Privacy
Almost nothing, and this says exactly what. Nobody wants to read this, but we have to write it. What follows describes what is done with data here, or more precisely what is not.
Curious Electric GmbH, Köln. Full company details, register number and contact are in the Impressum, which is the legally binding version of this paragraph. Data protection enquiries: dirkk@curious-electric.com
It sets no cookies. It uses no analytics, no tracking pixels and no advertising. It loads no fonts, scripts, maps or media from anyone else, so your visit tells nobody else that you were here. There are no accounts and nothing to sign up for.
The instrument and the kit editor run entirely in your browser. Audio you drag into them is decoded on your own machine and never uploaded. Nothing you build here is sent anywhere, and we could not read it if we wanted to (and we do not want to, it would be far too much work).
Like every web server, the host of this website records requests: the time, the file requested, the browser's user-agent string, and the IP address. The IP address is shortened before it is written down and thereby anonymised. Logging at all is necessary to deliver the website and keep it working, which is the legitimate interest under Art. 6(1)(f) GDPR.
The logs are deleted automatically after seven days, and nothing is evaluated.
The host is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, acting for us as processor under Art. 28 GDPR. They use Neue Medien Münnich GmbH, at the same address, as their sub-processor. The data centres are in Dresden and Friedersdorf and the hosting runs exclusively on storage in Germany, so no transfer to a third country takes place for this website.
Payment is handled by Stripe. Pressing Buy takes you to a page operated by Stripe; the card, name and billing details you enter there go to Stripe, not to us. From Stripe we receive what we need to complete and account for the sale: that a payment succeeded, the amount, and the billing details a German invoice has to carry. We keep that for as long as tax law requires, currently ten years.
The legal basis is Art. 6(1)(b) GDPR for performing the contract and Art. 6(1)(c) GDPR for the retention obligations. Our contracting party is Stripe Payments Europe, Limited, Dublin, Ireland, and for some services Stripe Technology Europe, Limited. Those are the entities Stripe names for businesses in the European Economic Area. We remain the seller: Stripe takes the payment, it does not sell to you. Where Stripe processes data outside the EU, it does so on the basis of the data processing agreement and the data transfers addendum its terms incorporate: stripe.com/legal/dpa. What Stripe does with it is described in Stripe's own privacy policy: stripe.com/privacy
Sample packs and firmware are ordinary files from this website. For the reasons above, downloads cannot be tied to a person.
Most visitors have nothing to exercise them against. If you have only read these pages, all that exists is a line in a server log, and we could not connect it to you even if you asked us to. If you have bought something, what exists is the invoice data we are required to keep.
The rights are yours either way and we have to tell you about them: access (Art. 15), correction (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), portability (Art. 20), and objection to anything based on a legitimate interest (Art. 21). Write to the address above; we answer, including when the answer is that we hold nothing.
You can also complain to a supervisory authority. For us that is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
The German version is the authoritative one. This English text is provided for convenience. If the two differ, the German applies.
This version is dated 15 September 2026.