Privacy Policy

Effective: October 25, 2026

1. Who we are

This Privacy Policy explains how Wildflower Sound, an audio company operated by Braden Parkes as an individual, and its successors (the "Company", "we", "us", or "our"), handle your personal information when you use our website and store at wildflowersound.io/plugins (the "Site") and our plugins.

If you have any question about your privacy, email us at support@wildflowersound.io. We aim to reply within 2 business days.

2. The information we collect

We try to collect as little as we reasonably can. Here is what we hold and why.

• Account email. You log in with an email magic link (no passwords), so your email address is the core of your account. We use it to sign you in, deliver your purchases, and contact you about your account.
• Purchase and subscription data. Your payments are processed by Paddle as merchant of record (see Section 4). Paddle holds your billing and card details. We receive transaction metadata from Paddle through webhooks, such as which product you bought, the order and invoice reference, the amount and currency, the country and tax treatment, subscription status, and payment success or failure. We do not receive or store your full card number.
• Points ledger. For Subscribe to Own subscribers, we keep a record of points earned, points spent on redemptions, and adjustments (for example, points subtracted after a refund or chargeback).
• License and activation data. To make licensing work, we record which plugins you own or can access, and your machine activations. Activation involves a machine identifier or a hashed value derived from your device so we can enforce the computer limit on your license and let you deactivate computers yourself. We use this only for licensing, including checking that free trials and free offers go one per person.
• Support emails. If you email us, we keep your messages and our replies so we can help you and keep a record of the conversation.
• Studio quote requests. If you ask for a studio quote on the Site, the name, work email, studio name, seat count, interest, what you make and any message you type are emailed to us through Resend and kept in our mailbox so we can reply. We use them only to answer your request, and nothing from the form is stored in our store database unless you tick "Email me news and offers": then we keep your email address and what you make, for our store news list.
• Basic Site and delivery logs. Like most websites and email systems, our Site host and our email delivery provider keep basic technical logs (such as IP address, timestamps, and whether an email was delivered) for security, troubleshooting, and reliability. We do not use these to build advertising profiles.
• Version check. Once a day, one of your plugins asks our server which release is newest, so it can tell you when an update is available. The request carries nothing about you: no email address, no licence key, and no machine identifier. Like any request over the internet it reaches us with an IP address and a timestamp in the basic technical logs described above, and we use it for nothing else.
• WildStream live streaming. When you go live, the plugin sends your session's audio to our streaming server, which passes it on to the people who open your link. The audio is not recorded, not stored and not listened to by anyone at Wildflower Sound; it exists on our server only in memory while it passes through. To start a stream the plugin checks your license with us, the same way activation does. We keep counts of how much each license streams (data sent, listening minutes and number of streams per day), so we can run the service, spot misuse and plan its costs. These counts carry a scrambled form of your license number, never the audio.
• If someone sends you a WildStream link. Opening it connects your browser to our streaming server. Our hosting provider sees your internet address, as any website does, and our streaming server uses it for a moment, in memory, to stop abuse; it does not record it. We do not ask who you are, and the page stores only your own listening choice (mono or stereo) in your browser.
• Launch list email. Before the store opened, some people gave us an email address so we could tell them when it did. The signup form has been removed from the Site, and we no longer collect addresses this way. We still hold the addresses we were given, with the time each one was added and which form it came from, and we use them only for the occasional store news those people agreed to. Every one of those emails includes an unsubscribe link, unsubscribing removes you from the list, and we will delete your address entirely if you ask us at support@wildflowersound.io.
• Where your email came from. We keep one record of every email address you give us, with where it came from (a purchase, a sign-in, a licence sent to you, a gift link you claimed, a code for one of our plugins or a bundle you bought from another store and redeemed with us, a free trial link, the prize wheel, a studio quote request (if you tick "Email me news and offers"), your account page, or the launch list), when we first and last saw it, and whether it is on our store news list. Every store news email has an unsubscribe link, and deleting your account removes this record too.
• What you make, and news by email. Where we ask for your email address (a free trial link, a gift link, a prize-wheel claim, a studio quote request, or on your account page until you answer), you can also tell us what you make (sound effects, music or other; you can pick more than one; it is optional), and we show a box labelled "Email me news and offers", which starts unticked. We keep your answer, if you give one, and whether you ticked the box with your email address, and when you gave them, so we can tell what you chose and send you news that fits your work. If you tick the box, we add your address to our store news list. If you leave it unticked, that signup does not add you to the list. If you are in the United States, we do not show the box (except on the studio quote form, the redeem page and the prize wheel): when your trial goes ahead (or you claim a gift, or save your answer on your account page) we add your address to our store news list, and every news email has an unsubscribe link. Everywhere else, we add you only if you tick "Email me news and offers". We work out which country you are in from your internet address, through Cloudflare, to decide whether to show the box, and when you join the list without it we note that country on your record. Every store news email has an unsubscribe link, and deleting your account removes your answer too.
