what the instruments send, what we keep, and what we never collect.
Last updated 21 September 2026 · Touchmachines L.L.C., Tucson, Arizona, USA
We run no analytics, set no tracking cookies, and sell nothing about you to anyone. The instruments contact us only to make licensing work.
An instrument contacts our licensing service in two situations only: when you activate a licence key, and when an active licence periodically re-checks itself. Opening it, playing it, and saving presets involve no network traffic at all.
| What | When | Why |
|---|---|---|
| Machine fingerprint | Activation, re-check | Enforces your licence's activation limit |
| Product name | Activation, re-check | Says which product the licence is for |
| Licence key | Activation | Validates the purchase |
The machine fingerprint is a one-way hash of a system identifier. It is deliberately not built from your MAC address, your hostname, or your drive serial number — the usual ingredients, and the ones that would actually tell us something about you. It distinguishes your computer from someone else's and does nothing else. On an activation it sits next to your licence key, and through that your purchase, so we treat it as personal data and everything under Your choices below applies to it.
Purchases are handled by our payment provider as merchant of record — see Who else is involved — so your payment is a transaction with them and their privacy policy governs it. They collect what any seller must — name, email, billing and tax location, payment details. We never see or store your card details. What reaches us is your email address and your licence key, so that support and activation work.
No analytics and no tracking cookies. We do not profile visitors and we do not build any picture of who you are.
Webfonts are served from our own domain. Nothing on this site loads from a third party on its own.
Spotify players: the music page shows a play button in place of each Spotify player. Nothing reaches Spotify until you press it. Press it and the player loads from spotify.com, which means Spotify sees your IP address, the page you were on, and any cookies it has already set for you; from that point their privacy policy governs the player. Do not press it and Spotify is never contacted. Video links open on YouTube in a new tab rather than playing here, for the same reason.
Our web host keeps ordinary server logs, including IP addresses, to diagnose errors, block abuse, and count how often each installer is downloaded. They are kept for 13 months and we do not analyse them for anything else.
Mailing list: if you sign up we store your email address and a token for your unsubscribe link. Nothing else. The list is sent from our own systems — there is no third-party mailing provider — and every email has one-click unsubscribe.
Licensing and mailing-list records are stored on servers in the United States, operated by our hosting provider — see Who else is involved.
Activation records are deleted twelve months after a machine last checks in. Those records are how the activation limit is enforced, but a machine that has not contacted us in a year is not holding a slot we need to defend, so it goes.
Your mailing-list entry is kept until you unsubscribe. We keep the pairing of your email address and licence key for as long as we may need it for support, warranty, and tax and accounting purposes.
Two parties other than us ever touch your data, and this list is the complete one. Your payment provider is named here, because your purchase is a contract with them; our hosting provider is named under The legal details below. If we ever change provider, those are the lines that change.
| Who | What they do | Their role |
|---|---|---|
| Polar Polar Software Inc. |
Takes your payment and sells to you as merchant of record | Independent controller. Their privacy policy governs the transaction, not this one. |
| Our hosting provider named in The legal details |
Runs the licensing service, hosts this site, and delivers mailing-list email | Processor. Acts only on our instructions, under a data processing agreement. |
Nobody else. Nothing goes to advertisers, data brokers, or analytics companies — we do not use any.
Traffic between an instrument and our licensing service travels over TLS. Licensing records are encrypted at rest, and access is limited to the people who need it, which is to say one person. No system is perfect and we are not going to pretend otherwise; if something goes wrong with your data, we will tell you.
Our products are not directed at children and we do not knowingly collect personal data from anyone under 16.
Email support@touchmachines.com to ask what we hold about you, to correct it, to have it deleted, to get a copy of it in a portable form, or to object to or restrict what we do with it. No hoops.
Two honest caveats. Deleting your licensing records also deletes the record that your licence is yours, so we will explain what that costs you before doing it — and then do it if you still want it done. And where tax law requires us to keep a transaction record, we may keep the minimum needed for that, and nothing beyond it.
The formal version, for anyone who needs it.
Touchmachines L.L.C., Tucson, Arizona, USA. Contact: support@touchmachines.com.
Processor. Amazon Web Services, Inc. — licensing service, website hosting, and delivery of mailing-list email. Acts only on our documented instructions under a data processing agreement.
Independent controller. Polar Software Inc. (Dover, Delaware, USA), as merchant of record, is the seller in your purchase. It determines its own purposes for payment, tax and fraud-prevention data, so it is not our processor and its own privacy policy governs what it does. We receive only your email address and licence key from it.
Data is stored in the United States. Transfers from the EEA, the UK and Switzerland rely on the Standard Contractual Clauses adopted by the European Commission; a copy is available on request.
If you are in the EEA or the UK you have the right of access, rectification, erasure, restriction of processing, objection, and data portability, and the right to withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with a supervisory authority — the data protection authority in your country of residence in the EEA, or the Information Commissioner's Office in the UK.
We do not sell or share personal information as those terms are defined by California law, and we do not use it for cross-context behavioural advertising.
None. An activation limit is a counter, not a profile.
We have not designated a representative in the European Union. Our processing of personal data relating to people in the EEA is occasional, does not involve large-scale processing of special categories of data or of criminal-conviction data, and is unlikely to result in a risk to your rights and freedoms — so the exemption in Article 27(2)(a) applies. You can reach us directly at support@touchmachines.com, and we answer.
If this policy changes, the date at the top changes with it. Material changes affecting existing customers are emailed to the address on the licence.
Touchmachines L.L.C., Tucson, Arizona, USA — support@touchmachines.com