Privacy Policy

Last updated: 11 July 2026

This Privacy Policy explains how Scratch ADR ("we", "us", "Plumet Software") collects and uses personal data when you use scratchadr.com, request a beta license, contact us, or use the Scratch ADR Mac app.

We are the data controller for processing described here. During the public beta, licenses are issued by email. Paid plans and checkout are not live yet; when they launch, this policy will name the payment provider we use.

1. Data controller

Sébastien Prangère, trading as Plumet Software
1B rue Plumet, 75015 Paris, France
SIRET 104 400 213 00013
Contact form
Website: scratchadr.com

Publisher and hosting details are also on our Legal page.

2. What we do not collect

In normal use of the Scratch ADR Mac app:

We do not upload your reference voice audio, generated takes, or script text to our servers.
Voice synthesis and transcription run locally on your Mac.

Do not send us voice samples or project audio through the contact form unless we explicitly ask you to for support.

3. Data we collect and why

3.1 License and app activation (Mac app)

When you receive a beta license or activate the app, we process data needed to issue, verify, and manage your license.

Email address — to deliver your license and communicate about your account.
License identifier and license token — to activate the app and enforce license terms.
Device identifier — a random UUID stored in your Mac Keychain, sent when verifying your license (up to two devices per license).
Device and system information — Mac model, display name, RAM, macOS version, and country (from your network connection) when the app verifies your license or downloads models.
Model download records — which licensed model files were requested, linked to your license and country.

When paid subscriptions launch, order and billing metadata from our payment provider will be processed to fulfill your purchase. We will update this policy before checkout goes live.

Legal basis (GDPR): performance of a contract (Art. 6(1)(b)) — providing the software and subscription you requested.

3.2 Optional usage statistics (Mac app only)

On first setup, and later in Settings, you can choose whether to share optional usage statistics. This is off by default until you turn it on. You can change your choice at any time; the app works the same either way.

When enabled, we may receive:

A pseudonymous install identifier (derived from a hashed hardware UUID, not your raw device serial).
Aggregate counts such as number of generations, most-used model, model size tier, and language.
App version and, if you use the Avid panel, Media Composer version.
Non-content stats such as custom voice count, average reference clip duration, and option usage (for example seed or transcription toggles).
Your license identifier (linked to your email in our license database).

We do not receive dialogue text, audio files, file paths, or voice names through this channel.

Legal basis (GDPR): consent (Art. 6(1)(a)) — you opt in via Settings.

3.3 Public beta signup (website)

When you request a beta license on scratchadr.com, we collect:

Email address — to send your beta license.
Agreement to beta terms — recorded by your checkbox submission.
Anti-abuse data — Cloudflare Turnstile verification and short-lived rate-limit counters (IP and normalized email) to prevent abuse.

Legal basis (GDPR): performance of a contract (beta terms) and legitimate interest in fraud prevention (Art. 6(1)(b) and (f)).

3.4 Contact form (website)

When you contact us, we collect your name, email address, message, and technical metadata needed to deliver the message (such as IP address and browser user agent in the email we receive).

Legal basis (GDPR): legitimate interest in responding to inquiries (Art. 6(1)(f)), or steps at your request before a contract.

3.5 Website analytics and fonts

Cloudflare Web Analytics — privacy-oriented page-view statistics on scratchadr.com (see Cloudflare's documentation; their beacon does not use third-party cookies for this product).
Cloudflare Turnstile — human verification on signup and contact forms.
Google Fonts — typography is loaded from Google servers, which may receive your IP address. We may self-host fonts in a future update to reduce this transfer.

Legal basis (GDPR): legitimate interest in site security, performance, and basic analytics (Art. 6(1)(f)), where applicable.

3.6 App updates

The Mac app may check for updates (Sparkle feed on downloads.scratchadr.com). That request can reveal your app version and IP address to our hosting provider. You can disable automatic update checks in Settings.

Legal basis (GDPR): legitimate interest in delivering security and compatibility updates (Art. 6(1)(f)).

4. Processors and third parties

We use service providers who process data on our behalf:

Cloudflare — website hosting, Workers, D1 database, R2 storage, Turnstile, Web Analytics, and optional admin access controls.
Resend — transactional email (license delivery, contact form forwarding).
Google — font delivery when you load pages that use Google Fonts.

When we add a payment provider for paid plans, it will be listed here before checkout opens.

We have agreements in place with processors where required by law. Some providers may process data outside the European Economic Area; where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

5. Retention

License and order records — kept for the life of your subscription or beta period and for a reasonable period afterward for support, billing disputes, and legal obligations.
Device activation records — kept while a device is registered to your license; removed when you deactivate a device from the app or when the slot is freed.
Usage statistics — kept while your license remains active and you keep sharing enabled; contact us to request deletion.
Contact messages — kept as long as needed to handle your request and for internal record-keeping, typically up to two years unless a longer period is required by law.
Database backups — encrypted snapshots may be retained for up to 365 days for disaster recovery.
Anti-abuse rate limits — short-lived (about 10 minutes).

6. Your rights (GDPR)

If you are in the European Economic Area, United Kingdom, or another jurisdiction with similar rights, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Erase data in certain circumstances.
Restrict or object to certain processing.
Data portability where applicable.
Withdraw consent at any time for processing based on consent (such as optional usage statistics), without affecting prior lawful processing.
Lodge a complaint with a supervisory authority. In France: CNIL.

To exercise your rights, use our contact form. We may need to verify your identity (for example by confirming the email on your license).

Device deactivation: In the Mac app, you can release a device slot from the license screen, which removes that device's activation record from our servers.

7. Security

We use technical and organizational measures appropriate to the data we hold, including encrypted connections (HTTPS), access controls on administrative systems, and hashed identifiers where possible. No method of transmission or storage is completely secure.

8. Children

Scratch ADR is a professional post-production tool intended for adults and business use. We do not knowingly collect personal data from children under 16.

9. Changes

We may update this policy from time to time. The "Last updated" date at the top will change. Continued use of the website or app after an update constitutes acknowledgment of the revised policy where permitted by law. Material changes to the Mac app may also be reflected in the End User License Agreement.

10. Related documents

Legal notice (publisher, copyright, hosting)
Beta terms & Privacy (public beta signup)