Privacy Policy

1. Overview

This Privacy Policy explains how Glass Harbor LLC, a Pennsylvania limited liability company ("Glass Harbor," "we," "us," or "our"), collects, uses, shares, and protects personal information.

It covers both:

• Our website and store at glassharbor.io and glassharbor.io/store, including checkout and support; and
• Our software, including Gold Star Echo Chamber, and the licensing system it uses.

The Short Version

We are a small audio software company. We collect what we need to sell you a license, deliver your download, keep your license working, and provide support — and not much else.

What our plug-ins do and do not do:

• The Software contacts our licensing servers when you activate, start or check a trial, or deactivate, and may periodically attempt to sync afterward to confirm your license is still valid. A sync that does not complete has no effect on your license — an activated computer can stay offline indefinitely.
• Those syncs transmit your License Key, a hardware-derived Machine Identifier, basic system information, and your IP address — licensing data only.
• The Software does not collect usage analytics. We do not track which presets you load, which parameters you adjust, how long you use the plug-in, or what projects you open.
• The Software never transmits your audio, recordings, projects, or session files. Your creative work stays on your computer.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

2. Information We Collect

2.1 Information You Give Us

Proof of consent. When you ask for the download link or join the mailing list on our website, we record your email address, the date and time, the exact consent wording you agreed to, your IP address, and your browser's user-agent string, and we keep that record as evidence of your consent. Marketing signups use double opt-in: you are only added to the marketing list once you click the confirmation link we email you.

2.2 Information the Software Collects

The Software transmits information to our licensing system in two situations:

• When you take a licensing action — activating a purchased license, starting or checking a free trial, or deactivating a computer;
• When it periodically attempts to sync after activation, to confirm your license remains valid. How often this occurs is governed by our licensing policy, which is described in Section 5 of our End User License Agreement.

In either case, the Software transmits:

• Your License Key or license identifier;
• A Machine Identifier — a value derived from your computer's hardware characteristics, used to bind and recognize an activation;
• Basic system information — operating system and version, CPU architecture, and the Software version and plug-in format in use;
• Your IP address, which our servers receive automatically as part of any internet request;
• Timestamps of activation, deactivation, and sync events.

We use this information only to operate licensing — to confirm you have a valid license, to enforce the two-activation limit, to let you deactivate and move activations, to track when a free trial started and when it expires, and to detect License Key sharing, trial abuse, or circumvention.

Periodic syncs necessarily create a record of when a licensed computer was last online. We do not use that record to build a profile of your working habits, and we do not analyze it for any purpose other than licensing integrity.

Trial users: we collect the same licensing information when you run a free trial as when you activate a purchased license. If you do not go on to buy, we retain the trial record so that we can tell whether a trial has already been used on that computer.

We do not collect through the Software: your audio, project files, session data, file names, file paths, preset choices, parameter settings, session length, other software installed on your computer, or any content you create.

2.3 Information Collected Automatically on Our Website

When you visit our website, we and our service providers automatically collect:

• IP address and approximate location derived from it (typically city or region level);
• Browser type and version, operating system, device type, and screen size;
• Pages viewed, time spent, referring URL, and links clicked;
• Date and time of your visit;
• Cookie and similar identifiers — see Section 7.

2.4 The Site Assistant

Our website includes a chat assistant that answers questions about Glass Harbor and our products. Messages you type into it are sent to our server and forwarded to Anthropic, PBC, which generates the reply using its Claude models under Anthropic's commercial terms; Anthropic does not use API inputs and outputs to train its models. We do not link chat messages to your email address or order, and we do not keep chat transcripts beyond the short-term server logs needed to operate the service. Please do not enter passwords, payment details, or other sensitive information in the chat.

2.5 Embedded Videos

Some pages, such as the Video page, show videos hosted on YouTube, a service of Google LLC. Each video's preview image is delivered from our own website, so loading the page does not contact YouTube. The YouTube player loads only when you press play, in YouTube's privacy-enhanced mode (youtube-nocookie.com); from then on, YouTube receives your IP address and browser information and may use cookies or similar technologies under Google's Privacy Policy.

