Privacy Policy
This Privacy Policy explains how Mucky LLC ("Mucky", "we", "us") collects, uses, and protects information about you when you use muckybeats.com. We aim to collect as little as possible and to be transparent about what we do collect.
Who Is the Controller
Mucky LLC is the data controller for personal information collected via muckybeats.com.
Information We Collect
Account data: name (optional), email address, password (hashed), and account-verification and session-security records. Purchase and licence data: items bought, purchase date, order and delivery status, encrypted serial code, serial hash and last four characters, licence status, activation limit, and links between the buyer email and account. Payment details are handled by the payment provider shown at checkout, including Shopify for current purchases and Stripe for historical orders — we never see or store full card numbers. Activation data: a one-way device hash, activation and last-seen times, and deactivation status; the private device identifier used to make the hash does not need to be stored by the website. Newsletter and waitlist data: email address, subscription status, consent version and timestamps, campaign and referral details, and delivery status. Website technical data: IP address, browser type, device type, pages viewed, referral source — collected via cookies and server logs. Communications and product support: messages you send us by email or through Mucky Bass One's bug-report panel, plus support status and internal resolution notes. A bug report may include an optional reply address, your description, a resettable anonymous install ID, product version, operating system, plug-in format, host category, sample rate, block size, selected view, and skin; the plug-in previews diagnostics and lets you exclude them before sending. Optional Mucky Bass One usage data: only after you opt in, the plug-in may send the resettable install ID, edition/version, coarse operating-system and host category, and allowlisted product actions with short labels or numeric metrics. It cannot send audio, preset names, file paths, project names, or an email address through usage analytics.
How We Use It
We use this information to: provide and operate the site and Mucky Bass One; process payments; issue, validate, suspend, and recover licences; enforce activation limits; provide the current approved installer; manage your account; reply to and diagnose bug reports; send transactional emails (purchase delivery, access recovery, password resets, and service notices); deliver requested waitlist benefits; send marketing email if you opted in; understand which campaigns brought visitors to the site; honor opt-outs; understand opt-in product usage and improve the product; comply with legal obligations and prevent fraud.
Legal Bases (GDPR / EEA & UK)
If you are in the EEA, UK, or another jurisdiction with similar law, we rely on: contract (to deliver purchases, issue and validate licences, enforce the stated activation limit, provide downloads, and operate account features); consent (for the newsletter, non-essential cookies, and optional Mucky Bass One usage data); steps taken at your request and legitimate interests (to receive, investigate, and reply to a bug report you choose to submit); legitimate interests (site and account security, fraud prevention, delivery recovery, and basic operational analytics); legal obligation (tax records and responding to lawful requests). You can withdraw usage-data consent inside the plug-in at any time; withdrawal rotates its anonymous install ID and stops new analytics. This does not affect licence and activation processing needed to provide the purchased software, or the lawfulness of prior processing.
Cookies & Similar Technologies
We use a small number of essential cookies (login session, cart, consent state) and, with your consent, analytics cookies to understand traffic patterns. You can manage your preferences via the cookie banner or your browser settings. See the Cookie Policy for full detail.
Service Providers We Share With
We share the minimum data needed with trusted processors: Shopify (current storefront and checkout); Stripe (historical payments and subscriptions); Supabase (account database and authentication); Vercel (hosting and edge logs); and the email delivery service used for transactional and newsletter mail. Each is bound by its own privacy and security obligations. We do NOT sell your personal information.
International Transfers
Some processors (including Shopify, Stripe, Vercel, and Supabase) may store or process data in the United States or other jurisdictions. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.
Retention
Account and active licence data are kept while needed to provide the purchased software and for a reasonable period afterward to handle recovery, fraud, disputes, and legal obligations. Purchase and tax records are typically kept for up to 7 years. Deactivated-device records are retained only as long as reasonably needed for licence security and dispute handling. Active newsletter membership and waitlist attribution data are removed when you unsubscribe. We retain only a minimal suppression record — email address, available consent version and consent timestamp, and withdrawal timestamp — to honor the opt-out and demonstrate the withdrawal. Suppression records are access-restricted and kept only as long as needed for those purposes. Some purchase or licence records may need to be retained where required by law or to establish, exercise, or defend legal claims. Server logs are rotated within 90 days unless needed for security investigation. Mucky Bass One opt-in usage batches are kept for up to 13 months. Bug reports, including an optional reply address, diagnostics, support status, and internal resolution notes, are kept for up to 24 months unless a longer period is reasonably needed to resolve an active support, security, or legal matter.
Your Rights (GDPR)
If you are in the EEA or UK you have the right to: access your data; correct inaccurate data; delete your data ("right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; lodge a complaint with your local supervisory authority. We respond within 30 days to valid requests made through a published channel.
Your Rights (CCPA / California)
If you are a California resident you have the right to: know what personal information is collected about you; access a copy of it; request deletion; opt out of any "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising); be free from retaliation for exercising your rights.
Children
The site is not directed at children under 16. We do not knowingly collect personal information from children.
Security
We use industry-standard safeguards: HTTPS everywhere, hashed passwords, scoped access tokens, principle-of-least-privilege for processors. No system is perfectly secure; if a breach occurs that affects you, we will notify you and the relevant authorities as required by law.
Changes to This Policy
We may update this policy. Material changes will be posted on this page with a new "last updated" date and, where appropriate, announced by email.
Contact
Mucky LLC, California, USA.
Last updated: September 20, 2026