Effective Date: 2 October 2026
This Privacy Policy explains how REAV Rafał Sztaba, trading as JustAnother Audio, handles personal data when you visit our website, create an account, buy or activate our software, start a trial, sign up for emails, apply for a beta, or contact us. It follows the GDPR (Regulation 2016/679) and Polish law.
1. WHO WE ARE
The data controller is:
REAV Rafał Sztaba (d/b/a JustAnother Audio)
ul. Poronińska 8/20, 02-459 Warsaw, Poland
Registered in CEIDG · NIP: 7343587468 · REGON: 387258879
Email: [email protected]
Web: https://justanother.audio
For privacy requests, email [email protected] with the subject line “Privacy Request.”
We have not appointed a Data Protection Officer because we are not required to do so under Article 37 GDPR.
2. MOONBASE
We use Moonbase for our store, checkout, customer accounts, licensing, trials, downloads and update checks.
Moonbase is the seller of our licenses and an independent controller for the sale, payment, tax and fraud prevention. It also runs customer accounts, licensing, trials, downloads, update checks and email preferences for us, as described in its storefront privacy policy: https://justanother-audio.moonbase.sh/privacy-policy. Moonbase AS is in Norway and stores data with AWS in Ireland. For orders with a US billing address, the seller is Moonbase LLC in the US, which handles the payment data for those orders.
Moonbase receives:
- Account: name, email address, communication preferences. We never see your password.
- Purchase: billing address, country, order, product, price and tax details. Card details go to Moonbase’s payment provider, not to us.
- Activation and license checks: the device name and a device signature derived from your computer’s hardware, the license token (which links your account, license and computer), the time of the last check, and the IP address of the connection.
- Trial: when and on which computer a trial was started.
We get purchase, account and license records from Moonbase. An organisation may also give us the contact details of the person it assigns a license to. We use the information we need to deliver, administer and support your license and to prevent abuse. A computer’s device name often includes its owner’s name; you can rename your computer before activating.
3. DATA WE COLLECT
3.1 Website. Our hosting provider processes technical data such as IP address, browser, device, pages requested and time, to deliver and protect the site, and keeps it for a short time under its own policy. The website sets no cookies of its own. The browser storage it uses is listed in Section 9.
3.2 Support form. Email address, plugin, DAW, operating system and your message. A spam check confirms that a person is sending the form, using your IP address, browser details and similar signals. Messages arrive in our email mailbox.
3.3 The plugin. At activation, and whenever the plugin checks its license online, it sends Moonbase the data listed in Section 2. This is also how it learns about updates. The plugin doesn’t send us your audio, projects, presets or recordings, and we have no access to them. We only see files you choose to send us, for example with a support request.
3.4 Product emails. Your email address, where you signed up, when you consented, and the choices you made (for example interest in the Windows version). For Moonbase customers who opted in, we also store their Moonbase customer ID and which of our products they own. Once an hour we check our Moonbase customers’ opt-in status and update the list. We never add anyone who has unsubscribed.
3.5 Beta applications. Our beta form is currently closed. If you applied, we hold what you sent: name, email address, DAW, operating system and version, CPU, a short description of your work, and, if you gave them, the other tools you use and whether you could join Discord and give feedback within 7 days. Added automatically: the date and time, the country derived from your IP address, and your browser’s user-agent string. Applications are stored in our hosting provider’s database.
3.6 Discord. Our community server on Discord is optional. If you join, Discord handles your account and messages under its own privacy policy, as a separate controller. We read and moderate what you post on our server and may use feedback to improve our products.
4. WHY WE USE DATA
| Purpose | Data | Legal basis |
|---|---|---|
| Deliver, activate and support your license | Purchase, account and license data | Contract, Art. 6(1)(b) |
| Administer an organisation’s license and help its staff | Assigned person’s contact and license data | Legitimate interest in administering the organisation’s license, Art. 6(1)(f) |
| Prevent license abuse and fraud | License data, IP address | Legitimate interest in protecting our software and income, Art. 6(1)(f) |
| Answer support requests | Support form and email | Contract for customers, Art. 6(1)(b); otherwise legitimate interest in answering questions, Art. 6(1)(f) |
| Choose beta testers and run betas | Beta application | Steps you asked us to take before we issue a license, Art. 6(1)(b) |
| Country and user-agent with a beta application | Those two fields | Legitimate interest in spotting abuse of the form and knowing which systems applied, Art. 6(1)(f) |
| Moderate our Discord server and use feedback | Posts and feedback | Legitimate interest in running the community and improving the Software, Art. 6(1)(f) |
| Product emails | Email address, choices, consent record | Consent, Art. 6(1)(a) |
| Campaign attribution | The campaign link or website you came from | Consent, Art. 6(1)(a) |
| Not emailing people who unsubscribed; proving consent | Suppression and consent records | Legitimate interest in respecting your choice and showing compliance, Art. 6(1)(f) |
| Protect forms and the website | Spam-check signals, technical data | Legitimate interest in security and keeping out spam, Art. 6(1)(f) |
| Accounting and tax | Records in our own books; buyer invoices are Moonbase’s | Legal obligation, Art. 6(1)(c) |
| Legal claims | Relevant records | Legitimate interest in defending claims, Art. 6(1)(f) |
Fields marked as required in our forms are needed to handle your request. Without them we can’t process it. Everything else is optional.
