> legal / privacy policy
Privacy Policy
Last updated 26 October 2026.
This is the privacy policy for afugazi.com, operated by W&V Collective AB. Full company details are on the imprint page, and repeated at the foot of this page.
1. What we collect, why, and on what basis
Your email address and where you signed up from. Collected when you request a free download or join our list. We use it to send you the download and to send you email about our products. Legal basis: performance of a contract for the download, and your consent for the marketing email. Where you signed up from means the website that sent you to us, such as kvraudio.com (its name only, never the page), or a campaign tag in the link you followed. It is read once, when you send the form, and kept as a label next to your email address; no cookies.
Profile information you choose to give us, such as which DAW you use or your country. Collected only if you answer a survey or fill in a preference form. Legal basis: your consent. Never required.
Licence activation data: your licence key, a hashed identifier for the computer you activate on, and the IP address of the activation request. Collected when you activate a paid plugin. We use it to confirm your licence and to prevent licence abuse. Legal basis: performance of a contract, and our legitimate interest in preventing unauthorised use.
Trial start data: a hashed identifier for your computer, sent to our licence server the first time FIX YOUR DRUMS opens without a licence key, and the IP address of that request. We use it only to run the free trial once per computer and count its 14 days, so that reinstalling does not start it again. It does not include your email address, your name or any usage data. Legal basis: performance of a contract (the trial you started), and our legitimate interest in the trial running once per computer.
Your email address when you start a free trial. We use it to send you the installers and, as the form says, our free drops, new releases and deals until you unsubscribe. Only if you tick the box for it do we also send a reminder on day 7, 12 and 14 of your trial. Legal basis: performance of a contract for the installers, and your consent for that email and the reminders, which you can withdraw with the unsubscribe link in any of them.
Your name and email address, and your confirmation that you are 18 or older, when you join the afugazi testers; you are added when you send the form or when we pick you. Also your answers to our short feedback questions. We use them to send you new plugins and feedback requests, as the form says, until you unsubscribe, and to improve our plugins. Your free licence for each plugin is made on our licence server for your email address, with its key, which our Discord bot shows only in your private file there. Legal basis: your consent, which you can withdraw with the unsubscribe link in any of them, and performance of a contract for the free licence.
If you join with your school's code, you give us your Discord username, whether you make music on mac or windows, your DAW and your email address (no name), and sending the form creates your access to the private afugazi testers Discord server. Our Discord bot gives you a tester number, a link into the server that works once and a slot key, which we show you on the page and email to you, and when you open your private file in the server it makes your own plugin licence for your email address and puts its key there. We keep your Discord username: the bot uses it to recognise you when you join, and our email platform keeps it with your email address, mac or windows, your DAW and your school's name. The bot keeps your school's name and your email address too (to make your licences), and, once you are in, your Discord account ID, your tester number, rank and dates, short notes on your feedback, and your licence keys; it never keeps your name. So that school codes cannot be guessed, the bot counts wrong tries per hour against a scrambled form of your IP address (a salted hash, never the address itself) and deletes those counts within a day. Discord itself is run by Discord Inc. under its own privacy policy. Legal basis: performance of the tester agreement you enter by joining, your consent for the emails, and our legitimate interest in keeping the codes safe for the counts. Only if you also tick the box for it do we email you our new releases and deals too, until you unsubscribe; it changes nothing about your place.
Your email address, Instagram handle and Discord username, whether you make music on a Mac or on Windows, your answers to the application questions (which DAW you use and what you make), and the box you ticked (that you are 18 or older and will give honest feedback if picked) with the day you ticked it, when you apply to the afugazi testers. We use them to pick our testers, looking at what you sent us and at your Instagram: our Discord bot keeps your application and shows it, with your email address, in a private channel of the afugazi testers Discord server that only our crew can see. We also use them to contact you: by email from contact@afugazi.com, on Instagram or on Discord if you are picked, and by email about the afugazi testers, as the form says, until you unsubscribe. Only if you also tick the box for it do we email you our new releases and deals too, until you unsubscribe; it plays no part in who we pick. Whether you follow us or post about us never plays a part in who we pick either. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in any of our emails or by writing to support@afugazi.com.
Your rating of a plugin you tested, when you send the form behind the link our Discord bot posts in your private file with each plugin you get: your stars, what you think can be better, what you liked, the @ you give us, whether you ticked each of its two boxes and when, which version of the form you saw, the plugin version our downloads gave that day and the date. Your tester number comes from the link, not from you. Sending the form again with the same link replaces your earlier answer. What can be better is read only by our crew: our Discord bot posts your rating, both answers and your tester number in a private channel of the afugazi testers Discord server that only our crew can see, and it is never published. Your stars always count, without your name, in the plain average and the count of each star we show under the plugin on afugazi.com once it has three ratings. Only if you tick the box (which also says you are 18 or over) do we publish your stars, your @, what you liked, word for word (email addresses and most phone numbers in it replaced by [removed]), your tester number, the month you rated and the plugin version, under that plugin on afugazi.com. Legal basis: your consent for what we publish, which you can withdraw at any time by writing to contact@afugazi.com, and our legitimate interest in improving our plugins and in showing an honest average. What you rate never plays a part in your tester licence or your place in the testers; only sending the form does.
