Last updated: February 2, 2022
The privacy of your data has been an important consideration throughout all stages of the design and development of Lofi Generator (accessible at lofigenerator.com). This policy details what data is collected, how it's handled, rights to your data and how you can get in contact regarding the site's privacy practices.
In order to minimise collection of user data, many features commonly found in similar websites have been omitted completely from Lofi Generator's design, including user accounts, targeted advertising technologies and persistent storage of user preferences. However, certain site features still require the handling of user data, as outlined below.
In order to facilitate the sale of digital products (including the packs of unique tracks available at lofigenerator.com/downloads), Lofi Generator integrates with the payment processing platform Stripe and their service Stripe Checkout. This means the personal and billing information you provide at checkout goes directly to Stripe for processing of the payment, and then some of that information becomes accessible to Lofi Generator so that your order can be fulfilled. For information on how Stripe handles your data, please refer to Stripe's Privacy Policy.
The personal information Lofi Generator handles in order to fulfil an order includes the email address and name entered at checkout. Following a successful payment, Lofi Generator uses this information to send you an automated email containing the download link of the digital product purchased. The email provider we use to enable this correspondence is Twilio SendGrid, who's own Privacy Policy is available here.
Lofi Generator does not directly store any billing or personal information. However, we do keep a record of the transaction including a reference code that can be used to identify the relevant records kept by Stripe. This enables Lofi Generator to better serve customers in certain situations, such as when we need to perform a refund, respond to customer queries or rectify potential errors in the billing process or delivery of products. This transaction record is stored in a database hosted by our database provider, Fauna.
Lofi Generator will never sell any of the personal or billing information provided at checkout, and we will never use it for marketing or promotional purposes.
As mentioned above, Lofi Generator integrates the payment processor Stripe to facilitate the sale of digital products. The integration involves the inclusion of a script provided by Stripe, called Stripe.js. This script reports certain information about your interactions with the site back to Stripe in order for them to detect fraudulent and bot behaviour. You can read more about the privacy and security of Stripe.js here.
In order to monitor overall trends in the usage of the site, Lofi Generator uses the open source Plausible Analytics, which is a GDPR, CCPA and cookie law compliant site analytics tool. Plausible Analytics collects only aggregated information which does not allow any individual visitor to be identified or tracked. For more information, see the Plausible Analytics Data Policy.
When you write to us with a question or to ask for help or give feedback, we keep that correspondence, including the email address, so that we have a history of past correspondences to reference if you reach out in the future.
The only times we’ll ever access or share your info are:
To provide products or services you’ve requested. As detailed above, Lofi Generator relies on some third-party services to operate and those third parties can access varying amounts of your personal information.
To respond to your refund or troubleshooting requests.
When required under applicable law.
We apply the same data rights to all customers, regardless of their location. Currently some of the most privacy-forward regulations in place are the European Union’s General Data Protection Regulation (“GDPR”) and California Consumer Privacy Act (“CCPA”) in the US. Lofi Generator recognises all of the rights granted in these regulations, except as limited by applicable law. These rights include:
Right to Know. You have the right to know what personal information is collected, used, shared or sold. We outline both the categories and specific bits of data we collect, as well as how they are used, in this privacy policy.
Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.
Right to Correction. You have the right to request correction of your personal information.
Right to Erasure / “To be Forgotten”. This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession and, by extension, all of our service providers.
Right to Complain. You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority. To identify your specific authority or find out more about this right, EU individuals should go to https://edpb.europa.eu/about-edpb/board/members_en.
Right to Restrict Processing. This is your right to request restriction of how and why your personal information is used or processed, including opting out of sale of personal information. (Again: we never have and never will sell your personal data.)
Right to Object. You have the right, in certain situations, to object to how or why your personal information is processed.
Right to Portability. You have the right to receive the personal information we have about you and the right to transmit it to another party.
Right to not be subject to Automated Decision-Making. You have the right to object and prevent any decision that could have a legal, or similarly significant, effect on you from being made solely based on automated processes. This right is limited, however, if the decision is necessary for performance of any contract between you and us, is allowed by applicable law, or is based on your explicit consent.
Right to Non-Discrimination. This right stems from the CCPA. We do not and will not charge you a different amount to use our products, offer you different discounts, or give you a lower level of customer service because you have exercised your data privacy rights.
If you are in the EU, you can identify your specific authority to file a complaint or find out more about GDPR, at https://edpb.europa.eu/about-edpb/board/members_en.
All data is encrypted via SSL/TLS when transmitted from our hosting provider to your browser. We choose to collect and store only the minimum amount of data necessary to operate, as detailed earlier in this policy. We also strive to work with only reputable third party providers and maintain transparency with users about who those providers are and what data they can access.
While Lofi Generator's database is located in the US, our hosting, email and payment providers (Netlify, Twilio SendGrid and Stripe respectively) operate using global infrastructure. Please be aware Lofi Generator cannot guarantee the storage location of any information you transfer to us or the providers we work with. By using our site, purchasing our products or services and/or providing us with your information, you acknowledge and consent to international transfer and storage of your data.
We may update this policy as needed to comply with relevant regulations and reflect any new practices. We encourage users of the site to check back regularly.
If you have any questions or concerns about this privacy policy, you can get in touch by emailing us at privacy@lofigenerator.com.
Adapted from the Basecamp open-source policies / CC BY 4.0