License checks are automated. If activation or continued use is refused, email [email protected]. A person will review it, and you can explain your situation and contest the result.
5. WHO WE SHARE DATA WITH
| Recipient | What for | Location |
|---|---|---|
| Moonbase AS / Moonbase LLC | Store, checkout, accounts, licensing, trials, downloads, updates, email preferences | Norway (AWS Ireland); USA for orders with a US billing address |
| Our hosting, security and database provider | Website, forms, beta applications, spam check | USA and global network |
| Our email delivery and mailing-list provider | Sending emails, the product email list | USA |
| Our email mailbox provider | Support email | EU |
| Discord | Community server, only if you join | USA |
| Public authorities | Only where the law requires it | — |
We don’t sell personal data.
6. INTERNATIONAL TRANSFERS
Some recipients are outside the European Economic Area.
- Our hosting, security and database provider and our email delivery provider are in the US. Both are listed under the EU-US Data Privacy Framework (Commission decision 2023/1795), and their data processing terms also include the European Commission’s Standard Contractual Clauses.
- Our email mailbox provider stores mail in the EU. Its support staff in India may access it for technical support, under contractual safeguards between its EU and Indian entities.
- Moonbase LLC in the US handles payment data for orders with a US billing address. Moonbase is responsible for that transfer under its own privacy policy.
- Discord: if you join our server, you give your account and messages to Discord directly, under Discord’s terms.
Moonbase AS (Norway) is inside the EEA. For information about the safeguards that apply, email us.
7. RETENTION
- Accounting records: 5 years from the end of the year in which the tax was due.
- Support messages: 3 years after our last exchange.
- Beta applications: up to 3 years after you apply, unless you ask us to delete them earlier.
- Product email list: until you unsubscribe. After that we keep a minimal suppression record, so we don’t add you again by mistake, and, where needed to show compliance or deal with a claim, limited evidence of your consent and its withdrawal.
- Data held by Moonbase: under Moonbase’s privacy policy. Account and license data is kept while your account exists.
8. YOUR RIGHTS
You have the right to access, correct and delete your data, to restrict its processing, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Withdrawing doesn’t affect what we did before.
You can object to processing based on our legitimate interests, for reasons relating to your situation. You can object to direct marketing at any time, without giving a reason, and we will then stop using your data for marketing.
Email [email protected]. We answer within one month. We may ask you to confirm that it’s your account, but we won’t ask for ID documents.
You can complain to the Polish supervisory authority, UODO (https://uodo.gov.pl), or to the authority in the EU country where you live or work.
9. COOKIES AND BROWSER STORAGE
Our website sets no cookies of its own and uses no analytics or advertising trackers. It uses browser storage for things you ask for, and for campaign attribution only if you allow it:
| Name | Set by | Purpose | Consent |
|---|---|---|---|
moonbase_auth, moonbase_user |
Moonbase | Keeps you signed in | Not needed |
moonbase_session |
Moonbase | The order and checkout you started | Not needed |
moonbase_storefront |
Moonbase | Store settings | Not needed |
justanother:moonbase-intent |
Us | Remembers you clicked buy, so checkout opens (until you close the tab) | Not needed |
| Docs sidebar state | Us | Remembers which sidebar sections you collapsed (until you close the tab) | Not needed |
| Spam check | Our hosting provider | Bot check on the support form | Not needed |
moonbase_utm |
Moonbase | Records the campaign link or website you came from, so we know what led to a purchase | Only if you allow it |
The items marked “not needed” are needed for services you ask for, so they don’t need consent (Polish Electronic Communications Law, art. 399 ust. 3). Campaign attribution is stored only after you choose “Accept all” in our cookie banner. You can change your choice at any time with the “Privacy choices” link in the footer. Clearing browser storage removes all of these. Sign-in and checkout won’t work without the necessary ones.
10. MARKETING
We send product emails only if you agree. You can agree on the website, in your account, or when you start a free trial: starting a free trial includes agreeing to product emails. You can unsubscribe at any time, and that doesn’t end a trial already started. You can buy a license without joining the list.
Every marketing email has an unsubscribe link. Once you unsubscribe, a later sync from Moonbase won’t sign you up again.
License emails, support replies and important service notices aren’t marketing.
11. SECURITY
We use reasonable technical and organizational measures to protect personal data, including encrypted transport, access controls, and data minimization.
No system is perfectly secure. If we become aware of a personal data breach that requires notification, we will notify the relevant authority and affected users as required by law.
12. CHANGES
We may update this Privacy Policy from time to time. The current version is published on this page with its effective date.
13. CONTACT
For questions about this Privacy Policy:
REAV Rafał Sztaba (d/b/a JustAnother Audio)
ul. Poronińska 8/20, 02-459 Warsaw, Poland
Email: [email protected]
Web: https://justanother.audio
Copyright © 2026 REAV Rafał Sztaba. All rights reserved.