SIZESYNTH.COM PRIVACY POLICY
Last updated: 10 October 2026
1. Who we are
SizeSynth.com is operated by Mike SizeSynth, a sole trader trading as SizeSynth.com. We are responsible for personal information used for our website, accounts, licensing and support. Contact Contact@sizesynth.com about privacy or your information. This policy covers SizeStem, SizeCheesus, SizeSweep and SizeGrinfinity and other SizeSynth.com apps whose terms reference it. The information involved depends on the features and services you use; online account/licensing features depend on their availability for the app and service concerned.
2. Information involved
Accounts use your name, email, account identifier, verification/status and relevant activity. A profile phone number is optional. Google Firebase handles authentication, verification and password resets. Our licensing database does not store your password. Depending on the app, authentication tokens are protected locally or held in memory. Purchase/refund information includes app, quantity, price, currency, tax, customer/transaction references, payment/refund status and relevant reasons. Where checkout uses Paddle, it handles payment details under its own policy. Our licensing records use transaction summaries, not card numbers or security codes. Licensing information includes account-linked app entitlements, computer allowance, licence/activation status and identifiers, device public keys/bindings, optional labels and verification/issue/expiry information. Supported Windows licensing derives a device binding from a locally salted machine identifier. Account-linked device identifiers remain personal information even when hashed. Genuine purchase agreement records include the app terms version, exact content or hash, recorded choices and authoritative acceptance time linked to the account and relevant purchase. A purchase date is not evidence of an unrecorded consent. Support uses your contact details, message, relevant app/purchase details, ticket activity and correspondence. Administration can include relevant notes, substantiated breach evidence and decision, action and appeal records.
3. Local audio, drivers and website use
Audio processing in these four apps takes place on your computer. Our licensing service does not require audio or project content. Your DAW, operating system and other software have their own behaviour and privacy practices. Local files can include preferences, licence credentials, device keys, clock/revocation records and installation details. SizeStem also stores library paths/names/categories, source/separated audio, recent/favourite items, notes and session/mixer/cue information in the folders used by its features. Removing a library entry need not delete the original; sign-out/uninstall can leave licensing history and your own files. SizeStem support-information requests include app, GPU vendor and platform. Optional driver matching also sends the hardware identifiers, OS build/architecture and installed-driver information needed for a match. Vendor/framework downloads connect to those services and expose normal connection information. Website driver notices use selected app/OS/vendor and acknowledgements. Website/authentication/API providers receive connection/request/security data such as IP address. API security controls also use account quota counters and pseudonymised network identifiers. Browser storage supports sign-in and notices; website sign-in defaults to a session with a keep-signed-in choice. Cookie-notice acknowledgement lasts 90 days, not the retention period for accounts or provider logs. A notice acknowledgement is not marketing permission.
4. Purposes and legal bases
Necessary account, purchase, authentication and licence information is used to take steps you request before a contract and perform our contract: providing purchased access, computer management, requested features and support. Without required information, those functions or resolution of your request may be unavailable. Optional profile details and driver matching are not conditions of buying a licence. Legitimate interests support proportionate security, abuse/fraud prevention, substantiated breach investigation, accurate action records and legal claims. Our interests are protecting accounts and lawful access and resolving disputes fairly, while considering your rights and limiting information to what is needed. Applicable legal duties support required accounting and valid legal demands. Consent supports optional marketing emails and other uses requiring consent. Withdrawal does not affect the lawfulness of earlier consent-based processing. App terms and feature choices are not blanket consent to unrelated processing.
5. Recipients and international processing
Relevant service recipients include Google Firebase for identity/accounts, Cloudflare Workers/D1 for API/licensing and related records, Vercel for hosting and Paddle for its checkout/payment/refund services. Roles depend on the service/data. Paddle is a reseller/merchant of record for transactions it sells and controls buyer information for its own payment, tax and fraud responsibilities. Its policy is https://www.paddle.com/legal/privacy. We receive relevant customer/transaction information to fulfil and support licences. The owner and specifically authorised staff access information needed for their duties. Information may also be disclosed for a valid legal requirement or claim. Download vendors operate their own services and privacy practices. Providers operate internationally and may process information outside the UK. Contact Contact@sizesynth.com for the locations and transfer arrangements applicable to your information and information about relevant safeguards.
