Privacy Policy

Last updated: October 26, 2026

The short version

This site sets no cookies and uses no analytics, tracking pixels, ads or session recording.
We don’t sell your data, and we don’t use it for automated decisions about you.
Three companies help us run the site: Vercel hosts it, Moonbase runs our store, accounts, licences and downloads, and Resend sends our emails: product news to people who asked for it, and a few emails to people trying auxCord. Below is exactly what each of them receives.

Who is responsible

Mountainroad DSP S.à r.l.-S, 29 Rosbösch, L-6870 Wecker, Luxembourg, is the controller for this website. Email: support@mountainroaddsp.com. We are a small company and are not required to appoint a data protection officer; write to the address above about anything on this page.

Visiting the site

This site is hosted by Vercel Inc. (USA). Our server region is Frankfurt, Germany, and pages are delivered through Vercel’s worldwide network from the location nearest to you. To deliver a page, Vercel necessarily receives your IP address and the request itself: the page address, date and time, your browser and operating system (user agent) and the referring page.

We use this only to deliver the site and keep it secure. Request logs in our Vercel dashboard are kept for at most one day; Vercel may keep its own security logs under its privacy policy. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Moonbase on every page

Every page asks Moonbase’s store for auxCord’s current price and availability, so the cart can show them. With that request, Moonbase receives your IP address, your browser details and the address of this website (your browser doesn’t tell it which page you are on). Moonbase does this for us as our processor and keeps its server logs for up to 90 days. Legal basis: our legitimate interest in showing current products and prices (Art. 6(1)(f) GDPR).

Accounts, trials, downloads and activations

Everything you type into the account, trial, download and activation pages goes directly from your browser to Moonbase. We don’t run our own database. Moonbase stores it for us as our processor, on Amazon Web Services in the EU (Ireland).

Creating an account: your name, email address and password, and that you accepted our terms and licence agreement and were shown this policy. If you tick “Email me news about Mountainroad DSP plugins”, Moonbase also records that consent. You need a name, email address and password to create an account; without an account you can’t download our software, start a trial or activate a licence.
Signing in and your account: your licences, the codes you redeem, and password changes.
Activating a plugin: which licence or trial you use, the name and an identifier of the computer, the plugin’s version and your operating system, whether you activated online or offline, and when. Moonbase also receives your IP address with each request. The plugin contacts Moonbase to activate and, from time to time, to check its licence.

Moonbase sends the emails these pages need: account confirmation, password reset and email changes. If you opted in, we may send you news about our plugins; every such email has an unsubscribe link, and you can withdraw your consent at any time.

When you start a trial, buy, or sign up for or out of news through Moonbase, Moonbase tells our server, which passes the details listed under “Our emails” to Resend. Our server doesn’t store them; its log of each message shows only the kind of event and the part of your email address after the “@”.

Our emails

Our emails are sent through Resend (Resend, Inc., USA), which keeps our email list in its EU data region (Ireland) as our processor. We do not track opens or clicks. Every email has an unsubscribe link.

Product news: you can sign up with the form on this site, or by ticking the news box when you create an account. We store your email address, the date you signed up and where (this website, account creation, or through Moonbase). Product news goes only to people who signed up. If you signed up and try auxCord, product news includes one offer when your trial ends. Legal basis: your consent (Art. 6(1)(a) GDPR).
Trying auxCord: when you start a trial, we store your email address, the product, and when the trial started and ends, and may send you a few emails during the trial to help you get auxCord working. These emails are help only, with no offers or promotions, and you get them whether or not you signed up for news; the end-of-trial offer is emailed only to people who signed up for news. Legal basis: our legitimate interest in helping the people trying our software (Art. 6(1)(f) GDPR); you can object at any time with the unsubscribe link or by writing to us.
Buying: when you buy, we store the product and the date of your first purchase and take you off the trial list, so trial emails stop. Buying doesn’t sign you up for news. Legal basis: our legitimate interest in not sending trial emails to customers (Art. 6(1)(f) GDPR).