Quotes in our ads, only if you tick the second box on the rating form (which also says you are 18 or over): your stars, your @ and what you liked, word for word, in our ads and social posts, always next to a line that says you are an afugazi tester and got our plugins free. Our crew downloads the quotes testers said yes to through a private link that works for ten minutes. Legal basis: your consent, which you can withdraw at any time by sending the form again without that tick or by writing to contact@afugazi.com; we then stop using your quote and take it out of anything still running within 7 days.
Your KVR username. Testers tell our Discord bot their KVR username so we can check the tester duties: that the KVR reviews you send are yours. The bot looks it up once on kvraudio.com's public member list and keeps the username and KVR's member number with your tester number while you're a tester; they are deleted when your slot closes. If you give it when you apply, the bot shows it to crew with your application. We never ask for your KVR password. Legal basis: performance of the tester agreement.
Your KVR review link. When you post a review of a plugin you tested on kvraudio.com and send us its address with /kvr in your private file, our Discord bot keeps the address with your tester number, to count that you sent it, and opens that page once to read who wrote it, to check that it is yours. Our crew opens it only to check that it is yours and that its first line is the tester disclosure, never to judge your stars or your words. The review itself lives on KVR, in your own KVR account, under KVR's own terms and privacy policy. Legal basis: performance of the tester agreement.
Your tester code. While you are an afugazi tester you get your own discount code: anyone who types it at checkout gets 20% off. It is a discount in Paddle, our reseller, labelled there with your tester number; nothing else about you goes to Paddle with it, except what the code itself spells (your callsign, by default). It is switched off when you leave the testers or your place closes, and on again if you come back. Once a month our Discord bot reads from Paddle how many sales used each tester code and what they came to, for a summary for our crew; it keeps nothing about who bought. Legal basis: performance of the tester agreement, and our legitimate interest in knowing how the codes are used.
Thanks in patch notes. When a bug you reported is fixed, our Discord bot asks you in your private file whether we may thank you in the patch notes, and keeps your answer with your tester number and the plugin version. Only if you say yes does the line "thanks t-007.", with your tester number and nothing else about you, go in the public patch notes on afugazi.com and in the plugin's update. Legal basis: your consent; you can change your answer with the buttons until the notes go out. Published notes stay as they are.
Product usage data from the plugins, such as operating system, host application, plugin version and crash reports. Collected only if you turn it on. Our plugins ask you once, on first run, and do nothing until you answer. Saying no costs you nothing and the plugin works identically. Legal basis: your consent.
Purchase information passed to us by Paddle, such as your name, email address, country and what you bought. Legal basis: performance of a contract, and our legal obligation to keep accounting records.
When you buy a sound kit, Paddle shares your email address with us. We use it only to send your download link and to answer support requests about your order.
Email engagement, such as whether you opened a message or clicked a link. Legal basis: our legitimate interest in understanding whether our emails are useful. You can object at any time.
Support correspondence. Legal basis: performance of a contract, and our legitimate interest in answering you.
Website and ad measurement data (the Meta Pixel). The Meta Pixel sets cookies and sends Meta information about your visit: the pages you view, whether you play a preview, start a checkout or complete a purchase (including the order value), your IP address and browser details. We use it to measure which of our ads work and to show our ads to people who have visited the site. Whether it runs depends on where you are, which we work out when a page loads from your IP address (the country only, and we do not store it) and, as a second check, from your device's time zone: if either points to one of the regions below, we ask first.
In the EU and the EEA, the United Kingdom, Switzerland, Brazil and Quebec, and whenever we cannot tell where you are, nothing is loaded until you press accept. Legal basis: your consent, which you can withdraw at any time through the cookies link at the foot of every page.
Everywhere else the pixel runs when a page loads, and you can turn it off at any time through the cookies link at the foot of every page, or here. Legal basis: our legitimate interest in measuring and improving our advertising. Turning it off is your objection to it, and it takes effect at once.
Wherever you are, a no always wins: the pixel stops, its cookies (_fbp and _fbc) are deleted and nothing more is sent to Meta, from your browser or from our server. If your browser sends Global Privacy Control, we treat it as a no.
Purchase measurement from our server. When you buy, and only where the pixel is allowed to run for you as described above, our server also tells Meta about the purchase directly (Meta's Conversions API), so a purchase is counted even when a browser blocks the pixel. It sends your email address and your billing country, both hashed (turned into a one-way code that Meta matches against the details it already holds), the order value and currency, what you bought, the order number, Meta's browser and ad click identifiers (from the _fbp and _fbc cookies, or the ad link you came from), your browser's user agent, the page you bought from and your IP address. To make this possible, the country we detected, whether you accepted, those identifiers, your user agent, the page you bought from and your IP address (encrypted, so only our server can read it) are stored with your order at Paddle. Legal basis: the same as for the pixel where you are, your consent in the regions above and our legitimate interest everywhere else.
