Privacy Policy

Last updated: 12 October 2026

This Privacy Policy explains how Scratch ADR ("we", "us", "Plumet Software") collects and uses personal data when you use scratchadr.com, download the Mac app installer, request a beta license, contact us, or use the Scratch ADR Mac app.

We are the data controller for processing described here. During the public beta, licenses are issued by email. Paid plans and checkout are not live yet; when they launch, this policy will name the payment provider we use.

1. Data controller

Sébastien Prangère, trading as Plumet Software
1B rue Plumet, 75015 Paris, France
SIRET 104 400 213 00013
Contact form
Website: scratchadr.com

Publisher and hosting details are also on our Legal page.

2. What we do not collect

In normal use of the Scratch ADR Mac app:

We do not upload your reference voice audio, generated takes, or script text to our servers.
Voice synthesis and transcription run locally on your Mac.

Do not send us voice samples or project audio through the contact form unless we explicitly ask you to for support.

3. Data we collect and why

3.1 License and app activation (Mac app)

When you receive a beta license or activate the app, we process data needed to issue, verify, and manage your license.

Email address — to deliver your license and communicate about your account.
License identifier and license token — to activate the app and enforce license terms.
Device identifier — a random UUID stored in your Mac Keychain, sent when verifying your license (up to two devices per license).
Device and system information — Mac model, display name, RAM, macOS version, and country (from your network connection) when the app verifies your license or downloads models.
Model download records — which licensed model files were requested, linked to your license and country.

When paid subscriptions launch, order and billing metadata from our payment provider will be processed to fulfill your purchase. We will update this policy before checkout goes live.

Legal basis (GDPR): performance of a contract (Art. 6(1)(b)) — providing the software and subscription you requested.

3.2 Usage reporting (Mac app only)

On first setup, and later in Settings, you choose whether to share optional product usage statistics. Product stats are off by default until you turn them on. You can change that choice at any time; the app works the same either way.

After you answer Yes or No, the app may send a small technical profile ping (even if you decline product stats) so we can support the beta and understand compatibility:

A pseudonymous install identifier (derived from a hashed hardware UUID, not your raw device serial).
Your preference (product stats on or off).
App version, macOS version, coarse Mac model identifier, and RAM (rounded GB).
Media Composer version, if you use the Avid panel.
Your license identifier (linked to your email in our license database).

Legal basis (GDPR) for the technical profile: legitimate interest in support, security, and compatibility during the beta (Art. 6(1)(f)).

When product usage statistics are enabled, we may also receive:

Aggregate counts such as number of generations, most-used model, model size tier, and language.
Non-content stats such as custom voice count, average reference clip duration, and option usage (for example seed or transcription toggles).

We do not receive dialogue text, audio files, file paths, or voice names through this channel.

Legal basis (GDPR) for product statistics: consent (Art. 6(1)(a)) — you opt in via Settings.

3.3 Public beta signup (website)

When you request a beta license on scratchadr.com, we collect:

Email address — to send your beta license.
Agreement to beta terms — recorded by your checkbox submission.
Anti-abuse data — Cloudflare Turnstile verification and short-lived rate-limit counters (IP and normalized email) to prevent abuse.

Legal basis (GDPR): performance of a contract (beta terms) and legitimate interest in fraud prevention (Art. 6(1)(b) and (f)).

3.4 Contact form (website)

When you contact us, we collect your name, email address, message, and technical metadata needed to deliver the message (such as IP address and browser user agent in the email we receive).

Legal basis (GDPR): legitimate interest in responding to inquiries (Art. 6(1)(f)), or steps at your request before a contract.

3.5 Website analytics and fonts

Cloudflare Web Analytics — privacy-oriented page-view statistics on scratchadr.com (see Cloudflare's documentation; their beacon does not use third-party cookies for this product).
Cloudflare Turnstile — human verification on signup and contact forms.
Google Fonts — typography is loaded from Google servers, which may receive your IP address. We may self-host fonts in a future update to reduce this transfer.

