Privacy Policy

Last updated: June 29, 2026

This Privacy Policy explains how SpaceDSP (“SpaceDSP”, “we”, “us”, “our”) collects, uses, and protects your information when you use our website, accounts, software, and related services (the “Services”). We aim to collect as little as possible, and we never sell your data or track you for advertising.

1. Who we are

SpaceDSP is operated by SpaceDSP LLC, 2014 Capitol Ave, Suite 100 #4027, Sacramento, CA 95811-4232, United States. For privacy questions or to exercise your rights, contact [email protected].

2. Information we collect

We collect only what we need to run the Services:

• Account information — your email address (used to sign in via a magic link — we don’t use passwords), an optional display name, and sign-in timestamps.
• Purchase information — purchases are processed by our payment provider, Lemon Squeezy, which acts as the merchant of record. Lemon Squeezy collects and processes your payment and billing details directly under their own privacy policy; we do not receive or store your full payment-card details. We receive order details such as your email, the product purchased, an order ID, and amounts.
• License information — license keys associated with your account, and (for older license activations) a hashed identifier of the machine used to activate — we hash device identifiers so we never store raw hardware IDs.
• Support information — if you contact support, the content of your ticket (subject, message) and your email.
• Presets and ratings — presets you save or publish, and ratings you submit.
• Technical and security data — your IP address and basic request metadata, processed via our infrastructure provider, Cloudflare, to operate the Services, prevent abuse, and apply rate limiting and bot protection (Cloudflare Turnstile).

We do not collect sensitive/special-category data, and we do not knowingly collect information from children (see Section 9).

3. Cookies

We use the minimum cookies required to run the Services:

• Essential — spacedsp_session: set when you sign in, to keep you logged in. It is a strictly-necessary cookie (HttpOnly, Secure, SameSite=Lax) and is exempt from consent requirements, because the Services can’t function without it.
• Functional / security — Cloudflare: Cloudflare may set its own functional and security cookies (e.g., __cf_bm, cf_clearance) to protect the Services from bots and abuse.

We do not use analytics, advertising, or tracking cookies. Because we only use strictly-necessary and security cookies, we don’t display a cookie-consent banner. If we ever add non-essential cookies, we’ll ask for your consent first.

4. How we use your information

We use your information to:

• provide and maintain the Services (sign-in, licensing, downloads, presets, support);
• process and fulfill purchases (with Lemon Squeezy) and deliver your license;
• send you transactional emails (sign-in links, purchase confirmations, support replies) via our email provider, Resend;
• secure the Services, prevent fraud and abuse, and comply with legal obligations.

Where the GDPR applies, our legal bases are: performance of a contract (providing the Services you request), our legitimate interests (security, abuse prevention, running our business), and compliance with legal obligations (e.g., tax and accounting records). We do not use your data for advertising, and we do not sell it.

5. Service providers (sub-processors)

We share data only with providers that help us run the Services, under contracts that require them to protect it:

• Cloudflare — hosting, storage (databases, file storage), security, and bot protection — privacy policy.
• Lemon Squeezy — payments and merchant-of-record services — privacy policy.
• Resend — transactional email delivery — privacy policy.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer.

6. International data transfers

We operate globally. Your information may be processed on Cloudflare’s global network and by providers located in the United States and other countries. Where required, we rely on appropriate safeguards (such as the providers’ Standard Contractual Clauses) for international transfers.

7. Data retention

We keep account data while your account is active. You can delete your account at any time from your account dashboard, which removes your presets, ratings, license activations, and associated personal data; you can also email us to request deletion. We may retain certain records (e.g., order and transaction records) for as long as needed to comply with legal, tax, and accounting obligations.

8. Your rights

Depending on where you live, you may have rights over your personal data, including:

• EU / UK / EEA (GDPR / UK GDPR) — access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. You may also lodge a complaint with your local supervisory authority.
• California (CCPA / CPRA) — the right to know, delete, and correct your personal information, and to opt out of “sale” or “sharing”. We do not sell or share your personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.
• Other regions — similar rights may apply under your local law.

To exercise any right, email [email protected] or use the self-service tools in your account dashboard. We’ll respond within the timeframe required by applicable law.

9. Children

The Services are not directed to children, and we do not knowingly collect personal data from anyone under 16 (or the minimum age in your jurisdiction). If you believe a child has provided us data, contact us and we’ll delete it.

10. Security

We protect your data with measures including encryption in transit (HTTPS), HttpOnly/Secure session cookies, hashed device identifiers, scoped access controls, and rate limiting. No system is perfectly secure, but we work to protect your information.

11. Changes to this policy

We may update this Privacy Policy from time to time. We’ll change the “Last updated” date above and, for material changes, take additional steps where required by law.

12. Contact

Questions or requests: [email protected], or SpaceDSP LLC, 2014 Capitol Ave, Suite 100 #4027, Sacramento, CA 95811-4232, United States.