Privacy Policy

Circuit Haze is a trading name of Shakey Associates Ltd (Company No. 07921714), registered at 167-169 Great Portland Street, London. We're the data controller for the information described below. This policy covers our website, our products — free and paid — and the account portal used to manage licenses. Our products and site aren't directed at children, and we don't knowingly collect data from anyone under 16.

What we collect

• Email address — when you sign up to the newsletter, buy a product, leave a tip, or sign in to your account. Sign-in uses a passwordless magic link; we store only a hash of that link's token, never the raw value.
• Purchase information — when you buy a product or leave a tip, payment is handled entirely by Paddle (see “Third parties” below). We receive only your email, the product purchased, and an order reference — never your card details.
• Device identifiers — activating a license binds it to a hashed machine identifier for that device, so we can enforce device limits and detect tampering. We never see or store anything else about the machine itself.
• Usage analytics — page visits, downloads, and product interactions, collected via our analytics provider only if you accept the cookie banner. See our Cookie Policy for the specifics.

How we use it

To create and secure your account, deliver license downloads, send transactional email (sign-in links, purchase receipts), respond to support requests, and understand how people use the site and plugins so we can improve them. If you've subscribed to the newsletter, we use your email to send product updates — you can unsubscribe at any time. We do this on the basis of performing our contract with you (purchases, licenses, account access), meeting our legal obligations (tax and accounting records), and our legitimate interest in understanding and improving our products — you can object to the latter at any time.

Third parties

We share the minimum data necessary with a small set of processors, by category:

• Payment processor — Paddle, our merchant of record for product purchases and tips. They handle payment, tax, and compliance directly; we never touch your card details.
• Analytics provider — routed through our own first-party domain so requests never go directly to a third-party host, and used for our own product decisions only.
• Email delivery provider — sends our transactional email (sign-in links, purchase confirmations).
• Hosting and database providers — run our infrastructure and store our data.

We don't sell your data, and we don't share it for third-party advertising. Some of these processors are located outside the UK/EEA; where that's the case, they provide appropriate contractual safeguards for the transfer.

Data retention

We keep account, entitlement, and license data for as long as your account is active, so your purchases keep working. Newsletter signups are kept until you unsubscribe. You can ask us to delete your data at any time — see “Your rights” below.

Security

We take reasonable technical and organisational measures to protect your data — access to production systems is restricted, and sensitive material like your device identifiers is stored in hashed form, never in the clear.

Your rights

Under UK GDPR you can ask us to access, correct, or delete your personal data, or to export it in a portable format. Submit a support request and we'll handle it directly — no ticket system, just us. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data, though we'd rather you talked to us first.

Changes to this policy

If this policy changes materially, we'll update the effective date above and, where appropriate, let newsletter subscribers know.