Legal basis (GDPR): legitimate interest in site security, performance, and basic analytics (Art. 6(1)(f)), where applicable.

3.6 App updates

The Mac app may check for updates (Sparkle feed on downloads.scratchadr.com). That request can reveal your app version and IP address to our hosting provider. You can disable automatic update checks in Settings.

Legal basis (GDPR): legitimate interest in delivering security and compatibility updates (Art. 6(1)(f)).

3.7 App installer downloads

When you download the macOS app installer (.dmg) from downloads.scratchadr.com, we log a download event for distribution statistics and abuse prevention. For each download start we may store:

The installer file name and the time of the request.
Country derived from the network connection.
Your IP address (for security and abuse investigation only).
A coarse client class derived from the User-Agent header (for example Safari, Chrome, or Sparkle), not the full User-Agent string.
The referring website hostname when the browser sends a Referer header (for example scratchadr.com). We do not store the full URL path or query string.
An optional source tag when present on the download URL (for example from a license email link).

These logs are not linked to your email or license. The IP address is removed from the live database after 90 days; the other fields may be kept longer for aggregate distribution statistics. Encrypted database backups may retain a copy of recent IPs for up to the backup retention period (see section 5).

Legal basis (GDPR): legitimate interest in measuring installer distribution, understanding how people reach the download, and preventing abuse (Art. 6(1)(f)).

4. Processors and third parties

We use service providers who process data on our behalf:

Cloudflare — website hosting, Workers, D1 database, R2 storage, Turnstile, Web Analytics, and optional admin access controls.
Resend — transactional email (license delivery, contact form forwarding).
Google — font delivery when you load pages that use Google Fonts.

When we add a payment provider for paid plans, it will be listed here before checkout opens.

We have agreements in place with processors where required by law. Some providers may process data outside the European Economic Area; where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

5. Retention

License and order records — kept for the life of your subscription or beta period and for a reasonable period afterward for support, billing disputes, and legal obligations.
Device activation records — kept while a device is registered to your license; removed when you deactivate a device from the app or when the slot is freed.
Usage reporting — technical profile and (if enabled) product statistics are kept while your license remains active; contact us to request deletion.
Contact messages — kept as long as needed to handle your request and for internal record-keeping, typically up to two years unless a longer period is required by law.
Database backups — encrypted snapshots may be retained for up to 365 days for disaster recovery.
Anti-abuse rate limits — short-lived (about 10 minutes).
App installer download logs — aggregate fields (file, country, client class, referer host, source) kept to measure distribution over time; IP addresses cleared from the live database after 90 days. Contact us if you want related logs reviewed for deletion where feasible (these rows are not linked to an email address).

6. Your rights (GDPR)

If you are in the European Economic Area, United Kingdom, or another jurisdiction with similar rights, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Erase data in certain circumstances.
Restrict or object to certain processing.
Data portability where applicable.
Withdraw consent at any time for processing based on consent (such as optional usage statistics), without affecting prior lawful processing.
Lodge a complaint with a supervisory authority. In France: CNIL.

To exercise your rights, use our contact form. We may need to verify your identity (for example by confirming the email on your license).

Device deactivation: In the Mac app, you can release a device slot from the license screen, which removes that device's activation record from our servers.

7. Security

We use technical and organizational measures appropriate to the data we hold, including encrypted connections (HTTPS), access controls on administrative systems, and hashed identifiers where possible. No method of transmission or storage is completely secure.

8. Children

Scratch ADR is a professional post-production tool intended for adults and business use. We do not knowingly collect personal data from children under 16.

9. Changes

We may update this policy from time to time. The "Last updated" date at the top will change. Continued use of the website or app after an update constitutes acknowledgment of the revised policy where permitted by law. Material changes to the Mac app may also be reflected in the End User License Agreement.

10. Related documents

Legal notice (publisher, copyright, hosting)
Beta terms & Privacy (public beta signup)