Last updated August 4, 2026
Rubato Audio collects as little personal information as possible, and never sells it. This page explains exactly what we collect, why, and who helps us process it.
If you subscribe, we store your email address (and your name, if you give it) so we can send you the occasional note about new releases and major updates. Subscriptions use double opt-in — you confirm by email — and every message has a one-click unsubscribe link.
When you buy a product, checkout is handled by Lemon Squeezy, our merchant of record. Lemon Squeezy collects the billing details needed to take payment and calculate tax; we receive your order details and email address so we can deliver your license and provide support. We never see or store your full card number.
If you use the contact form or email us directly, we receive the name, email address, subject, and message you send so we can reply. The contact form is processed by Web3Forms.
The site is served by Cloudflare, which keeps standard server logs (such as IP addresses and request data) to keep the site secure and reliable. To understand overall traffic we use Cloudflare Web Analytics, a privacy-first, cookieless tool that measures things like page views and referrers without setting cookies, tracking you across other sites, or building a profile of you. We also keep anonymous, aggregate counts of how visitors use the site — for example how often people open checkout, click into a product, try one of the in-browser demos and which controls they touch, how far down a page they read, how long a page stays in view, and which catalog models and firmware options appear in successful Plaits Palette builds — recorded with the approximate country it came from (derived from your IP, never stored alongside it), so we can see what's useful and spot friction. Plaits Palette build analytics contain only catalog IDs, option values, and counts — never names, descriptions, patch data, or the full recipe. These events are tied only to a random token that lives in memory for a single page visit and is never stored, so they can't be linked across visits or used to build a profile of you; they set no cookies and aren't tied to your identity. We don't run third-party advertising trackers.
When you ask Plaits Palette to build firmware, its build service receives the complete recipe needed to compile it, including any custom chord, scale, FM-bank, or Speech-bank data you added. It stores the normalized recipe and compiled artifacts under a deterministic build key so the result can be delivered and an identical build can reuse the cache. The builder requires no account, email address, cookie, or customer identity.
If you create a Speech bank from typed words, the words, pronunciation hints, selected language and voice, generated previews, and LPC frames are processed by the same build service. Deterministic results are cached so common words do not need to be encoded repeatedly. If you create a bank from your microphone, the recording is held only long enough to split and convert it, is not added to that cache, and is discarded when the response is complete. The resulting previews and compact LPC frames return to your browser; if you build them into firmware, the recipe retains the word labels and LPC frames, not the original recording.
We rely on a small number of trusted services, each with its own privacy policy covering the data it handles:
The site sets no tracking or advertising cookies. Our analytics are cookieless. Cloudflare may set a strictly-necessary cookie to protect the site, and Lemon Squeezy's checkout may set cookies required to process your order. That's it.
Only to deliver products and licenses, send the newsletter you asked for, reply to messages, provide support, and keep the site running. Nothing else.
Plainly: we never sell, rent, or trade your personal information to anyone.
You can unsubscribe from the newsletter at any time using the link in any email. To access, correct, or delete the personal data we hold about you, email privacy@rubato.audio and we'll take care of it. If you're in the EU or UK (GDPR) or California (CCPA), you have specific rights to access and delete your data — we honor those requests no matter where you live.
We keep newsletter data until you unsubscribe. We retain purchase records for as long as needed to provide support and meet our tax and legal obligations. We keep contact and support messages for as long as needed to reply and maintain a useful support history. Most anonymous website-usage events are retained by our analytics service for about three months. The stripped, identity-free Plaits Palette build-choice records described above are kept longer so we can understand model and option use over time. Plaits Palette recipes and compiled artifacts are kept as long as needed to deliver and reuse cached builds.
Rubato Audio isn't directed at children, and we don't knowingly collect personal information from anyone under 16.
We may update this policy from time to time. When we make a meaningful change, we'll update the date at the top of this page.
Questions about privacy, or want your data removed? Email privacy@rubato.audio.