Legal
Privacy
Last updated 14 September 2026.
CoreForge Labs, based in Wellington, New Zealand, is the data controller for the information described here. Contact us at info.coreforgelabs@gmail.com about anything on this page.
What we hold, and why
| Data | Why | Kept |
|---|---|---|
| Your email address | To send your activation codes and to support you afterwards. Without it we cannot deliver what you bought. | While the licence exists |
| Licence and order records — which plugin, how many, the Paddle transaction reference | To prove you own the licence, reissue it after a Core replacement, and handle refunds. | 7 years (tax records) |
| Q-SYS Core Locking ID | A hardware identifier. It is what a licence binds to, and what makes offline activation possible. It identifies equipment, not a person. | While the licence exists |
| Activation history | So support can see what happened when something goes wrong, and to detect abuse. | While the licence exists |
What we do not hold
We never see your card details. Payment is handled entirely by Paddle; nothing about your card, billing address or tax status reaches our systems.
We run no advertising trackers and build no profiles of you. Measurement comes from two cookieless sources that never identify you: our own first-party counter, and Cloudflare Web Analytics (aggregate traffic figures, collected by our hosting provider without cookies or cross-site tracking). Our own counter records page views, plugin downloads and add-to-carts so we can see what is popular and how the shop performs. For each page view we record the page path, the site that sent you (just its address, e.g.google.com — never the full link or any search terms), and a random per-tab session number that lets us count visits and conversion. None of this identifies you, there are no cookies, and it honours your browser's Do-Not-Track setting. We do not sell or share your data with anyone for marketing.
Who processes data for us
- Paddle.com Market Ltd (UK) — Merchant of Record. Takes payment, handles tax, holds billing details. Paddle is a controller in its own right for that data;their privacy noticeapplies.
- Cloudflare (US/global) — hosting, database, file storage, and cookieless aggregate site analytics.
- Resend (US) — sends the activation and support emails.
These providers operate internationally, so your data may be processed outside New Zealand, including in the EU and United States, under the safeguards those providers maintain.
Cookies
This site sets no tracking or advertising cookies. Your cart is kept in your browser's local storage so it survives a page reload — it holds only which plugins you selected and how many, it never leaves your device except when you check out, and you can clear it by emptying your cart. Paddle's checkout sets its own cookies as part of taking payment.
Your rights
You can ask us for a copy of what we hold about you, to correct it, or to delete it. Emailinfo.coreforgelabs@gmail.com and we will respond within 30 days.
One honest limit: deleting your order record means we can no longer prove you own your licences, so we could not reissue one after a Core failure or verify a support request. We also have to keep transaction records for tax purposes. If you ask for deletion we will explain exactly what can and cannot be removed before doing anything.
If you are in the EU or UK you also have the right to complain to your local data protection authority. In New Zealand, that is theOffice of the Privacy Commissioner.