Last updated: 12 October 2026
1. Controller
Konektus Ltd (Konektus OÜ), trading as Digital Coma Network, registry code 17429196, Niidi/2, Lassi Village, Saaremaa Parish, 93214, Estonia ("Digital Coma Network", "we"), is responsible for the personal data processed on digitalcomanetwork.com. Contact for privacy questions: info@digitalcomanetwork.com.
2. Files you upload
When you use our tools, such as Coffeemaster, the audio files you upload are sent to our servers and processed there to create your result (for example, a mastered track). We use these files only to provide the service. We do not listen to, share, sell or use them to train any models. Files are transferred over an encrypted connection (HTTPS).
- Your uploaded file is deleted as soon as your result has been made. If you do not buy, it is deleted about 24 hours after upload, and at the latest within 2 days.
- Previews are deleted within 1 day.
- Your result is kept for 30 days after it is made, so that you can download it during your download period, and is then deleted.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
3. What data we process
We have no user accounts: you buy with just your e-mail address, and we process only the data listed here.
- Technical data when you visit the site (IP address, browser type, pages requested, time), processed by our hosting providers to deliver the website and keep it secure. Uploads and some forms are checked by Cloudflare Turnstile to tell people from bots. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Purchase data when you buy something (name, e-mail address, order details and payment status). Payments are processed by Stripe as an independent controller; we do not receive your card details. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations such as accounting and tax (Art. 6(1)(c)).
- Download records: when each file was downloaded and how many times, to apply the download limits. We keep only a one-way hash of your IP address, never the address itself. Legal basis: performance of a contract (Art. 6(1)(b)) and legitimate interest in preventing abuse of download links (Art. 6(1)(f)).
- Analytics: only if you accept analytics cookies, Google Analytics records which pages are visited and how the site is used, with an identifier stored in a cookie. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Messages you send us by e-mail. Legal basis: legitimate interest in answering you.
- Local storage: your shopping cart is saved in your browser's local storage. It stays on your device and is not sent to us until you check out.
4. Cookies
- Necessary: technologies the site, bot protection and payments need to work. These are always on.
- Analytics: Google Analytics cookies (
_ga, _ga_*), kept for up to 2 years. They are set only if you click "Accept" in our cookie banner. If you decline, no analytics cookies are set.
We do not use advertising cookies. You can change your choice at any time with the Cookie settings link. When you withdraw consent, we stop analytics and delete its cookies.
5. Recipients
We share data only with the service providers we need:
- Vercel: website hosting;
- Amazon Web Services: file storage, audio processing and sending e-mails (data stored in Stockholm, Sweden);
- Supabase: our database (data stored in Stockholm, Sweden);
- Cloudflare: bot protection (Turnstile);
- Stripe: payments;
- Google: website analytics, only with your consent;
- our accountant, and authorities where the law requires it.
Some providers may process data outside the EU/EEA. In that case transfers are protected by EU Standard Contractual Clauses or an adequacy decision, such as the EU–US Data Privacy Framework.
6. How long we keep data
- Uploaded files, previews and results: as described in section 2.
- Purchase and invoice records, including download records: as long as accounting law requires (usually 7 years).
- E-mails: as long as needed to handle your request.
- Server logs: for a short period, as set by our hosting providers.
- Analytics data: as set in Google Analytics, at most 14 months; the cookies up to 2 years, unless you withdraw consent.
7. Your rights
You have the right to access, correct, delete or restrict processing of your data, to data portability, to object to processing based on legitimate interest, and to withdraw your consent to analytics at any time. Write to info@digitalcomanetwork.com. You may also complain to your data protection authority, for example the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon (aki.ee).
8. Children
The service is not directed at children under 16, and we do not knowingly collect their data.
9. Changes
We may update this policy. The date at the top shows the current version.
