Privacy policy

Data controller

HIFUMI

Audio and the app

SoundFerry processes audio on your Mac and sends it to your selected speakers over your local network. Audio is not uploaded to the licensing server. Trial and purchased-licence checks contact the licensing service as described below. When you request an update check, Sparkle connects to the update server.

Trial checks

The trial sends a device identifier derived by hashing a hardware identifier together with a product identifier. The server stores that hash, trial start, expiry and last verification time to enforce the seven-day trial. Checks happen at activation, app restart and normally every 12 hours. Requests also expose an IP address to the hosting provider. A hashed identifier is pseudonymous, not a guarantee of anonymity.

Purchases and licence activation

Paddle processes purchases as Merchant of Record under its privacy policy. Our licensing service stores transaction references, claim-verification hashes, signed licences, grant/block status and the hashed device identifier currently assigned to a purchased licence. It also stores the issue and last-check times needed to provide a signed activation lease that normally lasts no more than about 12 hours. These records support delivery, recovery, one-Mac activation, transfer and refund handling. The licensing service does not store payment card details.

When a licence is first activated or moved to another Mac, the service looks up the purchaser email address held by Paddle and sends a time-limited confirmation link through Zoho Mail. The address is used for that confirmation and is not added to the licensing database. Zoho receives the destination address and confirmation message in order to deliver the email under Zoho's privacy policy. The server stores a hash of the one-time confirmation token, its expiry and the requested hashed device identifier; it does not store the usable link token.

Website and support

Cloudflare hosts this website and processes connection information to serve and protect it. Google Fonts receives requests when fonts load. The Google tag used for optional website measurement is linked to Google Ads, as explained below. Information you send by email is used to respond to your request.

Optional website analytics

We ask for your permission before loading Google Analytics. If you allow analytics, Google processes analytics cookies, page visits, button interactions, scroll depth and browser/device information to help us improve the website. Requests also expose your IP address to Google. The optional Google Ads measurement checkbox separately permits advertising storage and sending user data to Google for advertising measurement through the linked Google tag. It starts unchecked. Allowing analytics alone does not enable those advertising permissions. Ad personalisation and Google Signals remain disabled even if you check it. We do not intentionally send email addresses, licence data, form inputs or audio to Analytics or Google Ads. Page URLs exclude query strings and fragments, and referrers are limited to their origin.

Your choices are stored in this browser for up to 180 days. Analytics cookies are configured with a 180-day lifetime, which may be renewed by later visits. You can decline without losing website functionality or reopen “Analytics preferences” at the bottom of the page to change either choice. Withdrawing permission stops future collection, removes this site's Google measurement cookies and reloads the page if the tag was active; it does not delete data already received by Google. If your browser cannot save preferences, you may be asked again on another page. See Google's Privacy Policy for Google's processing.

Contact

For data access, correction or deletion requests, use the relevant support channel provided by the service involved. We may need to verify your request and retain information needed for legal obligations or licence support.

Retention

As a general policy, HIFUMI retains trial and licensing records for the duration of the SoundFerry service, while needed to prevent repeated trials, recover perpetual licences and handle refunds. Support correspondence is also generally retained while the service is provided, to maintain the history needed for continuing support.

This does not mean unconditional permanent retention. Data that is no longer needed for these purposes is subject to deletion or anonymisation, unless retention is required by law. We assess requests for erasure and other statutory rights in light of the applicable law and any continuing need to retain the data. Use the relevant service provider's privacy request process to make a request. Paddle and hosting providers apply their own retention policies to data they process.

With your measurement permission, Google measurement cookies may use the soundferry.app parent domain to connect an advertising visit with a purchase on license.soundferry.app. The purchase site asks separately for measurement permission. Verified purchases can send a transaction identifier, the paid amount and currency to Google Ads; email addresses, receipt secrets and licence files are not sent.