• Redeeming a code. When you redeem a code on our redeem page, we show a box labelled "Email me news and offers", which starts unticked, and we show it again, as you left it, on the page our email link opens, where you make the final choice. If you tick it there, we add your address to our store news list and keep a record that you ticked it, the words on the box and the time. If you leave it unticked, we note that, and redeeming does not add you to the list. To leave the list, use the unsubscribe link in any store news email.
• Visit counts. We use Cloudflare Web Analytics to see how many people visit the Site, which pages they read, roughly which country they came from, and which site referred them. It sets no cookies, it does not follow you to other websites, and it does not identify you. We use it to understand what people find useful, nothing more.
• Security check. Some of our forms (signing in, starting a free trial, claiming a gift, redeeming a code, asking for a studio quote, and the prize wheel) use Cloudflare Turnstile to check that a person, not an automated program, is pressing the button. The check runs in your browser and looks at technical details of your browser and device. When you send the form, we pass Cloudflare the check's result and your internet address so it can confirm it. We use the answer only to let the form go ahead or to ask you to try again, and we do not keep it. Cloudflare handles that information under its own privacy terms.
• The affiliate referral cookie. If you arrive through an affiliate's link, which is our address with their code on the end, we store that code in a first-party cookie named wf_ref and in a copy in your browser's own storage, so the affiliate can be credited if you buy. It holds their code and the time it was stored, nothing else, and it identifies the affiliate rather than you. It is set by our own site only, it is passed to Paddle only with a checkout so the sale can be credited, it is never used to follow you anywhere, and it expires 60 days after your visit.
• The ad link cookie. If you arrive through one of our own ads, its link carries a short code naming that ad. We store that code in a first-party cookie named wf_src, with a copy in your browser's own storage; it holds the ad's code and the time it was stored, nothing else, and expires 30 days after your visit. If you open a checkout or start a free trial within those 30 days, the code goes with it: it is passed to our payment provider, Paddle, with the checkout (and stays with a subscription's payments), and we keep it with that trial or purchase record, so we can count which ads lead to trials and sales. Each time your browser arrives with a code it does not already hold, it also tells our service once, so we can count visits per ad; like any request to our site, that request appears in our basic delivery logs. The cookie is set only by our own site and is never used to follow you to other websites.
• The prize wheel. The prize wheel page sets two cookies of its own, sent only to the wheel's own address: wf_wdev, a random signed value that lets us tell one phone or computer from another, so each one gets one set of three spins (it lasts a year), and wf_wheel, which remembers your spins in that browser (it lasts 90 days). wf_wdev holds no name or email address; once you give the wheel an email address, wf_wheel also holds that address so this browser can show your prize. Neither is sent to another website, and neither is used to follow you anywhere. With each set of spins we keep the results and a scrambled fingerprint of that wf_wdev value, and we keep, with no end date, a record of which scrambled device fingerprint started which set of spins, so a phone or computer that has had its spins cannot start more. When you claim a prize, we remove the device fingerprint from the spins themselves (that record still notes which device started them) and keep your email address with them, the prize you claimed and, if you answered, what you make, and we open an account for that address if it has none and email your prize to it. To claim a prize you tick "Email me news and offers": we keep that choice with your address, and we never add an address to our store news list until its owner has shown it is theirs.
• Why you cancelled, if you tell us. When you cancel the subscription we ask one optional question about why; if you answer, we keep it with your account to improve the plugins and the store, cancelling never depends on it, and deleting your account removes anything you wrote.
• Free trial email. If you open a free trial link we share publicly (for example in our Discord) and type your email to start the trial, we add your address to our store news list only when the trial goes ahead, and only if you tick "Email me news and offers" (in the United States, where we do not show the box, without a tick): for a trial that needs no card, when you confirm it from the email we send you; for a trial that needs a card, when your trial starts, using the address you check out with. Every store news email has an unsubscribe link. For a trial that needs a card, we also use the address to open your checkout and hold your place. For a trial that needs no card, we email that address a link to confirm the trial, and we note on our list whether you confirmed. To keep free trials to one per person, we keep a scrambled fingerprint of the address your trial started under even if you later delete your account. If you start a free trial that needs no card, we use your email address to send your licence key and, near the end of the trial and when it ends, up to two short emails about it. We keep a record that you had a trial so each person gets one.
• Checkout follow-up. If a payment you make on the Site does not go through, Paddle tells us, with its references for that checkout, for you as its customer and for your billing address. If you do not complete a purchase in the next few hours, we may ask Paddle for the email address you gave at checkout, your billing country and whether you agreed at checkout to hear from us, and send you one short email about it. We send it only where the law allows it without your prior agreement, or where you have agreed to hear from us, at most one in 30 days, never once you have completed a purchase after that payment failed, and every one has an unsubscribe link. We keep a record of each of these emails we send or decide not to send. Thirty days after that decision we remove your email address and Paddle's references to you and your address from it; Paddle's reference for the checkout, what was in it, Paddle's reason the payment failed and a scrambled fingerprint of your email address stay, so we never send you a second one too soon and, if you unsubscribe or delete your account, never send you one again.

