Skip to content

Legal

Privacy Policy

Last updated 2 November 2026

This policy explains which personal data is processed when you use geenaro.com, the plugins and the store at drumkits.gg, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller and Contact

The controller is Geenaro. For every privacy question or request, write to info@geenaro.com.

2. Visiting geenaro.com

The site is hosted by Vercel Inc. When you open a page, the server processes technical data such as your IP address, the time, the page requested, the referring page and your browser and operating system. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Server logs are kept only briefly.

Visits are counted with Plausible Analytics (Plausible Insights OÜ, Estonia). Plausible sets no cookies and stores no personal data; it does not track you across sites (Art. 6(1)(f) GDPR).

3. Cookies

geenaro.com uses only cookies that are strictly necessary for a feature you ask for, so no consent banner is shown:

  • gn_member: keeps you signed in with Discord on /plugins, for up to 7 days.
  • gn_dashboard_state: protects the Discord sign-in against forged requests, for 10 minutes.
  • gn_dashboard, admin_token and sellfy_oauth: sign-in and store connection for staff and the site owner only.

4. Contact Forms, Requests and Newsletter

If you use the contact, mixing or collaboration forms, the name, email address and details you enter are stored and sent to Geenaro by email so your request can be answered (Art. 6(1)(b) and (f) GDPR). A one-way hash of your IP address is stored with requests to stop spam. If you sign up for the newsletter, your email address is stored to send you news about music and products (Art. 6(1)(a) GDPR); you can unsubscribe at any time by writing to info@geenaro.com. Data is deleted once it is no longer needed, unless the law requires keeping it.

5. Plugins, Licenses and the Members Page

  • Discord sign-in on /plugins. Downloads and trials are for members of the Geenaro Discord server. When you sign in, Discord Inc. tells us your Discord user ID and name, and on each visit we ask Discord whether you are a member of the server (Art. 6(1)(b) GDPR).
  • License activation and checks.To activate and check a license, the plugin sends the license key, the plugin and version, the name of the computer, a salted hash of the computer's hardware ID and a device key created on the computer. The license key is stored encrypted. This lets us enforce the number of computers per license and stop key sharing (Art. 6(1)(b) and (f) GDPR).
  • Trials. To give each person and computer one trial, we store your Discord user ID, the hardware hash and, for abuse limits, a shortened hash of your IP address.
  • Bug reports. A report contains your message, the plugin, version, format, music software and system, an anonymous install ID, your Discord name and, if you give it, your email address. It is stored and sent to Geenaro by email so the problem can be fixed (Art. 6(1)(f) GDPR).

This data is kept while the license or trial exists and as long as it is needed for support, abuse prevention or legal obligations.

6. Purchases on drumkits.gg

The store at drumkits.gg runs on Sellfy. Payments are processed by Stripe or PayPal; card and bank details go to them, not to Geenaro. To fulfil your order, Geenaro receives your name, email address, order details and license key from Sellfy (Art. 6(1)(b) GDPR). Order and invoice data is kept for the period required by tax and commercial law (up to 10 years, Art. 6(1)(c) GDPR). License keys are checked with Sellfy when a plugin is activated or checked. Sellfy's own privacy policy is at sellfy.com/privacy.

7. Embedded Videos and Posts

Some pages show YouTube videos and Instagram posts. Their preview images are loaded from YouTube or Instagram, which transmits your IP address to Google Ireland Ltd. or Meta Platforms Ireland Ltd. The video or post itself, with the provider's own cookies, loads only after you click it (Art. 6(1)(f) GDPR, and your consent by clicking).

8. Service Providers and Transfers Outside the EU

Data is processed for Geenaro by service providers: Vercel (hosting and file downloads), Supabase (database), Apple iCloud Mail (email), Discord, Sellfy, Stripe and PayPal. Some of them are based in the USA or process data there. Transfers rely on the EU Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the EU standard contractual clauses (Art. 45 and 46 GDPR).

9. Your Rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format and to withdraw any consent with effect for the future (Art. 15 to 20 and 7(3) GDPR). Where processing is based on legitimate interests, you can object to it at any time for reasons arising from your situation (Art. 21 GDPR). Write to info@geenaro.com. You can also complain to a data protection supervisory authority (Art. 77 GDPR).

No decisions with legal effect are made about you by automated means alone.

10. Changes

This policy is updated when the site or the products change. The current version is always on this page. The terms of sale are in the Terms of Sale & Use.