Last Updated: May 2026

At pnk noise, we are committed to protecting your privacy. This Privacy Policy describes how we collect, process, store, and share your personal data when you visit our website, register an account, or purchase our software products.

This policy is designed to comply with the European General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (Dataskyddslagen).

1. Data Controller

The data controller responsible for your personal data is:
Aladdin Björstadius (Enskild firma)
Hauptvägen 73, 123 58 Stockholm, Sweden
Organization Number: 050208-5657
Email: contact@pnk-noise.com

2. Personal Data We Collect

We only collect personal data that is necessary to provide you with our services and fulfill our contracts. This includes:

• Account Information: When you register an account, we collect your email address. Your password is encrypted and securely processed by our authentication provider (Supabase) and is never visible to us.
• Transaction Details: When you make a purchase, our payment processor (Stripe) collects your billing address, country, card details, and contact email. pnk noise does not store your credit card details on our servers; card processing is handled entirely by Stripe. We receive confirmation of the payment and basic customer details to link the purchase to your account.
• License Keys and Redemptions: We collect and store generated license keys and records of redemptions to manage your software activations.

3. Purposes and Legal Basis for Processing

We process your personal data under the following legal bases:

• Performance of a Contract (GDPR Art. 6.1.b): To create your account, deliver download installers, process your order, and register your software license key.
• Legal Obligation (GDPR Art. 6.1.c): To comply with bookkeeping and tax obligations under the Swedish Accounting Act (Bokföringslagen), which requires us to store transaction records.
• Legitimate Interests (GDPR Art. 6.1.f): To defend against piracy, fraud, secure our website terminal, and provide customer support.

4. Third-Party Service Processors

To operate our services, we share data with trusted third-party subprocessors acting on our behalf under Data Processing Agreements:

• Supabase: For cloud database hosting, user management, and secure account authentication.
• Stripe: For secure, encrypted card payment processing and checkout services.

5. Data Retention Period

We retain your personal data only as long as necessary:

• Account Details & Licenses: Maintained for as long as your account remains active so you can access your licenses and updates. You can request account deletion at any time.
• Accounting & Tax Records: Kept for up to seven (7) years following the calendar year of purchase, in strict compliance with the Swedish Bookkeeping Act.

6. Cookies and Tracking

Our website uses Google Analytics 4 (GA4) and the TikTok Pixel/Events API to measure ad conversion rates, analyze web traffic, optimize campaigns, and build targeted custom audiences. These tools track actions you take on our site (such as product page views, checkouts, and successful purchases) and transmit this data securely to Google and TikTok.

For your privacy, personally identifiable information (such as your email address and user ID) is hashed using industry-standard SHA-256 encryption on the client side before transmission.

We only load tracking cookies and run tracking scripts if you grant explicit, voluntary consent via our cookie banner. You can accept or decline this tracking at any time. Our site also utilizes strictly essential local storage tokens required to manage your account session and Stripe checkout features.

7. Your Rights Under GDPR

As a resident of the EU/EEA, you hold the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal data, except where we are legally required to retain it (e.g. bookkeeping).
• Right to Restriction & Object: Request that we limit processing or object to certain uses of your data.

To exercise any of these rights, please email us at contact@pnk-noise.com. If you believe we have processed your data unlawfully, you also have the right to lodge a complaint with your local data protection authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY) (IMY, Box 8114, 104 20 Stockholm, www.imy.se).