Privacy

Privacy policy.

Last updated June 28, 2026.

Lost Synapse is a one-person studio run by Ionut Fechete. I make Laura, a wavetable and fractal polysynth. This page explains what data I collect when you visit lostsynapse.store or buy Laura, why I collect it, where it lives, and how to get it removed.

Plain English first, lawful basis second. If you spot something that feels off, write to support@lostsynapse.store. I will read it and reply.

The short version

• The Laura plugin itself sends no data anywhere. No telemetry, no usage reporting, no phone home. The license verifies offline.
• The website has no analytics, no tracking pixels, and no third-party scripts. Cloudflare sees your request because they host the site; nobody else does.
• If you download the free demo, I ask for your email so I can send you the download and, only if you tick the box, occasional release news. Ticking the box is optional and the download works either way.
• If you buy Laura, the storefront (Lemon Squeezy or Gumroad) collects your email, name, and payment details to process the sale. They are the controller for that step.
• I keep a small record of every license I issue: email address, order id, customer name (if the storefront provided one), and the timestamp. I need this to support refunds, revocations, and to resend a license if you lose it.
• You can ask me to delete your record at any time. One email, no forms.

Who I am

Lost Synapse is operated by Ionut, based in Romania. Contact email for any privacy matter: support@lostsynapse.store. There is no other phone number, no postal address for general enquiries, and no support form. Email is how the studio runs.

What I collect and why

If you download the free demo

The demo download page asks for your email address before it hands you the installer. I store that address, the timestamp, and whether you opted in to updates in the same Cloudflare KV store the licensing system uses. I do not collect your name, your IP, or anything about your machine here.

There is a single, unticked checkbox on that page: "Email me about Laura updates and new releases." If you leave it unticked, I keep the download record but I do not add you to any mailing list and I will not send you marketing. If you tick it, I add your address to my email list (held at Resend) so I can send you occasional release news. Every one of those emails has a one-click unsubscribe, and you can also unsubscribe by writing to me.

Lawful basis: keeping the download record is legitimate interest under GDPR Article 6(1)(f), since you asked me for the file. Sending you update emails is consent under Article 6(1)(a), which is why the checkbox is optional and off by default; you can withdraw that consent at any time.

If you buy Laura

Lemon Squeezy and Gumroad are the storefronts. When you complete a purchase through either, they collect your email, name, billing country, and payment method on their own infrastructure, under their own privacy policy. I never see your payment details.

The two pieces of data the storefront passes to me are your email address and an order id. I sign a license file bound to that email, email it to you through Resend (the transactional email service I use), and write the pair (email, order id, timestamp, source) into a small Cloudflare KV store. I keep the customer name if the storefront includes it.

Lawful basis: contract performance under GDPR Article 6(1)(b). I need an order trail to honour refunds, to revoke licenses on dispute or chargeback, and to resend a license if you lose the email.

If you visit the website

Cloudflare hosts the site and proxies all traffic, which means Cloudflare sees your IP address and basic request metadata for routing, caching, and security. This is technical processing under their own terms and is the baseline cost of using a CDN.

The site itself has no analytics, no tracking pixels, no third-party scripts. There is no Google Analytics, no Meta pixel, no Hotjar, no session recorder, no behavioural advertising tag. The reason for this is the same reason the plugin has no telemetry: I do not need to watch what you do to make a better product. Word of mouth and direct feedback do that better than dashboards.

That also means there is no cookie banner. Cookies are not set by anything on lostsynapse.store. The only state-storing things on the page are the standard HTTP cache and whatever your browser keeps locally for itself.

If you run the Laura plugin

Nothing. The plugin does not call out to any server during normal operation. It checks a signed revocation list at launch (a single GET request to a static endpoint, no personal data sent, served by Cloudflare). License verification is entirely offline; the plugin runs the same on an air-gapped machine as it does on the internet.

If you email me

Your email address and the contents of your message land in my inbox. I read it. I reply. I keep the thread because that is how I track which conversations I have already had with which people. I do not push it into any other system.

Where the data lives

• Cloudflare: hosts the website, serves the license worker, and stores the issuance ledger and revocation list in a KV namespace. Cloudflare has EU regions available; KV is replicated globally.
• Lemon Squeezy: stores order records on their own infrastructure under their privacy policy.
• Gumroad: same as above, for sales made via Gumroad.
• Resend: sends the license email and, if you opted in on the demo page, holds the update mailing list. Resend keeps delivery logs for a limited window per their retention policy.

How long I keep it

The issuance ledger entry stays as long as your license is active. If you ask me to delete your record I will do so within seven days; the license itself becomes unsupported at that point, which means I will not be able to resend it or rescue it for you later.

Demo download records and mailing-list entries stay until you unsubscribe or ask me to delete them. Unsubscribing from the update emails removes you from the list; ask me directly and I will also clear the download record.

Storefront records, payment records, and email delivery logs follow each provider's own retention policy.

Your rights

Under GDPR, UK GDPR, and most equivalent regimes you can ask me to:

• Tell you what data I have about you (right of access)
• Correct anything wrong (right to rectification)
• Delete it (right to erasure)
• Send it back to you in a machine-readable form (right to portability)
• Restrict how I process it or object to specific processing

To exercise any of these, write to support@lostsynapse.store from the address tied to your order, or include the order id in the message. I aim to reply within three working days and complete the request within thirty.

Children

Laura is a professional audio tool and the site is not directed at children. I do not knowingly process data of anyone under sixteen.

International transfers

The third-party processors above are mostly based in the United States. Standard contractual clauses or equivalent transfer mechanisms apply per each provider's own terms; I rely on those rather than entering into separate bilateral agreements as a one-person studio.

Changes to this policy

If the policy changes I will update the "last updated" date at the top of this page. Material changes that affect what data I collect will also be announced in the next Updates post on this site. There is no mailing list to subscribe to for privacy notices specifically.

Complaints

If you believe I have mishandled your data, please write to me first; I would rather fix it than have you carry it. If we cannot resolve it, you have the right to complain to your local data protection authority.