Privacy Policy
Last updated: 2026-03-30
POLYTOPE KK ("we", "us", "our") operates the NOMN website and services at nomn.jp. This policy describes what personal data we collect, why, and your rights regarding it.
--
## What We Collect
Account Information
When you create an account, we collect your name, email address, and a securely hashed password. This is necessary to provide you with access to purchases, license keys, and trial activations.
Purchase Information
When you buy a product, payment is processed by Stripe. We store a record of your purchase (product, date, amount) and the license key issued. We do not store credit card numbers or payment details — Stripe handles this entirely.
License and Trial Data
We store license keys, activation counts, and trial expiration dates to enforce licensing terms and provide support.
Plugin Telemetry
When you use a NOMN audio plugin (FOAM, RESERVOIR, ANTIVERB, CHAKRABOOST, and others), the plugin contacts our servers in two situations:
- When the plugin loads — to verify your license is still valid, check whether a newer version is available, and record that a plugin session has started.
- When the plugin closes — to record that the session ended. Sessions that end without a close message indicate a likely crash, which helps us prioritize stability fixes.
What we collect on these connections: your license key, a randomly-generated session identifier, the plugin version, your operating system name, the name of your audio host (e.g. "Logic Pro", "Ableton Live"), and a one-way (SHA-256) hash of stable hardware identifiers used to enforce the per-machine activation limit you agreed to at purchase. We never see the underlying hardware identifier — only the hash, which we cannot reverse.
What we do NOT collect: audio content, parameter values, MIDI input, project file contents, or any data about what you are working on.
We use this information to (a) enforce the licensing terms you agreed to at purchase, (b) detect plugin crashes and prioritize stability fixes, and (c) understand which DAW hosts and operating system versions our customers use so we can prioritize compatibility work. Aggregate statistics are reviewed internally; we do not share individual session data with third parties.
Legal basis: license enforcement is GDPR Art. 6(1)(b) (performance of contract). Crash awareness and compatibility analytics are GDPR Art. 6(1)(f) (legitimate interest), with the right to object. To object to telemetry collection, email hello@nomn.jp — note that license verification is necessary for the plugin to function and cannot be disabled while you continue to use the product.
Download Logging
When you download a plugin installer from our site, we record which file, product, and platform you downloaded, your IP address, your browser's user-agent string, and the time of the download. When a download follows a trial signup (or is otherwise initiated from your account), we associate it with your account so we can understand the download-to-activation journey and provide support. Anonymous downloads remain anonymous — we do not attempt to identify the person behind them. We do not share download logs with third parties.
Legal basis: GDPR Art. 6(1)(f) (legitimate interest) — securing our distribution, understanding which builds are in use, and supporting customers — with the right to object at hello@nomn.jp.
Feedback
If you submit feedback through the site, we store the message content and your email address if you choose to provide it.
Analytics
We use Umami (cloud-hosted) for website analytics. Umami does not use cookies, does not collect personal data, and does not track individual users across sessions. It records aggregate page views and referrer data only.
Local Storage
We store an authentication token and your language preference in your browser's localStorage. These are not cookies and are not transmitted to third parties.
--
## Why We Collect It
- Account data: to authenticate you and deliver purchased products
- Purchase records: to issue license keys and process refunds
- License data: to enforce license terms and provide support
- Feedback: to improve our products
- Analytics: to understand how the site is used in aggregate
--
## Email Communications
We send the following kinds of email to people who have created a NOMN account:
Transactional emails — your trial license code at signup, password reset links, and purchase receipts with license keys. These are necessary to provide the service you asked for and are sent under GDPR Art. 6(1)(b) (performance of contract).
Service-related emails — when a trial expires, we may send a single message asking for honest feedback about your experience. This helps us improve our products and is sent under GDPR Art. 6(1)(f) (legitimate interest), with the right to opt out at any time.
Occasional product updates — when we ship significant updates or related tools, we may send brief announcements to existing account holders. This relies on the ePrivacy Directive Art. 13(2) "soft opt-in" exemption for similar products marketed to existing customers, and includes a clear way to opt out in every message.
We do not sell or share your email address with third parties for their own marketing purposes.
To stop receiving non-transactional emails, reply "no thanks" to any message or email hello@nomn.jp. We will permanently suppress your address from future non-transactional sends. Transactional emails (license delivery, password resets, purchase receipts) continue to be sent for as long as you have an active account, since they are necessary to deliver the service.
A separate Legitimate Interest Assessment for the service-related and product-update categories is kept on file.
--
## Third-Party Processors
We share personal data with the following services only as necessary to operate NOMN:
- Stripe (stripe.com) — payment processing. Receives your email and payment details during checkout. See Stripe's privacy policy at stripe.com/privacy.
- Brevo (brevo.com) — email contact management. Receives your email address upon registration. See Brevo's privacy policy at brevo.com/legal/privacypolicy.
- Umami (umami.is) — website analytics. Does not receive personal data. See umami.is/privacy.
We do not sell, rent, or share your personal data with any other third parties.
--
## Data Retention
We retain your account data for as long as your account is active. Purchase records and license keys are retained indefinitely to support ongoing license verification and customer support.
You may request deletion of your account and associated data at any time by emailing hello@nomn.jp. We will process deletion requests within 30 days.
--
## Your Rights
Under GDPR (EU/EEA residents):
You have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with your local data protection authority. To exercise any of these rights, email hello@nomn.jp.
Under APPI (Japan residents):
You have the right to request disclosure, correction, addition, deletion, or cessation of use of your personal information. You also have the right to request cessation of provision to third parties. To exercise these rights, email hello@nomn.jp.
For all users:
You may request a copy of all personal data we hold about you, or request full deletion of your account and data, by emailing hello@nomn.jp.
--
## Children
NOMN is not directed at children under 16. We do not knowingly collect personal data from children.
--
## Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance.
--
## Contact
POLYTOPE KK
Tokyo, Setagaya City, Daita, 5 Chome-34-17
hello@nomn.jp
Last updated: May 21, 2026