Privacy Policy
How we handle your data. No legal maze, just straight talk.
Last updated: May 2026
The Short Version
We're two brothers in Oslo building audio software we wanted to use ourselves. We collect the minimum data needed to run the business—your email for purchases and support, payment info (handled by Lemon Squeezy as our Merchant of Record, not us), and basic analytics to see what's working on the site.
We don't sell your data. We don't spam you. We don't do anything sketchy with your information. That's the whole thing.
What We Collect
When You Buy Something
- • Your email address (for order confirmation and backup download links)
- • Payment information (handled by Lemon Squeezy as Merchant of Record—we never see your card details)
- • Billing address (required by payment processors for fraud prevention)
- • Purchase history (so we can help with support requests)
When You Use the Plugin
- • Machine identifier (a hash of hardware info—we can't identify your actual hardware)
- • License validation timestamps (when the plugin checks in)
- • Plugin version (to know what features are available)
This is used to verify your license and prevent sharing. We also use how frequently the plugin checks in (a running count, no content) to decide which tips to send during your trial — for example, whether to send install help or usage tips. We don't track what you do inside the plugin unless you opt in to usage data.
If You Opt In to Usage Data (Off by Default)
The plugin has an opt-in toggle that shares anonymous usage data with us. It's off unless you explicitly turn it on. If you do, we collect:
- • Which modes you use (Tame Peaks / Swap / Formant)
- • How you interact with detected events (markers added, edited, swapped, formant-shifted), which keyboard shortcuts you use, and how often you preview audio
- • When and how often you open the plugin, and how long each session lasts
- • Your DAW, macOS version, and audio settings (sample rate, buffer size)
- • Performance and error metrics
No audio content, no project info, no track names, no file paths, no personal info. Toggle it back off any time in the plugin's Preferences and we stop receiving data immediately. We use this to figure out which features matter to engineers like you, and to send relevant tips during your trial.
When You Start a Trial
- • Your email address (to send your license key, download link, and a few tips during the trial)
- • Machine identifier (one trial per computer)
- • Your IP address and browser user-agent (to detect abuse like bulk fake-email signups)
Trial emails: one welcome email with your license, plus 3–4 short tips during your 14 days. Unsubscribe link in every one — or reply "stop" and we'll take you off the list.
If you convert from a trial to a paid license, we link your trial machine identifier to your purchase so your existing activations and preferences carry over.
When You Contact Support
- • Your email address and name
- • Whatever you tell us in your message
- • System info if you share it (helps us troubleshoot)
When You Visit the Site
- • Basic analytics (which pages you visit, how long you stay)
- • Device and browser info (to fix bugs and make the site work better)
- • IP address (standard web stuff, helps prevent fraud)
We use Google Analytics 4 with IP anonymization and Consent Mode v2 — analytics cookies fire only after you opt in via the banner. No cross-site following, no ad personalization, no audience selling. See our Cookie Policy for the full list.
Newsletter (If You Sign Up)
- • Your email address
- • Whether you opened emails (so we know if anyone's reading)
Every newsletter email includes a one-click unsubscribe link in the footer. You can also email support@arcticlabsaudio.com with "Unsubscribe" in the subject. We send maybe one email a month, if that.
What We Actually Do With This
- • To send you what you bought: Plugin downloads, license keys, and updates
- • To validate your license: Verify you own the plugin and manage machine activations
- • To provide support: Answer your questions, troubleshoot issues, process refunds
- • To improve the product: Understand what features people use, what bugs need fixing
- • To send occasional updates: New features, bug fixes, new products (only if you opted in)
- • To prevent fraud: Rate limiting and trial abuse prevention
Who Else Sees Your Data
Third Parties We Work With
- • Lemon Squeezy (LemonSqueezy Inc., USA): Our Merchant of Record. Handles payment processing, billing, sales tax/VAT collection, and the legal sale of the license. They see your name, email, billing address, and payment info — we don't. Cross-border transfers from the EU/EEA rely on Standard Contractual Clauses. Their privacy policy.
- • Postmark (ActiveCampaign LLC, USA): Sends transactional emails — purchase confirmations, license keys, download links, support replies. They process email content for delivery only. Cross-border transfers from the EU/EEA rely on Standard Contractual Clauses.
