DarkPlugins
Privacy policy
Updated 23 October 2026
Controller
The controller is Yachtaman Marine Tomasz Senko, ul. Ludowa 24, 86-005 Białe Błota, NIP 554-260-54-52. Data contact: [email protected].
What we process and why
Account and purchases: email, name, password hash (Argon2), two-factor settings, invoice details, order history — to perform the contract and meet tax law.
Plug-in activations: SHA-256 hash of the computer's hardware ID (never the ID itself), computer name reported by the OS, operating system, activation and last refresh dates, IP address at refresh — device limit and anti-piracy (legitimate interest).
App and Kits plug-in: device name and OS, IP and last use, kit download log — to perform the contract and apply fair-use limits.
Security log (sign-ins, failed attempts) — legitimate interest. Newsletter — only with consent, one-click unsubscribe.
We don't collect your audio, projects, song names, other plug-ins or how you use the plug-in.
Retention
Account — until deleted. Activations — until you deactivate the computer or delete your account (change log up to 12 months). Invoices — 5 years after the end of the tax year. Security logs — up to 12 months.
Recipients
Payment operator (PayPro SA — Przelewy24), accountant, hosting and Cloudflare, OVH email. We never sell data or use it for ads.
Your rights
Access, rectification, erasure, restriction, portability, objection, withdrawal of consent; complaint to the Polish DPA (UODO). Deactivate computers yourself in the DarkPlugins app or on “My plug-ins”.
Security
HTTPS, Argon2 password hashes, encryption of sensitive data, two-factor authentication, a separate admin panel.
