Privacy & cookies

Short version: we collect only what we need to sell you a pack and, if you ask for it, to email you about new drops. Analytics and advertising cookies run only if you accept them, and we never sell your data.

1. Who is responsible

The data controller is 14 Sounds, the operator of 14sounds.store. Write to info@14sounds.store for anything about your data.

2. What we collect and why

Visiting the site

Like every web server, the server that hosts the site records technical data for each request: IP address, date and time, the page requested, and browser type. It is used only to run the site and keep it secure (legitimate interest, art. 6(1)(f) GDPR) and is kept by the hosting provider only as long as needed for security and troubleshooting, then deleted. To stop abuse, checkout, sign-up and download requests are also counted per IP address, stored only in scrambled form and deleted within two days.

Buying a pack

When you buy, the payment page of Link (Stripe) collects your payment details, name and billing address: Link resells the order as merchant of record and processes those data as an independent controller, under its own privacy policy. We receive and process your email address, name and country, what you bought, the price, the payment status and a record of the consents you gave at checkout, and we count how many times each download link is used. We need this to deliver the pack and answer about it (contract, art. 6(1)(b) GDPR) and to meet tax and accounting duties (legal obligation, art. 6(1)(c) GDPR). Order records are kept for ten years, as Italian law requires for accounting records (art. 2220 of the Civil Code). We never see your card details. If you buy a Season, we check which of its drops were bought with the same email address, to take them off the price.

If you sign up, we process your email address, the list you chose (the Friday drop, merch news or the Season) and the date of your consent. We use it only to send that email (consent, art. 6(1)(a) GDPR). Every email has a one-click unsubscribe link, and you can withdraw your consent at any time. We keep your address until you unsubscribe. When you confirm, the page you land on offers the free sampler: its download link is not tied to your address and we do not record who downloads it. You keep the sampler if you unsubscribe.

Writing to us

If you email us, we use your address and message to answer (legitimate interest or contract). We keep the conversation as long as needed to deal with it and then for no more than 24 months.

3. Who else sees the data

We share data only with the providers we need to run the shop, bound by data-processing terms: Hostinger (Hostinger International Ltd, Cyprus), which hosts the site and our mailbox and delivers the order emails; Link and Stripe, which process the payment and resell the order as merchant of record, acting as independent controllers for payment, tax and anti-fraud purposes; Brevo (France), which sends the newsletter to those who ask for it; and our accountant. We also disclose data to authorities when the law requires it. We never sell your data and never share it for advertising.

Some of these providers may process data outside the European Economic Area, for example in the United States. In that case the transfer is covered by an adequacy decision (such as the EU-US Data Privacy Framework) or by the European Commission’s standard contractual clauses.

4. Cookies and local storage

Fonts, images and audio previews are served by the same hosting as the pages. Unless you accept the optional tools below, your browser contacts no other service while you visit.

Technical storage (always on, no consent needed). The cart is saved in your browser’s local storage under the name s14.cart.v1. It contains only the codes of the packs you added, stays on your device and is never sent to us until you check out. If the site shows the cookie banner, your choice is saved the same way under s14.consent.v1 for six months, so we do not ask again at every visit. Both are strictly necessary for the site to work, so they need no consent (art. 122 of the Italian Privacy Code and the Italian data protection authority’s cookie guidelines of 10 June 2021). You can clear them any time by clearing your browser data.

Analytics and marketing (only with your consent). At the moment no analytics or marketing tools are switched on, so the site sets no cookies of this kind and shows no cookie banner.

When one of these tools is switched on, a banner asks for your consent on your first visit. You can accept, reject or choose by category; closing the banner counts as a refusal, and nothing optional runs before you decide. You can change your choice any time with Cookie settings at the bottom of every page: withdrawing deletes those cookies from this site.

When you pay, you are taken to the Link (Stripe) payment page, which uses cookies needed for payment and fraud prevention under its own policy. Links to Instagram open a site with its own privacy policy.

5. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format, and you can withdraw a consent at any time without affecting what was done before (articles 15 to 22 GDPR). Write to info@14sounds.store. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the country where you live.

6. Other things to know

Giving us your email is needed to buy (the download link is sent there) and optional for the newsletter. We make no automated decisions about you. The shop is not meant for children under 14 and we do not knowingly collect their data. We may update this policy: the date at the top shows the latest version.