- • Amazon Web Services (AWS, USA — us-east-1 region): Hosts our website and backend infrastructure (CloudFront, S3, Lambda, RDS). Cross-border transfers from the EU/EEA rely on AWS's EU Standard Contractual Clauses and Data Processing Addendum.
Who We Don't Share With
We don't sell, rent, or trade your data. Ever. No advertisers, no data brokers, no "partners" who want to spam you.
The only exception is if we're legally compelled to share something — a court order, valid law enforcement request, or regulatory investigation. We'll notify affected users unless prohibited by law.
Your Rights
If you're in the EU/EEA, GDPR gives you the following rights over your personal data:
- • Access: Ask what data we have about you (Art. 15)
- • Rectification: Fix inaccurate data (Art. 16)
- • Erasure ("right to be forgotten"): Have your data deleted, except records we're legally required to retain (e.g., purchase records for Norwegian bookkeeping) (Art. 17)
- • Restriction of processing: Pause our use of your data while a dispute is resolved (Art. 18)
- • Data portability: Receive a copy of your data in a machine-readable format (Art. 20)
- • Object: Object to certain types of processing, including direct marketing (Art. 21)
- • Withdraw consent: Withdraw consent for analytics, marketing, or other consent-based processing at any time (e.g., via the cookie settings in our footer)
Email support@arcticlabsaudio.com for any of these requests. We respond within 30 days (the GDPR maximum); usually much faster.
If you're not happy with how we handle a request, you can also lodge a complaint with your local data protection authority — for Norway, that's Datatilsynet.
Children's Privacy
IcePick is a professional audio production tool intended for adults. We do not knowingly collect personal data from anyone under 16 (the age of digital consent under GDPR Article 8 in most EU member states, including Norway) or under 13 (US COPPA).
If you are under the age of digital consent in your country, please have a parent or guardian review this policy and consent on your behalf before purchasing, starting a trial, or signing up for emails.
If we learn we've collected data from a child below the applicable age threshold without verified parental consent, we'll delete it. Contact support@arcticlabsaudio.com if you believe this has happened.
How We Protect Your Data
- • HTTPS encryption for all site traffic
- • Payment processing through Lemon Squeezy (PCI-compliant Merchant of Record)
- • Regular security updates and backups
- • Access to customer data is limited to the two of us
No system is 100% secure, but we take reasonable precautions and use reputable services.
The GDPR Stuff (If You're in Europe)
If you're in the EU/EEA, here's why we're allowed to process your data:
- • Purchase data: We need this to send you what you bought (legal term: contract fulfillment)
- • License validation: Confirming you own the plugin (legal term: contract performance)
- • Analytics cookies: Only after you opt in via the cookie banner (legal term: consent)
- • Marketing emails: Only if you said yes (legal term: consent)
- • Trial email personalization: We use how frequently the plugin checks in with our server (a count we keep server-side to prevent license abuse) to decide which tips to send during your trial — e.g. whether to send install help or usage tips. This is based on data already collected under "contract performance." (legal term: legitimate interest)
How Long We Keep Your Data
- • Purchase records: 5 years, as required by Norwegian bookkeeping law (Bokføringsloven §13). After this period, records are anonymized or deleted.
- • License data: As long as your license is active
- • Trial data: 90 days after trial expires
- • Analytics: 24 months
- • Support emails: Until you ask me to delete them
Want your data deleted? Email us and we'll remove everything except what we're legally required to keep for taxes.
Cookies
We use a few cookies to make the site work properly:
- • Essential cookies: Keep you logged in, remember your cart
- • Analytics cookies: Help us understand what's working (privacy-focused, no tracking across sites)
No advertising cookies, no social media tracking. See our Cookie Policy for details.
Changes to This Policy
If we change how we handle your data, we'll update this page and note the date at the top. For major changes, we'll email customers directly.
We're not planning to change anything fundamental—this is a small operation and we like keeping things simple.
Questions?
If you have questions about how we handle your data, just ask. We're a small team, not a legal department, so you'll get a straight answer.
Data Controller: Arctic Saga AS (operator of Arctic Labs Audio)
Org. nr. NO 918 915 443 MVA · von Øtkens vei 12, 1169 Oslo, Norway
Privacy contact: support@arcticlabsaudio.com