Privacy Policy
Last updated: 2026-11-06
POLYTOPE KK ("we", "us", "our") operates the NOMN website and services at nomn.jp. This policy describes what personal data we collect, why, and your rights regarding it.
--
## What We Collect
Account Information
When you create an account, we collect your name, email address, and a securely hashed password. This is necessary to provide you with access to purchases, license keys, and trial activations.
Purchase Information
When you buy a product, payment is processed by Stripe. We store a record of your purchase (product, date, amount) and the license key issued. We do not store credit card numbers or payment details — Stripe handles this entirely.
Hardware Reservations
When you reserve a hardware product, we store the reservation with your account: the product, the date, your language, the country we estimate from your IP address at that moment (we do not keep the IP address with the reservation), and the date you cancelled, if you do. No payment is taken. You can cancel from the product page at any time.
License and Trial Data
We store license keys, activation counts, and trial expiration dates to enforce licensing terms and provide support.
Plugin Telemetry
When you use a NOMN audio plugin (FOAM, RESERVOIR, ANTIVERB, CHAKRABOOST, and others), the plugin contacts our servers in two situations:
- When the plugin loads — to verify your license is still valid, check whether a newer version is available, and record that a plugin session has started.
- When the plugin closes — to record that the session ended. Sessions that end without a close message indicate a likely crash, which helps us prioritize stability fixes.
What we collect on these connections: your license key, a randomly-generated session identifier, the plugin version, your operating system name, the name of your audio host (e.g. "Logic Pro", "Ableton Live"), and a one-way (SHA-256) hash of stable hardware identifiers used to enforce the per-machine activation limit you agreed to at purchase. We never see the underlying hardware identifier — only the hash, which we cannot reverse.
What we do NOT collect: audio content, parameter values, MIDI input, project file contents, or any data about what you are working on. (Presets you choose to sync or share are covered under Preset Sync and Sharing below.)
We use this information to (a) enforce the licensing terms you agreed to at purchase, (b) detect plugin crashes and prioritize stability fixes, and (c) understand which DAW hosts and operating system versions our customers use so we can prioritize compatibility work. Aggregate statistics are reviewed internally; we do not share individual session data with third parties.
Legal basis: license enforcement is GDPR Art. 6(1)(b) (performance of contract). Crash awareness and compatibility analytics are GDPR Art. 6(1)(f) (legitimate interest), with the right to object. To object to telemetry collection, email hello@nomn.jp — note that license verification is necessary for the plugin to function and cannot be disabled while you continue to use the product.
Download Logging
When you download a plugin installer from our site, we record which file, product, and platform you downloaded, your IP address, your browser's user-agent string, and the time of the download. When a download follows a trial signup (or is otherwise initiated from your account), we associate it with your account so we can understand the download-to-activation journey and provide support. Anonymous downloads remain anonymous — we do not attempt to identify the person behind them. We do not share download logs with third parties.
Legal basis: GDPR Art. 6(1)(f) (legitimate interest) — securing our distribution, understanding which builds are in use, and supporting customers — with the right to object at hello@nomn.jp.
Feedback
If you submit feedback through the site, we store the message content and your email address if you choose to provide it.
Analytics
We use Umami (cloud-hosted) for website analytics. Umami does not use cookies, does not collect personal data, and does not track individual users across sessions. It records aggregate page views and referrer data only.
Local Storage
We store an authentication token and your language preference in your browser's localStorage. These are not cookies and are not transmitted to third parties. If you sign in with Google, we also set two short-lived cookies during the sign-in: one lasting 10 minutes that protects it against forgery, and one lasting 2 minutes that hands your session to the page. Both are deleted once used and neither is used for tracking.
Preset Sync and Sharing
Preset sync stays off until you sign in to your NOMN account from inside a plugin. Once you do, we store:
- for each plugin install you sign in from: the device name the plugin reports (for example "studio-mac"), when it signed in and was last used, and a SHA-256 hash of its sign-in token (the token itself stays on your computer);
- every preset you save while signed in: its name, category, description, plugin version, timestamps, the name of the computer it was saved on, and its full contents, which are the plugin's parameter values. When you delete a synced preset we keep a deletion marker, with its last contents, so your other computers remove it too.
Presets in your library are private to your account. Presets you choose to share are public: anyone can browse and download them on nomn.jp and inside the plugins, together with your public handle (and your real name, only if you turned that on in your account settings). Every shared preset is released under CC0 1.0 (a public domain dedication), so anyone may copy, change and reuse it without asking. Each night we also publish an archive of all shared presets, with their authors' handles, at nomn.jp/presets/export/; each archive stays online for 30 days.
Legal basis: syncing your library is GDPR Art. 6(1)(b) (performance of contract), because you asked us to keep your presets the same across your computers. Publishing a preset you shared is GDPR Art. 6(1)(a) (consent, given each time you share), and you withdraw it by deleting the share.