We do not knowingly collect special categories of sensitive personal data, and we do not need them to sell you plugins.

3. What we do NOT do

• We do not use third-party advertising trackers or cross-site tracking on the Site, and we do not build advertising profiles about you.
• We do not sell or rent your personal information.
• We do not send your data to advertisers.

4. Payments: Paddle as merchant of record

Your purchases and subscription payments are processed by Paddle, acting as our merchant of record and the seller of record for the transaction. Paddle collects and processes your payment details (such as your card information and billing address) under Paddle's own privacy policy, handles VAT and sales tax, issues receipts and invoices, and manages payment disputes. We receive only the transaction metadata described in Section 2. We never see or store your full payment card details. To show you the local price for your country, some pages on the Site ask Paddle for a price preview when they load, so Paddle receives your IP address.

5. How we use your information

We use the information above to:

• create and run your account, and sign you in by magic link,
• deliver your plugins, license files, and the Subscribe to Own catalog pass,
• keep your points balance and redemptions accurate,
• enforce license and activation rules and prevent abuse,
• send you transactional emails you need (order confirmations, license and download links, subscription and payment notices, and replies to your support requests),
• send store news to people who asked for it, or who joined in the United States, where we do not show the box, matched to what you make,
• provide customer support, and
• meet our legal, tax, and accounting obligations.

We rely on these lawful bases, in plain terms: performing our contract with you (delivering what you bought), our legitimate interests (running and securing the store, and preventing fraud), your consent where it applies (for example, ticking "Email me news and offers" to get our store news), and complying with the law.

We do not use your information to make decisions about you by automated means that produce legal or similarly significant effects.

6. Transactional email

We send account and purchase emails through Resend, a third-party email delivery provider. Resend processes your email address and the delivery data for those messages on our behalf, so that magic links, receipts, and notices reach you. These are transactional emails tied to your account and purchases, not marketing blasts. Every store news email has an unsubscribe link. A studio quote request made on the Site is also delivered to us through Resend.

Our own support mailboxes are hosted by Zoho Mail. When you write to support@wildflowersound.io, your message is stored with that provider as well as with us, so we can read it and reply.