6. Retention, closure and erasure
Account details, including name and email, are retained for the life of the account and 12 months after closure. Minimum identity/contact, purchase and entitlement linkage still needed for a valid lifetime licence is preserved even if the account closes; closure alone does not end that licence. Licence records are retained for the life of the valid licence and 12 months after it lawfully ends. Ending one licence does not remove records needed for another valid app or remaining licence unit. Credential expiry is not licence termination. Purchase/payment records are retained for 6 years from purchase, or longer where statutory tax/accounting requirements require. Sole-trader tax records ordinarily need at least 5 years after the relevant 31 January submission deadline; late-return and enquiry rules can require a later date. Necessary lifetime entitlement linkage is distinct from routine payment detail and remains available while needed. Substantiated breach/suspension and related appeal records are retained for 6 years from the decision. Longer retention is limited to minimum evidence still justified by an unresolved dispute or scoped legal hold. This is a record-retention period; applicable legal claim deadlines remain separate. Any hold records its reason, scope, review and release condition. It does not justify retaining all account information or unsupported allegations indefinitely. We review retention at least annually and delete or anonymise information no longer needed, subject to applicable legal duties and justified continuing holds. We keep only the information necessary for each purpose. Passwords, token secrets and unrelated audio are not breach evidence; inaccuracies remain subject to correction. Closing/disabling an account, releasing a device or revoking access does not immediately erase records needed for these purposes. Erasure is a separate request and statutory rights remain available. Local files, browser storage and provider logs/backups have separate lifecycles. You may ask for information about the arrangements applicable to your records. Uninstalling does not erase provider records. You may ask about erasure and any grounds for retaining particular information.
7. Security, restrictions and appeals
Licensing features use authenticated requests, signed device proofs/credentials and protected Windows storage/device keys where supported. No system is guaranteed free of security risk. Automated licensing checks use account/licence status, computer allowance, device proof and credential validity to authorise an opening or refresh. A refresh deadline is different from ending a lifetime entitlement; a connection failure is not proof of breach. If a restriction appears wrong, contact Contact@sizesynth.com with the account email, affected app/decision reference and explanation. We will review your explanation and relevant evidence and send the outcome and reasons within 14 calendar days of receiving your appeal, including correction where appropriate. An appeal does not automatically restore access or create a discretionary refund; it does not delay or remove a correction/refund/remedy required by law. Where a solely automated decision has a legal or similarly significant effect, applicable safeguards include decision information, representations, human intervention and a way to challenge it.
8. Optional emails and purchased-app service messages
Where offered, two separate unticked choices cover (a) offers/promotions for OTHER SizeSynth.com products and (b) news/updates about OTHER SizeSynth.com products. You may choose either, both or neither. Declining or withdrawing does not affect your purchase or lawful access. An optional choice applies only when the website confirms it was saved; an unavailable/failed save does not block a valid purchase. Preference evidence identifies the verified account/email, purpose, notice version and actual choice/withdrawal. A stored old choice is not necessarily current permission: email/notice changes can require confirmation. An objection or suppression prevents that choice from being used as permission. Purchase alone is not permission. Relevant purchased-app software/security/compatibility/licensing/support information needed for access, and necessary account/receipt messages, are separate service messages covered by the app relationship. They do not depend on optional choices. Contract necessity, relevant security interests or legal duties apply as appropriate. This is not permission for compulsory newsletters, paid-upgrade ads or other-product offers. Optional withdrawal does not suppress legitimate necessary service messages. Withdraw either optional permission at Contact@sizesynth.com. Any marketing email we send will provide an easy unsubscribe route. Necessary limited choice, withdrawal/objection and suppression evidence may be retained to honour preferences, resolve disputes and prevent unwanted messages, subject to necessity and your rights.
9. Your rights, complaints and changes
Subject to applicable legal conditions, you may request access, correction, erasure, restriction or portability, object to legitimate-interest processing and withdraw consent. Rights have exceptions, including necessary claims/legal duties. Contact Contact@sizesynth.com; proportionate identity checks may be required. Applicable legal response deadlines govern, including lawful extensions. Licence appeals do not replace statutory privacy or consumer requests and their deadlines. You may complain to us or the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/, or another applicable supervisory authority. We identify notice versions and provide further notice where required. A changed policy is not retrospective acceptance of new app terms or a new optional use.