--
## Why We Collect It
- Account data: to authenticate you and deliver purchased products
- Purchase records: to issue license keys and process refunds
- Hardware reservations: to measure demand and to email you when the product is ready to order
- License data: to enforce license terms and provide support
- Synced presets: to keep your preset library the same on every computer you sign in from
- Shared presets: to publish the presets you chose to share
- Feedback: to improve our products
- Analytics: to understand how the site is used in aggregate
--
## Email Communications
We send the following kinds of email to people who have created a NOMN account:
Transactional emails — your trial license code at signup, password reset links, and purchase receipts with license keys. These are necessary to provide the service you asked for and are sent under GDPR Art. 6(1)(b) (performance of contract).
Service-related emails — when a trial expires, we may send a single message asking for honest feedback about your experience. This helps us improve our products and is sent under GDPR Art. 6(1)(f) (legitimate interest), with the right to opt out at any time.
Occasional product updates — when we ship significant updates or related tools, we may send brief announcements to existing account holders. This relies on the ePrivacy Directive Art. 13(2) "soft opt-in" exemption for similar products marketed to existing customers, and includes a clear way to opt out in every message.
We do not sell or share your email address with third parties for their own marketing purposes.
To stop receiving non-transactional emails, reply "no thanks" to any message or email hello@nomn.jp. We will permanently suppress your address from future non-transactional sends. Transactional emails (license delivery, password resets, purchase receipts) continue to be sent for as long as you have an active account, since they are necessary to deliver the service.
A separate Legitimate Interest Assessment for the service-related and product-update categories is kept on file.
--
## Third-Party Processors
We share personal data with the following services only as necessary to operate NOMN:
- Stripe (stripe.com) — payment processing. Receives your email and payment details during checkout. See Stripe's privacy policy at stripe.com/privacy.
- Umami (umami.is) — website analytics. Does not receive personal data. See umami.is/privacy.
- Hetzner Online GmbH (hetzner.com): hosting. Provides the server in Singapore where NOMN's data is stored (see below) and does not access the data on it. See hetzner.com/legal/privacy-policy.
- Google (google.com): optional sign-in, used only if you choose "Continue with Google". Google sends us your email address, your name and your Google account ID, and learns that you signed in to NOMN. We never receive your Google password. See policies.google.com/privacy.
We do not sell, rent, or share your personal data with any other third parties.
--
## Where Your Data Is Stored
Everything this policy describes, including synced and shared presets, is stored on a server in Singapore, rented from Hetzner Online GmbH of Germany. Hetzner provides the machine and the network; it does not access or process the data stored on the server. Singapore protects personal data under the Personal Data Protection Act 2012 (PDPA), overseen by the Personal Data Protection Commission (pdpc.gov.sg). We reviewed that law before choosing the location, and we apply the same safeguards to the data there that we would in Japan: encrypted connections, hashed passwords and hashed plugin sign-in tokens, and access limited to POLYTOPE KK staff.
--
## Data Retention
We retain your account data for as long as your account is active. Purchase records and license keys are retained indefinitely to support ongoing license verification and customer support.
Synced presets, their deletion markers and your signed-in devices are kept until you delete your account. A shared preset you delete leaves nomn.jp and the plugins at once; we keep its record until your account is deleted so the limit of 20 shares a day can be applied.
You may request deletion of your account and associated data at any time by emailing hello@nomn.jp. We will process deletion requests within 30 days. Deleting your account erases your synced presets, deletion markers, shared presets and device sign-ins from our database. Your shared presets disappear from nomn.jp, from the plugins and from the next nightly archive; archives published before the deletion remain downloadable until they are 30 days old. Copies that other people downloaded while a preset was shared stay theirs to use, because a CC0 dedication cannot be withdrawn.
If you used the NOMN REMOTE free trial, we keep a one-way hash of your email address after your account is deleted, so that the free relay hour is given only once per email address. We keep it for as long as the free trial is offered. With the hash we can tell whether an email address entered at a later signup has already had the free hour, but we cannot read your address from it.
--
## Your Rights
Under GDPR (EU/EEA residents):
You have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with your local data protection authority. To exercise any of these rights, email hello@nomn.jp.
Under APPI (Japan residents):
You have the right to request disclosure, correction, addition, deletion, or cessation of use of your personal information, including your synced and shared presets. You also have the right to request cessation of provision to third parties. To exercise these rights, email hello@nomn.jp.
For all users:
You may request a copy of all personal data we hold about you, or request full deletion of your account and data, by emailing hello@nomn.jp.
--
## Children
NOMN is not directed at children under 16. We do not knowingly collect personal data from children.
--
## Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance.
--
## Contact
POLYTOPE KK
Tokyo, Setagaya City, Daita, 5 Chome-34-17
hello@nomn.jp
Last updated: October 21, 2026