3. Where Information Comes From

We obtain personal information from:

• You, when you register, purchase, subscribe, contact support, or submit content;
• The Software, at activation, deactivation, trial status checks, and periodic licensing syncs, as described above;
• Automated collection on our website through cookies and server logs;
• Our merchant of record, Paddle (order confirmations, fraud signals, chargeback notices), our service providers, including our email provider (delivery and engagement data), and our licensing platform, Cryptlex, which issues and administers License Keys;
• Authorized resellers, who may share your name, email, and order details so we can issue and support your license.

4. How We Use Your Information

We use personal information to:

1. Process orders and deliver products — take payment, issue License Keys, provide downloads, send order confirmations and receipts;
2. Operate licensing — activate, validate, deactivate, and manage licenses, and enforce activation limits;
3. Provide support — answer questions, diagnose problems, process license resets, and handle refund requests;
4. Resend what you have bought — confirm your order and re-issue your License Key or download link on request;
5. Send service communications — order confirmations, license notices, critical bug or security notices, and changes to our policies. These are not marketing and you cannot unsubscribe from them while you hold an active license;
6. Send marketing communications, where you have opted in or where permitted by law — product announcements, updates, and offers. You may unsubscribe at any time;
7. Improve our products and website — understand which products and pages interest people, and diagnose crashes and compatibility problems reported to us;
8. Prevent fraud and abuse — detect payment fraud, chargeback abuse, License Key sharing, and circumvention of activation;
9. Comply with law — meet tax, accounting, export-control, and other legal obligations, and respond to lawful requests;
10. Protect our rights — establish, exercise, or defend legal claims.

Glass Harbor does not use your personal information to train artificial intelligence or machine learning models, and we do not sell, license, or otherwise make it available to any third party for that purpose. We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you. Where we use service providers, we require by contract that they process your information only to provide their services to us, and not for their own purposes, including model training.

5. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal information on the following legal bases:

6. How We Share Information

We share personal information only as described below. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Paddle. Purchases are made from Paddle (paddle.com), our merchant of record. Paddle is an independent controller of the personal information it collects at checkout — name, billing address, contact and order details, payment details — under its own privacy notice, and retains transactional records for its own legal obligations. To exercise rights over that data, contact Paddle at paddle.net; a request to us covers only the data we hold. We use checkout data only to fulfil, support and protect your order, and never for marketing unless you opted in at checkout.

Service providers. We use vendors who process information on our behalf, under contract, and only on our instructions:

Provider names are listed so you know who handles your information. If we change providers, we will update this table.

Legal and safety. We may disclose information where we believe in good faith it is necessary to comply with law, a subpoena, or a court order; to enforce our Terms of Service or EULA; to detect or prevent fraud or security issues; or to protect the rights, property, or safety of Glass Harbor, our customers, or the public.

Business transfers. If Glass Harbor is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you and this Policy will continue to apply until the acquirer provides notice of any change.

With your direction. We share information with third parties when you ask us to.

7. Cookies and Similar Technologies

Our website uses cookies — small text files stored on your device — and similar technologies such as pixels and local storage.

Categories We Use

Strictly necessary. Required for the site to function: processing checkout and security. These cannot be disabled through our cookie controls, because the site will not work without them.

Functional. Remember your preferences, such as language, currency, and whether you have dismissed a notice.

Analytics. Help us understand how visitors use the site — which pages are viewed, how people arrive, and where they encounter problems. We use this in aggregate to improve the site.

Your Choices

• Cookie banner. Where required by law, we ask for your consent before setting non-essential cookies, and you can change your choices at any time through the Cookie settings link in the footer of every page.
• Browser settings. Most browsers let you block or delete cookies. Blocking strictly necessary cookies will prevent parts of the site from working.
• Do Not Track and Global Privacy Control. We honor the Global Privacy Control (GPC) signal as a valid opt-out of sale and sharing where applicable law requires it. Browser "Do Not Track" signals are not standardized and we do not currently respond to them.

Cookies We Set

Google Analytics does not load, and sets no cookies, until you choose Accept in the cookie notice; if you decline, no Google Analytics script runs. We do not enable Google Signals or advertising features. When you open checkout, Paddle sets its own strictly necessary cookies to process your order, as described in Paddle's privacy notice.

