YOUR INFORMATION

Privacy notice.

Last updated: 24 October 2026.

Who to contact

StreamerSoundPacks is operated under the ChromaCat brand. For privacy questions or requests, email support@streamersoundpacks.com.

Information used by the shop

• Purchases and downloads: your checkout email, purchased pack names, Stripe checkout reference, purchase date, payment status, and download-access records. When the server begins serving a ZIP, we record the order reference, pack, time, and associated checkout-consent version and acceptance status. This is a delivery-start record, not proof that you saved the complete file. It does not identify who used a shared download link. Stripe also records your checkout acceptance of the immediate-download terms.
• Delivery emails: your email address, download links, message content, and delivery-processing records, including message identifiers, attempts, and errors.
• Support: the messages and information you choose to send us by email.
• Technical information: IP addresses are used for request limits. Hosting providers may process request details such as URLs, timestamps, browser information, and IP addresses to deliver and protect the service. The application stores keyed hashes of IP addresses and recovery email addresses for request limiting. These are pseudonymous records, not anonymous data.

Why this information is used

We use purchase and contact information to fulfill orders, provide download access, send purchase and recovery emails, and answer support requests. These activities are necessary to provide the service you request or perform a purchase contract (GDPR Article 6(1)(b)).

We use technical and delivery records for our legitimate interests in preventing abuse, protecting paid downloads, diagnosing failures, reviewing download or refund disputes, and maintaining a reliable service (Article 6(1)(f)). Where applicable, records may also be retained to meet legal obligations (Article 6(1)(c)). Download consent concerns delivery and withdrawal rights; it is not consent to marketing.

An email address is needed for purchase delivery and download recovery. Without it, we cannot provide those services. Browsing and listening to previews do not require a shop account.

Payments and service providers

Card information is entered on Stripe’s hosted checkout. Our storefront does not store your full card number or security code. Stripe processes payment and transaction information under its own applicable privacy terms.

• Netlify: website hosting, server functions, purchase database, private file storage, and technical delivery.
• Stripe: checkout, payment verification, and checkout-consent records.
• Resend: purchase and download-recovery email delivery.

Support messages are also handled by the provider of our contact email inbox. Authorized operators and providers may access information as needed to operate or support the shop. Information may be disclosed where legally required. We do not sell customer personal data or use purchase emails for marketing.

These providers may process data outside the European Economic Area. Their published data-processing terms describe safeguards such as standard contractual clauses where applicable. These do not mean that all processing takes place in the EU. You can request information about applicable safeguards by emailing us. Processing terms: Netlify DPA, Stripe DPA, and Resend DPA. Provider information: Netlify privacy, Stripe privacy, and Resend privacy.

Cart storage and cookies

The storefront uses browser local storage to remember the pack identifiers in your cart between visits. The storage key is streamersoundpacks-cart-v1. Removing a pack updates the saved cart; clearing this site’s browser data removes it. This storage is not sent to an advertising service.

If you choose “Accept analytics,” we load Google Analytics 4 (measurement ID G-K6P4ZSGQ0E) to understand page visits and improve the shop, based on your consent (GDPR Article 6(1)(a)). It may process device, browser and usage information and use _ga cookies. Advertising storage, advertising personalization and Google signals are disabled in our tag configuration. Analytics is not loaded before acceptance or after rejection. With consent, we measure product views, preview plays, cart changes, checkout starts, and confirmed purchases including pack identifiers, USD value and a pseudonymous transaction identifier. Purchase tracking runs only on a server-verified live confirmation page, after removing its checkout reference from the address. Download-access and recovery pages remain excluded. We remove query strings and fragments from page URLs sent by our tag and do not send purchase emails or download-access tokens. Stripe’s separate checkout may use cookies and similar technologies for payment and security; see Stripe’s cookie policy.

The confirmation page uses session storage to keep its checkout reference within the browser tab after removing it from the address, so refreshing can still retrieve downloads. A local marker prevents repeat purchase-event submissions on confirmation-page refresh; Google also receives a consistent pseudonymous transaction identifier for deduplication. Analytics consent does not affect payment or delivery. Your analytics choice is saved in this browser for 180 days. Analytics cookies set by our tag have a maximum configured lifetime of 180 days without refresh. Use “Analytics preferences” in the footer to change your choice or withdraw consent. Withdrawal stops future collection and removes accessible Google Analytics cookies; it does not automatically erase data already processed by Google. Google’s property-level retention settings are managed separately and have not been verified. Google may process data outside the EEA; see Google’s privacy policy. You can use the shop and checkout without analytics consent.

How long information is kept

Order and access records support repeat downloads and purchase verification. Email records support delivery and troubleshooting; security records support abuse prevention; support emails support customer enquiries. Cart information stays in your browser until it is changed or removed.

• Application request-limit records: removed by daily cleanup once older than 24 hours, so physical deletion may take up to 48 hours.
• Application email queue: recipient addresses, message content, links, and delivery details are removed by daily cleanup once older than 30 days, so removal may take up to 31 days. A minimal purchase-job identifier, creation date, and archived status remain to prevent duplicate sending. Old recovery jobs are deleted.
• Download-start history: retained for 180 days for delivery support and dispute review, then removed by daily cleanup (up to 181 days total). No IP address or browser fingerprint is added to this history.
• Purchase and download entitlements: retained while needed to provide ongoing download access and resolve purchase issues. They are not deleted by temporary-record cleanup. Contact us to request review or deletion; deleting an entitlement may remove repeat-download access. Applicable financial-record retention requirements are handled separately.
• Support emails: retained while needed to resolve the enquiry and related disputes. Contact us to request review or deletion.

These cleanup periods apply to the shop’s application database, not separately held Stripe, Netlify, Resend, email-inbox, backup, or technical-log copies. Provider retention is governed by their terms and applicable obligations. Deletion requests are reviewed across the relevant systems rather than treated as completed by database cleanup alone.

Your choices and rights

Depending on the circumstances, you can request access, correction, erasure, restriction, or portability of your personal data, and object to processing based on legitimate interests. These rights are subject to applicable conditions; some records may need to be retained for legal obligations or claims. If processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

We normally respond within one month; permitted extensions will be explained. Send requests to support@streamersoundpacks.com. We may need to verify your identity before disclosing or changing purchase information. You may also complain to your local data-protection authority, including Bulgaria’s Commission for Personal Data Protection.

Security and automated decisions

Downloads use access links and expiring signed file links. Keep purchase and recovery emails private because their links provide access to your purchases. No system can guarantee absolute security.

The shop automatically checks payment status and limits excessive requests. It does not use personal data for automated decisions producing legal or similarly significant effects.