Privacy policy

Last updated: 2026-06-03

This policy explains what information vstdex (“we”, “us”) collects when you visit this site, how it's used, who it's shared with, and the choices you have. This is a curated index of paid audio plugins; we collect as little as we can while still being able to send price alerts and keep the catalog running.

Who to contact

Questions, corrections, or data requests: use our contact form.

What we collect

Information you give us directly

• Watchlist email. Once you've signed up and tracked a plugin, we use your account email to notify you when that plugin's price drops. Tracking is a one-click toggle — there's no separate threshold to set, and we never email you on a price increase.
• Direct correspondence. If you email us, we keep the message and your address so we can reply and follow up.

Information collected automatically

• Server logs. Our hosting provider logs standard request data (IP address, timestamp, URL, user agent, referrer) for operational and security purposes. Logs are retained for a short rolling window and not used to build profiles.
• Theme preference. Your light/dark theme choice is saved in your browser's localStorage under the key vstdex-theme. It never leaves your device.
• Watchlist contents. The list of plugins you're tracking is stored on our server, linked to your account, so you can see and edit it from any device you're signed in on.

What we do not collect

We do not ask for or store your name, address, phone number, payment information, or any audio you create. The only personal data we ever see is whatever email address you choose to give us for alerts.

Cookies and similar storage

We do not use third-party advertising cookies, social-media tracking pixels, or cross-site tracking of any kind. The cookies and browser storage we do use are limited to:

• Session cookie. A first-party cookie that keeps you signed in. Strictly necessary — the site doesn't work without it. Cleared when you sign out or your session expires.
• vstdex-theme in localStorage — remembers your light/dark choice. Never leaves your device.
• vstdex-watchlist in localStorage — legacy key from before tracking moved to your account; safe to clear.

Analytics and operational monitoring

We use Cloudflare Web Analytics, a privacy-first, cookieless measurement tool, to understand traffic in aggregate — how many people visit, which pages are popular, and which sites refer them. It sets no cookies, uses no browser storage, does not fingerprint you by IP address or user agent, and does not build a profile of you across visits or across other sites. We see counts and trends, never individuals. We still do not use behavioral tracking, session replay, social-media pixels, or advertising cookies of any kind.

We honor your privacy signals: if your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) header, we do not load the analytics script at all for your visit.

Separately, the only other information collected automatically is the standard server-log data described above — our hosting provider records request metadata (IP, timestamp, URL, user agent, referrer) for operational and security purposes, retained for a short rolling window and never used to build profiles.

Affiliate links

Some retailer links on the site are affiliate links. When you click one, the retailer may set their own cookies on your device and read a referral identifier so we can be credited for the visit. We don't receive your purchase details — only an aggregate “referrals → sales” report from the affiliate program. Affiliate participation does not change what we show or how we describe a plugin. See our full disclosure on the About page.

Third-party services

We do not sell or rent your data. We share the minimum necessary with vendors who help us operate the site:

• Hosting and infrastructure. The provider that serves vstdex.com handles request logging and basic security as described above.
• Email delivery. When you opt into price alerts, we use a transactional email service to send the alert. The service sees your address and the message contents only.
• Analytics. Cloudflare Web Analytics processes aggregate, cookieless page-view data (no cookies, no per-visitor profile) so we can see traffic trends.
• Retailers and affiliate networks. When you click a retailer link, you leave vstdex. Their privacy policy governs what they do on the destination page.

How long we keep things

• Watchlist email and entries: until you remove them or unsubscribe.
• Direct emails to us: as long as needed to handle the conversation.
• Server logs: a short rolling window (typically 30 days).

Security

We use industry-standard transport encryption (HTTPS) and limit internal access to the few people who operate the site. No system is perfectly secure; if you suspect a breach, please tell us through our contact form.

We do not sell or share personal information

We do not sell or “share” (as the term is used in the California Consumer Privacy Act) personal information for monetary consideration or for cross-context behavioral advertising. Because there is no sale or share, we do not need to offer a separate “Do Not Sell or Share My Personal Information” link — the answer is already “we don't.” We honor Global Privacy Control signals as described in the Analytics section.

Your rights

You can:

• Clear your watchlist and theme preference by clearing site data in your browser.
• Unsubscribe from alerts at any time using the link in any alert email.
• Ask us to delete any email you've shared through our contact form.
• If you're in the EU, UK, or California, you have additional rights under the GDPR and CCPA — access, correction, deletion, portability, and the right to object. Email us and we'll respond within 30 days.

Children

vstdex is intended for adult musicians and producers. We don't knowingly collect data from anyone under 16. If you believe a child has provided us an email address, write to us and we'll delete it.

Changes to this policy

When this policy changes, the “Last updated” date at the top will move. If the change is material, we'll do something more visible — like a notice on the homepage — before it takes effect.