsp.com

Hosting and delivery

Our web hosting provider and Cloudflare, which delivers and protects the site, process the technical data every website receives: your IP address, the pages and files you request, the time, and your browser's user agent. They use it to serve the site, keep it secure and fix faults, and keep it only briefly in their logs. Our legal basis is our legitimate interest in running a working, secure website (GDPR Article 6(1)(f)).

Analytics (Google Analytics 4)

We use Google Analytics to understand how people use the site, for example which pages they visit and how they found us. It is provided in the EEA by Google Ireland Limited. We use Google Consent Mode:

  • Until you accept, Google Analytics sets no cookies. Google still receives a cookieless notification of each page view (the page, the time, and browser and device type), which it uses to estimate overall traffic. We rely on our legitimate interest in basic, aggregate statistics about our site for this.
  • If you accept, Google Analytics sets the cookies _ga and _ga_*, which last up to two years, so it can recognise returning visitors and measure visits more accurately. Our legal basis is your consent (Article 6(1)(a)).

Analytics data is kept for up to 14 months. Your choice is remembered in your browser's local storage under direktdsp-analytics-consent; it is not a cookie. You can change it at any time with , also at the bottom of every page. We do not use advertising features: advertising storage stays off.

Videos

Demo videos are hosted on YouTube (Google). The video player only loads when you press play. From then on YouTube processes data about your viewing under Google's privacy policy and may store data in your browser. We use YouTube's privacy-enhanced mode (youtube-nocookie.com).

Signing in and your cart

If you sign in or add something to your cart, the site keeps your session and cart in your browser's local storage (keys beginning moonbase_) so that you stay signed in and your cart survives a reload. These are needed for the features you ask for and are not used for tracking.

Your account, purchases and licences

Our store, customer accounts, downloads and software licensing are provided by Moonbase AS, a Norwegian company (Utsikten 6, 3718 Skien, Norway).

  • Purchases. Moonbase is the merchant of record: when you buy one of our products, you buy it from Moonbase, which takes the payment and handles tax and invoicing as an independent controller. See Moonbase's privacy policy for buyers.
  • Your account and licences. For your customer account (name and email address), your orders, licences, product downloads, device activations and the emails linked to them, Moonbase processes data on our behalf under a data processing agreement. Our legal basis is the contract with you: providing the account, the software and the licences you have bought or started a trial of (Article 6(1)(b)).

Moonbase stores this data with Amazon Web Services in the EU (Ireland). Where it or its sub-processors transfer data outside the EEA, they rely on an adequacy decision, such as the EU-US Data Privacy Framework, or the European Commission's standard contractual clauses.

In our plugins

  • Your audio stays on your computer. Our plugins process audio locally and do not send it anywhere.
  • Activation and licence checks. When you activate a plugin, start a trial or the plugin checks its licence, it contacts Moonbase and sends your device's name, identifiers derived from your device, and your operating system and plugin version. Moonbase records the IP address and approximate location of the most recent check. This is needed to issue and protect your licence (Article 6(1)(b)). With offline activation, the plugin writes this information to a file that you transfer yourself.
  • Update checks. Plugins ask Moonbase whether a newer version is available, so they can show you an update.

Some free plugins are downloaded from GitHub, which processes data about the download under its own privacy policy.

Emails

  • Account emails, such as confirming your address, resetting your password and licence or order emails, are sent through Moonbase.
  • If you tick the newsletter box when you create an account, we use your email address to send you news about our products, based on your consent. You can unsubscribe from any newsletter email, or ask us to stop, at any time.
  • If you email us, we use your message and address to reply, and keep the conversation for as long as we need it to help you. Our email is hosted by Google (Gmail).

Who receives your data

We share personal data only with the providers above, each for the purpose described:

  • Moonbase AS and its sub-processors (store, accounts, licensing, downloads, account emails)
  • Our web hosting provider and Cloudflare (hosting and delivering the site)
  • Google (Analytics, YouTube, and our email)
  • GitBook, which hosts our documentation at docs.direktdsp.com
  • GitHub, for free plugin downloads

We may also disclose data where the law requires it. We do not sell personal data or share it for advertising.

Transfers outside the EEA

Some of these providers, including Google and Cloudflare, may process data in the United States or elsewhere outside the European Economic Area. Where they do, the transfer is covered by an adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission's standard contractual clauses.

How long we keep data

  • Account and licence data: for as long as your account exists, so that your licences keep working.
  • Order and transaction records: for as long as tax and accounting law requires.
  • Analytics data: up to 14 months.
  • Emails with us: as long as needed to deal with your request.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you, and get a copy of it;
  • have inaccurate data corrected;
  • have your data deleted, or its use restricted;
  • receive data you gave us in a portable format;
  • object to processing based on our legitimate interests;
  • withdraw your consent at any time, without affecting processing that took place before.

To use any of these rights, email [email protected]. You can also complain to the Data Protection Commission in Ireland (dataprotection.ie) or to the data protection authority where you live.

Children

Our site and products are not aimed at children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We will update this page when our practices change, and change the date at the top. If a change is significant, we will tell account holders by email.