Unsubscribing stops all of these emails (Moonbase’s account emails, such as password resets, still reach you). We keep your address marked as unsubscribed, so it stays that way if you sign up for a trial or buy later; ask us and we delete it. Otherwise we keep your address and these details for as long as your Moonbase account is open, or, if you only signed up for news, until you unsubscribe.

In Moonbase’s dashboard we can see your name, email address, phone number (if you gave one), time zone, purchases, licences and activations. We use this to help you when you contact us. Legal basis: providing the account and licence you asked for (Art. 6(1)(b) GDPR); for news emails, your consent (Art. 6(1)(a) GDPR). We keep your account for as long as it is open; ask us to delete it at any time.

Buying

When you buy, you buy from Moonbase, the seller of record: Moonbase AS (Norway) or Moonbase LLC (USA), whichever is named on your order. For the sale, Moonbase is a separate controller: it handles your payment, billing details, VAT, invoice, receipt and refunds under its own privacy policy. We never receive your card or bank details.

From Moonbase we receive the order and licence information: what you bought, when, for how much, and the customer details listed above. We use it for support and for our accounts, which we keep ourselves; where the law requires, we pass sales records to the Luxembourg tax authorities. Legal basis: the contract (Art. 6(1)(b) GDPR) and our accounting obligations (Art. 6(1)(c) GDPR); accounting records are kept for as long as Luxembourg law requires, currently ten years.

Error reports to Moonbase

If a request to Moonbase fails, your browser sends Moonbase a short error report so faults can be found and fixed. It contains the page address without anything after a “?” or “#”, the store address that failed (also without its query and without activation ids), the HTTP status and method, the type of error and, for unreadable responses, your browser’s user agent. It never contains your email address, one-time codes, activation tokens or the content of the response. Moonbase keeps error reports for 90 days. Legal basis: our legitimate interest in a working store (Art. 6(1)(f) GDPR).

No cookies

This site sets no cookies, so it has no cookie banner. It keeps two things in your browser’s local storage, only to make the site work:

Name	What it holds	How long
mrd-cart	What is in your cart, once you add something. It stays in your browser.	Until you empty your cart or clear your browser data
moonbase_auth	Your sign-in session and basic account details, so you stay signed in. The session token goes to Moonbase with your requests, so it knows it’s you.	Until you sign out or clear your browser data

Both are strictly necessary for the cart and your account, which is why no consent is asked for them.

Emailing us

If you write to us, we receive your email address, your message and anything you attach. Our mailbox is hosted by cyon AG in Switzerland. We use your message to answer you and delete it 12 months after the conversation ends, unless it has to be kept longer as a business record. Legal basis: answering you and providing support (Art. 6(1)(b) and (f) GDPR).

Where your data goes

Moonbase AS is in Norway, in the European Economic Area. It stores data with Amazon Web Services in the EU (Ireland).
Moonbase LLC (USA) is the seller for some orders, and Moonbase uses further service providers. Moonbase’s privacy policy lists them and the safeguards it uses for transfers outside the EEA.
Vercel Inc. (USA) is certified under the EU–US Data Privacy Framework.
Resend, Inc. (USA) keeps our email list and sends our emails from its EU data region (Amazon Web Services, Ireland).
Switzerland, where our mailbox is hosted, has an adequacy decision from the European Commission.

Your rights

You have the right to:

see the personal data we hold about you and get a copy (access);
have it corrected (rectification) or deleted (erasure);
have its use restricted (restriction);
receive it in a common, machine-readable format (portability);
object to processing based on our legitimate interests (objection);
withdraw your consent at any time, without affecting what happened before.

We make no automated decisions about you. To use any of these rights, write to support@mountainroaddsp.com. You can also complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu, or to the authority in your own country.

Children

This site is not aimed at children under 16, and we don’t knowingly collect their data.

Changes

If anything here changes, this page is updated first, and the date at the top shows when.