Legal
Privacy Policy
Last updated: 13 August 2026
1. Who is responsible
The controller for data processing on this website and in the SonaCue app is Stefan Strasser, Ostpreußenstr. 72, 81927 München, Germany ("we", "us"). You can reach us at support@sona-cue.com. Company details are in the Impressum.
2. Principles
We collect as little personal data as possible. We do not sell your data, and we do not use advertising or cross-site tracking cookies. The SonaCue app works fully offline — your shows, audio files and project data stay on your own machine and are never uploaded to us.
3. Visiting the website
This site is served as static files through Cloudflare. When you visit, Cloudflare processes technical connection data (such as your IP address, browser user-agent and requested URL) as needed to deliver the site securely and protect it against abuse. This processing is based on our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor.
4. Downloads
When you download SonaCue — from the website or via the app's built-in updater — we record a minimal download event: the app version, whether the download came from the site or the updater, a coarse country/region and network provider derived by Cloudflare, and a salted, irreversible hash of your IP address. The hash lets us group repeat downloads for accurate counts without storing your actual IP. This is based on our legitimate interest in understanding download volumes and distribution (Art. 6(1)(f) GDPR).
5. Accounts & licenses
To sign in and manage your license, we process your email address and license/activation data (such as the licensed major version, activation count and machine activations). Sign in uses a passwordless email link. When you activate SonaCue on a machine, the app derives a salted, irreversible hash of a hardware identifier so a license can be bound to a device — we store this hash, not the raw identifier. This processing is necessary to provide the account and licensing service you requested (Art. 6(1)(b) GDPR). Account and license data is stored with our processor Supabase.
6. Purchases
Purchases are handled by our reseller, Paddle.com Market Ltd. ("Paddle"), who acts as the Merchant of Record. Paddle collects and processes the payment and billing data you enter at checkout (name, billing address, payment details, tax information) as an independent controller for those purposes, and issues your invoice. We do not receive or store your payment card details. See Paddle's Privacy Notice for how they handle your data.
7. Email
Transactional emails — sign-in links, license delivery and support replies — are sent via our email provider Resend. If you email us, we process the contents of your message and your contact details to handle your request (Art. 6(1)(b) and (f) GDPR).
8. App updates
SonaCue checks for updates on launch by fetching a small update feed from our servers. This request necessarily includes your IP address and is processed only to deliver the update information; see "Downloads" above for what is recorded when an update is actually downloaded.
9. Data transfers
Some of our processors (e.g. Cloudflare, Supabase, Paddle, Resend) may process data outside the EU/EEA. Where that happens, appropriate safeguards such as the EU Standard Contractual Clauses are in place.
10. Retention
We keep account and license data for as long as your account exists or as needed to provide the service, and billing records for as long as required by tax and commercial law. Aggregated download statistics are retained without direct identifiers.
11. Your rights
You have the right to access, rectify, erase and port your personal data, to restrict or object to its processing, and to withdraw consent with effect for the future. To exercise these rights, contact support@sona-cue.com. You also have the right to lodge a complaint with a data protection supervisory authority.
12. Changes
We may update this policy to reflect changes to the product, our processors or applicable law. The current version is always available on this page.