Privacy
What we keep and why, in plain language. MEY Audio Engineering, Amsterdam. Contact for anything on this page: info@wearemey.com.
And what each thing is for
When you get a Halo 2000 licence, we keep:
Your email address: to send you the licence key, let you retrieve it from your account page, and email you about updates to a product you own.
Your licence key: stored as a one-way hash plus the last few characters, never in full, so we can verify and manage the licence without holding the usable key.
Activations: when the plug-in activates, we record a device identifier (a hash, not your name or hardware serial) and when it was last seen, to run the licence and to stop a single licence from being spread across unlimited machines.
Download events: a record of installer downloads tied to your licence, so we can serve you the latest build and keep basic operational logs.
We also keep an internal audit log of administrative actions on licences (for example issuing or revoking one), so there's an honest record of what happened.
The 14-day trial collects nothing
Halo 2000's trial runs entirely on your machine. It needs no email address, no account and no server contact: the 14-day timer lives in two local, signed status files. We receive no personal data from the trial.
Optional, and handled by Ko-fi
The plug-ins are free and nothing asks you to pay. If you choose to make a voluntary donation, that payment goes through Ko-fi, which handles it end to end: your card details are handled by Ko-fi, not by us, and we never see them. We receive the amount and the name or message you chose to leave with it, and nothing else.
The direct download itself is anonymous
Every plug-in is a direct file: the download button links straight to it, with no name, no email and no form. Next to it is a separate, optional box where you can leave your email address if you'd like to hear about new releases; that's the only thing it's used for, and it's stored the same way as any other newsletter sign-up on the site.
The services we rely on
Ko-fi: any optional donation, as above.
A transactional email provider (Resend): to deliver release notices, replies to a support message, and the one confirmation email for a waiting list you asked to join.
Cloudflare: hosting for the site and the licence system (the database, file storage and the worker that issues and checks licences).
We don't sell your data, and we don't use advertising trackers on the site.
Website analytics: we keep our own privacy-first visitor counts, hosted on our own Cloudflare account, with no cookies and no third party. Your IP address is never stored: each view is reduced to an anonymous daily hash, along with the page, a coarse city-level location from Cloudflare, and the referring site. It tells us how many people visit and roughly where from (never who you are), and it's shared with no one.
On-page click data: to see which parts of a page actually get used (a download button, a section people click into), we record anonymous click positions per page. No cookie, no visitor identifier, no IP address. Just the page, a rough position on it, and a short label for what was clicked. It's used only to improve layout and content, never to build a profile of an individual visitor, and it's shared with no one.
Song plays: on pages with a song player, we record how far a play gets (for example, whether someone listens to the end or stops partway), so we can see which songs land and where listeners tend to drop off. Each play is tied to the same anonymous daily hash described above, not to your name or a device fingerprint, and it's shared with no one.
No cookies, so no banner
We don't use cookies, local storage, or any other technique that places information on your device or reads it back. That's the kind of thing that requires your prior consent under the Dutch Telecommunications Act (art. 11.7a) and the EU ePrivacy rules it implements. Our visitor counts and click data above are built entirely from information already present in your page request, processed anonymously on our own server, and nothing is ever placed on, or read from, your device. That's why this site has no cookie banner.
Where this does touch personal data under the GDPR, in the Netherlands the AVG: briefly, your IP address, on the way to becoming an anonymous daily hash. Our legal basis is legitimate interest (Article 6(1)(f) GDPR/AVG), meaning understanding and improving the site, kept to the minimum needed, never used for marketing or advertising, and weighed against your right to privacy. You can read about your rights, and how to reach us or the Dutch data protection authority, in the section below.
Retention and access
We keep licence and activation data while your licence exists and for as long as we need it for support and to meet legal and accounting obligations. You can ask what we hold about you, ask us to correct it, or ask us to delete it where we're not required to keep it: write to info@wearemey.com. Under EU/Dutch law you can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).
Updates
If this changes, we'll update the date at the top. Questions are always welcome at info@wearemey.com.