Download

Privacy Policy

Last Updated: September 26, 2026

Welcome to our website! This Privacy Policy explains how we collect, use, and protect your personal information when you visit our site (https://cutoff.dev), use our documentation, blog, subscription services, or engage with our community and support channels. Our Audio/MIDI framework itself, Cutoff, or any part of it (Cutoff AudioUI, Cutoff Fusion) does not collect any data—this policy applies only to the website and related services.

1. Who We Are

Tylium SRL, a Société à responsabilité limitée / SRL (similar to a limited liability company) under Belgian law, is the data controller for personal data processed through this website.

  • BCE/KBO: BE 1000.798.191
  • VAT: BE 1000.798.191
  • Location: Profondeville, Belgium
  • Contact: legal@tylium.io

For full company details, see our Legal Notice.

2. What Data We Collect

We collect the following:

  • Authentication and Subscription Data: When you sign up or manage a subscription via our site, Clerk handles authentication. This includes your email address, account details, and session data stored in essential cookies (e.g., __clerk_db_jwt, __session, __client_uat).
  • Payment Data: Stripe processes payments for subscriptions, collecting payment details (e.g., card info) and setting a machine ID cookie (__stripe_mid) for fraud prevention. We don’t store your full payment data.
  • Usage Analytics (optional): If you accept analytics cookies, Google Analytics collects usage data (e.g., pages viewed, visit duration, approximate location, device and browser type) using the _ga and _ga_* cookies. Analytics stays off until you opt in.
  • Newsletter and Waitlist: If you subscribe, we store your email address in our database (Neon) and send emails through Resend. Cloudflare Turnstile checks that the sign-up comes from a human, processing technical data about your browser and device.
  • Community and Support Data:
    • Discord: If you join our Discord server for community or commercial support, Discord collects data like your username, messages, and server activity per their Privacy Policy.
    • GitHub: If you submit issues or contribute via GitHub, it collects data like your username and activity per their Privacy Statement.
  • Technical Data: Our hosting provider, Vercel, processes request data (e.g., IP address, browser type) to serve the site and keep it secure.

3. How We Use Your Data

  • Site Services: Clerk and Stripe enable subscriptions and access to premium features.
  • Site Improvement: With your consent, Google Analytics helps us understand how the site is used and improve it.
  • Communication: We may email you about your account or updates (opt-out available for non-essential messages).
  • Support: Discord and GitHub facilitate community engagement and issue tracking.

4. Cookies and Tracking

We keep it minimal:

  • Essential Cookies:
    • Clerk uses __clerk_db_jwt, __session, __client_uat, and clerk_active_org for login and subscriptions.
    • Stripe uses __stripe_mid for secure payments.
    • These are necessary for the site to work—no consent required, but you can block them via your browser (may break functionality).
  • Analytics Cookies (optional): Google Analytics sets _ga and _ga_* only after you opt in through the cookie banner.
  • No marketing cookies.
  • You can manage your cookie preferences at any time using the cookie preferences option in the site footer.

5. Legal Basis (GDPR)

  • Essential Cookies: “Legitimate interest” for core site functions (auth, payments).
  • Analytics: Consent, which you can withdraw at any time.
  • Newsletter: Consent (unsubscribe at any time).
  • Account Data: Contract fulfillment (subscriptions) or consent (emails).
  • Third-Party Services: Discord and GitHub process data under their own policies.

6. Sharing Your Data

We share only as necessary:

  • Clerk: Authentication and session management.
  • Stripe: Payment processing.
  • Google: Usage analytics, only if you opt in.
  • Cloudflare: Bot protection (Turnstile) on the newsletter form.
  • Resend: Email delivery.
  • Neon: Newsletter and waitlist database.
  • Vercel: Website hosting.
  • Discord: Community and support interactions.
  • GitHub: Issue tracking and contributions.

No selling or sharing beyond legal requirements (e.g., court orders).

7. Your Rights

Under GDPR and similar laws:

  • Access, correct, or delete your data.
  • Restrict or object to processing.
  • Withdraw consent (where applicable).
  • Request portability.

Email legal@tylium.io to exercise these, or contact Discord/GitHub directly for their data. You can also lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données) or your local supervisory authority.

8. Data Protection

We use HTTPS, Clerk’s encryption, and Stripe’s PCI compliance. Third parties (Discord, GitHub) have their own security—check their policies. No system is 100% secure—use at your own risk.

9. Data Retention

  • Account Data: Kept while active, deleted within 30 days of cancellation unless legally required.
  • Payment Data: Stripe retains records per their terms; we keep minimal accounting data.
  • Analytics: Google Analytics retains analytics data for up to 14 months.
  • Newsletter: Kept until you unsubscribe.
  • Support Data: Discord and GitHub retain data per their policies.

10. Managing Cookies

Block or delete cookies via your browser; disabling essential ones breaks login and payments. Analytics cookies are off by default: turn them on or off at any time from the cookie preferences option in the site footer.

11. Third-Party Links

Our site links to Discord, GitHub, and external resources. We’re not responsible for their practices—review their policies.

12. Changes

We may update this policy—check back for the latest.

13. Contact

Reach us at legal@tylium.io.