7. The Wildflower community (Discord)

We may link to an optional Discord community. Joining is entirely your choice and is not required to buy or use the plugins. If you join, Discord is a separate service that collects and processes your information under its own terms and privacy policy, which apply to your participation there. We only see what you choose to share in that community.

8. Who we share information with

We share personal information only as needed to run the service:

• Paddle, to process your payments and taxes as merchant of record.
• Resend, our email delivery provider, to send you the transactional emails described in Section 6.
• Zoho Mail, which hosts our support mailboxes, so we can receive and answer the emails you send us.
• Cloudflare, which hosts the Site, works out which country you are in from your internet address, runs the security check on our forms and counts visits to the Site (see Section 2).
• Fly.io, which runs our store service and the WildStream streaming server, and through which streamed audio passes in transit.
• Our Site and infrastructure hosting providers, to run the Site and store your account data securely.
• Legal and safety, if we are required to by law, or to protect our rights, users, or systems.
• A successor, if the Company reorganizes, forms an LLC, or transfers its business, in which case your information may move with it under this Policy.

These providers act as our processors under agreements that require them to protect your data and use it only for the services they provide to us. We do not sell your data to anyone.

9. How long we keep your information

We keep your account and purchase records for as long as you have an account with us, and as long as we need them to support your ongoing licenses and to meet legal, tax, and accounting requirements. Transaction records may be retained by Paddle and by us for the periods the law requires. When we no longer need your information, we delete or anonymize it. You can also ask us to delete your data sooner (see Section 11).

10. Security

We take reasonable steps to protect your information, including passwordless magic-link login (which removes the risk of a reused or stolen password), signed license files, and working with reputable providers like Paddle for payments. WildStream audio is encrypted between your computer and our streaming server and between our server and each listener. No online service can be perfectly secure, but we work to keep your data safe and to fix problems quickly if they arise.

11. Your rights and choices

Wherever you live, you can ask us to:

• access or export the personal information we hold about you,
• correct information that is wrong,
• delete your account and personal information (we may need to keep limited records the law requires, and deleting your account ends your access to the account area; if you ever had a subscription, a free trial or a free month, or gave your email address to the prize wheel, we also keep a one-way fingerprint of your email address, which lets us recognise that address if it is used again, so each person gets one free trial, one free month and one prize from one set of three prize-wheel spins; we keep it after you delete your account or change its address; we also keep each licence key's record (its number, type, plugin, computer limit and how it was issued), with no name or address on it, so a deleted account's keys keep their computer limits and a free key you claimed yourself (a free trial, a free month or a free plugin or bundle from a discount code, or a prize-wheel key) cannot be activated or renewed again after the account is gone; plugins you paid for keep working), and
• object to or restrict certain uses of your information.

Depending on where you live, you may have additional rights under laws such as the GDPR (Europe and the UK) or the CCPA and CPRA (California), including the right not to be discriminated against for exercising your rights, and the right to lodge a complaint with your local data protection authority. Because we do not sell personal information or use third-party advertising trackers, there is nothing to opt out of on that front.

To make any request, email support@wildflowersound.io. We will verify your request through your account email and respond within the time the law requires (and we aim for a first reply within 2 business days).

12. Children

The Site and plugins are not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email support@wildflowersound.io and we will delete it.

13. International users and data transfers

We are a US-based service, and our providers may process and store data in the United States and other countries. If you use the Site from outside the US, you understand that your information will be transferred to and processed in the US and elsewhere, where data protection laws may differ from those where you live. Where required, we and our providers use appropriate safeguards for these transfers.

14. Changes to this Policy

We may update this Privacy Policy as our service grows. If we make a material change, we will post the updated Policy with a new effective date and, where reasonable, let you know. If you keep using the Site after a change takes effect, you accept the updated Policy.

15. Contact

Questions or requests about your privacy? Email us at support@wildflowersound.io. We aim to reply within 2 business days. You can also write to us at Wildflower Sound, 18034 Ventura Blvd PMB 713, Encino, CA 91316, United States.