Our plug-ins do not use cookies. Cookies apply to our website only.

8. Data Retention

We keep personal information only as long as we need it:

When a retention period ends, we delete the information or irreversibly anonymize it. We may retain information longer where required by law or where necessary to establish or defend legal claims.

9. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

• Access — obtain a copy of the personal information we hold about you;
• Correction — have inaccurate information corrected;
• Deletion — request that we delete your personal information;
• Portability — receive your information in a portable, machine-readable format;
• Restriction — ask us to limit how we use your information;
• Objection — object to processing based on legitimate interests, or to direct marketing;
• Withdraw consent — where we rely on consent, withdraw it at any time (this does not affect processing already carried out);
• Opt out of sale or sharing — we do not sell or share personal information, but you may exercise this right regardless;
• Non-discrimination — we will not deny you products, charge you a different price, or provide a lesser level of service because you exercised a privacy right.

An Important Note on Deletion

Deleting your information may mean we can no longer validate your licenses or restore them if you change computers. We will explain the consequences before acting on a deletion request, and we may need to retain your order and license records to meet tax obligations and to honor your perpetual license.

How to Exercise Your Rights

Email support@glassharbor.io with your request and the email address you used to purchase. We will verify your identity — usually by confirming you control that email address, and for sensitive requests by asking for order details only you would know.

We will respond within 45 days (extendable by another 45 days where permitted) or within one month for EEA/UK residents (extendable by two further months for complex requests). There is no charge unless a request is manifestly unfounded or excessive.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We will require written proof of authorization and may ask you to verify your identity directly.

If You Are Unsatisfied

Contact us first at support@glassharbor.io and we will try to resolve it. You also have the right to complain to a supervisory authority:

• EEA residents: your national data protection authority.
• UK residents: the Information Commissioner's Office (ico.org.uk).
• California residents: the California Privacy Protection Agency or the California Attorney General.
• Pennsylvania residents: the Pennsylvania Office of Attorney General, Bureau of Consumer Protection.

10. Notice for U.S. State Residents

Residents of California, Colorado, Connecticut, Virginia, Utah, New Jersey, and other states with comprehensive privacy laws have the rights described in Section 9.

Categories of personal information we have collected in the past 12 months, using California's statutory categories: identifiers (name, email, address, IP address, order and license identifiers); commercial information (purchase records); internet or network activity (browsing and interaction with our site); geolocation data (approximate, derived from IP address); and inferences drawn from the above (limited to product interest).

We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months, and we do not knowingly do so.

Sensitive personal information. We do not collect or process sensitive personal information as defined by California law.

11. International Data Transfers

Glass Harbor is based in the United States, and our service providers may operate in the United States and elsewhere. If you are located outside the United States, your personal information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures where needed. You may request a copy of the relevant safeguards by writing to support@glassharbor.io.

12. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls limiting staff access to what their role requires, and use of reputable providers for checkout, licensing, and hosting.

No security measure is perfect. We cannot guarantee absolute security, and you provide information to us at your own risk. Keep your License Key confidential, and notify us promptly at support@glassharbor.io if you believe it has been exposed or misused.

If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by applicable law.

13. Children's Privacy

Our website and products are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Users between 13 and 18 should use our site only with the involvement of a parent or guardian.

If you believe a child under 13 has provided us with personal information, contact support@glassharbor.io and we will delete it promptly.

14. Third-Party Websites

Our website links to sites we do not operate, including resellers, payment pages, forums, and social media. This Policy does not apply to them. Please review the privacy policy of any third-party site you visit.

15. Changes to This Policy

We may update this Policy from time to time. The current version is always posted at glassharbor.io with its Effective Date.

If we make material changes — for example, if we begin collecting a new category of information or use it for a materially different purpose — we will provide prominent notice on our site and, where we have your email address and the law requires it, by email. Where a change requires your consent, we will ask for it.

16. Contact Us

Glass Harbor LLC 2147 Aquetong Road, New Hope, PA 18938

Privacy inquiries and rights requests: support@glassharbor.io General support: support@glassharbor.io Website: glassharbor.io