Privacy policy.

GOAT Audio Labs, a brand of CIMA AUDIO LLC ("we", "us"), runs goataudiolabs.com and makes the GOAT plugins. We are responsible for the personal information described here. Contact: support@goataudio.co.

Account: your email address and a password, stored only as a salted hash we cannot read back.

Purchases: Stripe takes your payment and the name, billing address and country your card needs. We keep your email address, what you bought, the order reference and a Stripe customer reference. We never see or store card numbers.

Trials: your email address, the code we email you to prove it is yours, and the trial code itself.

Plugin activation: when a plugin activates or renews a license or trial, it sends the key or code, a pseudonymous identifier derived from your computer, the computer's name (so you can tell your machines apart on your account page), the plugin and its version. We record when each computer activated and when it last checked in.

Support: what you write in a ticket, plus the plugin, operating system, DAW and version you tell us about.

Downloads and security: for each download, the file, platform, browser user agent and a keyed hash of your IP address. Keyed hashes of IP addresses are also used briefly to stop abuse (rate limits). Our host, Cloudflare, keeps short-lived request logs.

Diagnostics: only diagnostic builds we send you on request report technical steps (no personal data), kept 7 days.

Product news: only if you tick the box (on the trial form, or to get the free plugin), your email address and the plugin you were trying or claimed.

GOAT University: if you join the newsletter, which of its four lessons we have sent you and when.

Unfinished checkouts: only if you tick Stripe's box to hear from us and do not finish paying within 24 hours, your email address and what you were buying, so we can send one reminder.

To sell you plugins, deliver and activate your licenses, run trials and your account, and answer support: this is needed to perform our contract with you.

To keep the service secure and stop fraud, piracy and abuse: our legitimate interest in protecting customers and the business.

To keep records the law requires, such as tax records of sales: a legal obligation.

To email you product news: only with your consent, which you can withdraw at any time.

To send GOAT University, four short lessons in your first two weeks on the newsletter: part of the newsletter you consented to, with a one-click unsubscribe in every email.

To send one reminder, with a discount, about a checkout you did not finish: only with the consent you give at checkout. One click in the email stops it.

Service providers that process it for us, under contract, only to run this service: Stripe (payments), Cloudflare (hosting, database, security), Resend (sending our emails).

We do not sell your personal information. We do not share it for advertising.

We may disclose information if the law requires it, to protect our rights or users, or as part of a sale of the business, in which case this policy continues to apply to it.

goat_session: keeps you signed in to your account (strictly necessary, set only when you sign in, lasts up to 30 days).

Your browser also stores two settings you choose yourself, on your device only: goat-theme (your theme) and goat_motion_paused (whether you paused animations). They are never sent to us.

We use no analytics and no other cookies. No advertising or tracking cookies. Our fonts are served from our own domain, so loading this site sends nothing to Google.

This site does not track you across other sites, whether or not your browser sends Do Not Track or Global Privacy Control signals, so they change nothing here.

Download telemetry (file, platform, hashed IP, user agent): 90 days. Diagnostics: 7 days. Sign-in sessions: until they expire (30 days at most). Email verification and unused trial codes: until they expire.

Accounts, licenses, purchases and activations: while your account or licenses exist, and purchase records as long as tax law requires. Support tickets: as long as needed to help you and keep a record of what we said. Product news: until you unsubscribe.

You can ask us to delete your account and data at any time at support@goataudio.co. Deleting your account also deletes the licenses on it.

You can ask to see, correct, export or delete your personal information, object to how we use it, or withdraw consent. Email support@goataudio.co from the address on your account; we will answer within 30 days and will not treat you differently for asking.

EU, EEA and UK: you have these rights under the GDPR and UK GDPR, and you can complain to your local data protection authority.

California and other US states with privacy laws: you have the right to know what we collect, to delete and correct it, and to opt out of its sale or sharing for targeted advertising. We do not sell it or share it for advertising.

We are based in the United States and our providers process data in the US and other countries. Where EU or UK data leaves those regions, our providers use the standard contractual clauses or an equivalent safeguard.

This site and the plugins are not directed at children under 13 (16 in the EU), and we do not knowingly collect their information. If you believe a child has given us information, tell us and we will delete it.

Connections are encrypted, passwords are hashed, IP addresses are hashed with a secret key, and access to the database is restricted. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

We may update this policy. Changes are posted on this page with a new date.

Questions or requests about this policy: support@goataudio.co.