2. How long we keep it
Your email address and marketing preferences: until you unsubscribe or ask us to delete them.
Profile information: until you withdraw consent.
Your application to the afugazi testers: until you unsubscribe or ask us to delete it, and the copy our Discord bot keeps until you ask us to delete it.
Your rating of a plugin: what we publish stays up while we sell the plugin, or until you ask us to take it down by writing to contact@afugazi.com, which we do within days. The rest of your rating (what can be better, and your stars when you did not tick the box) is kept while we sell the plugin, or until you ask us to delete it.
Quotes in our ads: while your second box stays ticked. Once you take it back we stop using your quote and take it out of anything still running within 7 days.
Your KVR username and KVR member number: while you are a tester. They are deleted when your slot closes.
Your KVR review link, and where the clips you shared are with your answers: with your tester record, below. A clip you take back stops being used at once and comes down within 7 days.
Your tester code: Paddle keeps the discount, switched off once you leave, with our sales records; our bot keeps the code with your tester number. Thanks in patch notes: a published line stays in the notes.
Your Discord username, Discord account ID, email address, licence keys and tester record in the afugazi testers Discord: until 12 months after your place closes, or sooner if you ask us to delete them. Your tester number stays, no longer linked to you. Your tester licences are switched off when your place closes, as section 4 of our EULA says.
Licence activation data: for the life of the licence plus three years.
Trial start data: for as long as we sell the plug-in, so that the trial cannot start again on the same computer.
Product usage data: 24 months.
Purchase and accounting records: until the end of the seventh year after the financial year of the transaction, because Swedish accounting law requires it. This means we cannot delete purchase records on request, and we will tell you so if you ask.
Support correspondence: three years after the matter is closed.
Meta Pixel cookies: they expire after 90 days. Meta keeps the data it receives, from the pixel and from our server, under its own data policy.
The measurement details stored with your order at Paddle (the country we detected, whether you accepted, Meta's identifiers, your user agent, the page you bought from and your encrypted IP address) are kept with the order record. Our server only reads the encrypted IP address within two days of your visit.
3. Who we share it with
Kit (Kit.com, United States), our email platform, as a processor.
Paddle (Paddle.com Market Ltd, United Kingdom), our reseller, which also holds your tester code if you are a tester. Paddle is an independent controller for your payment data and has its own privacy policy.
Meta (Meta Platforms Ireland Ltd), as described in section 1: in the EU and the EEA, the United Kingdom, Switzerland, Brazil and Quebec only if you accept, everywhere else until you turn it off, and never after a no or with Global Privacy Control. We and Meta are joint controllers for collecting and sending the data from this site and from our server. Meta is an independent controller for what it does with it afterwards, under its own privacy policy.
Discord (Discord Inc., United States), if you join the afugazi testers Discord server, and for your application to the afugazi testers and your ratings of our plugins, which our crew sees in a private channel there, as it sees your KVR review links and the clips you share. Discord is an independent controller for what happens on Discord and has its own privacy policy.
Our hosting and infrastructure providers.
We do not sell your data for money. Apart from Meta as described above, and the quotes and clips you say yes to, which we publish in our own ads and posts, we do not share it for advertising, and we do not give it to anyone else except where the law requires it.
If you are in the United States: some US state privacy laws, such as California's, call sending data to Meta for advertising a "sale" or "sharing" of personal information, even when no money changes hands. You can opt out at any time: open the cookies link at the foot of any page and choose "do not sell or share my personal information". We honour a Global Privacy Control signal from your browser as the same opt-out.
4. Transfers outside the EU
Kit is based in the United States and transfers are made under the EU-US Data Privacy Framework. Paddle is based in the United Kingdom, which benefits from an EU adequacy decision.
Meta may transfer data to Meta Platforms, Inc. in the United States under the EU-US Data Privacy Framework.
If you join the afugazi testers Discord server, or apply to the afugazi testers, Discord Inc. processes your data in the United States as an independent controller, under its own privacy policy and its own safeguards for transfers.
5. Who is responsible for your data
W&V Collective AB, trading as AFUGAZI, is the data controller for personal data collected through this site. Full company details are on the imprint page. Contact us at support@afugazi.com.
6. Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, ask for it in a portable format, and object to processing based on legitimate interest. Where we rely on your consent, you can withdraw it at any time, and withdrawing it does not affect what we did before you withdrew it.
You can turn the Meta Pixel and the purchase measurement off yourself at any time, through the cookies link at the foot of every page (on a phone it is under /legal).
Email support@afugazi.com. We answer within one month.
If you think we have handled your data badly, you can complain to Integritetsskyddsmyndigheten at imy.se, or to the supervisory authority in your own country.
7. Children
Our products are not directed at children. If you are under 16, or under the age at which you can consent to online services in your country, ask a parent or guardian before signing up. In Sweden that age is 13.
8. Automated decisions
We do not make automated decisions that produce legal effects for you, and we do not profile you in any way that does.
9. Changes
We will update this page when our processing changes and change the date at the top. If a change materially affects you, we will tell you by email.
w&v collective ab, trading as afugazi · company details · support@afugazi.com