Privacy.

Who is responsible

The controller of the personal data described here is Rudi Rok, who makes Sample Life and answers its support email. “We” in this notice means Rudi Rok and Sample Life.

Controller: Rudi Rok. Email: support@rudirok.com.

On your device

Sample Life runs in your browser. Recording, uploading, analysing, arranging and exporting all happen on your device. The camera and microphone are used only after you press record, and recordings stay in your browser.

To bring your work back when you return, the app stores it in your browser’s own storage (IndexedDB and localStorage) on that device:

• your projects and My mixes, the clips in them (as audio data and, for video clips, the original file) and your settings;
• your plan: for This mix, a signed pass with a random project reference and the checkout reference; for Pro, a signed pass with Stripe’s subscription and customer references and an expiry time.

This storage is not a cookie and is not sent anywhere on its own. The plan pass leaves your browser only when you buy, restore or manage a plan, or when the app checks Pro (see Plan checks). You can delete everything by clearing the site data for Sample Life in your browser. That also removes your projects and the This mix unlock.

Visiting the site

The site has no analytics, advertising pixels or embedded content from other services, and it sets no cookies. Fonts and images come from the site itself.

It is hosted by Netlify, Inc. in the United States. When your browser asks for a page, a file or one of the site’s functions, Netlify receives the technical data every request carries: your IP address, the address requested, the time, your browser and device type and the page you came from. Netlify uses it to deliver and protect the site and may keep it in server logs. The legal basis is legitimate interest (GDPR Article 6(1)(f)): a website can’t be delivered or protected without it. We don’t use it to identify visitors.

Buying a plan

Purchases happen on a checkout page run by Stripe (Stripe Payments Europe, Limited in Ireland, with Stripe, Inc. in the United States), not on this site. The checkout collects your email address, name, billing country or address, card details and your answer to the withdrawal box, along with technical data such as your IP address and device. Stripe uses this to take the payment, calculate VAT, prevent fraud and handle refunds, and saves the buyer details as a customer record on the seller’s Stripe account. Stripe’s pages set their own cookies.

Stripe processes this data for the seller. For some purposes, such as fraud prevention and its own legal duties, Stripe acts as a separate controller under Stripe’s privacy policy. If you choose to save your details with Link, Stripe’s quick checkout, Link’s own terms apply.

What the seller sees

The order in Stripe shows your email address, your name, your billing country or address, what you bought and when, the amount and VAT, that you ticked the withdrawal box and, for This mix, the random project reference. The seller never sees your full card number, and never your sounds or mixes.

These details are used to give you the plan, send your order confirmation, keep the accounting records, answer support requests and handle refunds or disputes. The legal bases are the purchase contract (GDPR Article 6(1)(b)), legal obligations under consumer and accounting law (Article 6(1)(c)) and legitimate interest in handling disputes (Article 6(1)(f)). You don’t get marketing email.

You need to give these details to buy a plan. Without them the purchase can’t be made.

Plan checks

After payment Stripe sends you back to Sample Life with the checkout reference in the address. The app sends it to a small function hosted by Netlify, which checks the order with Stripe and returns your signed plan pass. The app then removes the reference from the address.

For Pro, the app sends its pass to the same functions about once an hour while you use it, so they can check with Stripe that the subscription is still active, and when you open Manage subscription. The functions keep nothing: Stripe is the record. The legal basis is the purchase contract (Article 6(1)(b)).

Emails

We send emails through Resend (Resend, Inc. in the United States):

• Order confirmation after each purchase. It holds your order details and the withdrawal confirmation. Consumer law requires it (Article 6(1)(c)). Stripe also emails you a receipt.
• Restore Pro link, only when you ask for it. We look the address up in Stripe and, if it has an active Pro subscription, email it a link. The page answers the same either way, so it can’t be used to find out who has Pro. The legal basis is your request under the purchase contract (Article 6(1)(b)).

Emailing support

If you email support@rudirok.com, we receive your email address, your name if you include it and what you write. We use it only to answer you and deal with your request. The legal basis is legitimate interest in answering you, or the purchase contract when your question is about a purchase. Our email provider stores the messages for us.

Who else gets data

Personal data goes only to the services named here: Netlify for hosting and the plan functions, Stripe for payments, Resend for emails and our email provider for support email. Personal data is not sold or shared for advertising.

Netlify, Inc., Stripe, Inc. and Resend, Inc. are based in the United States. For transfers from the EU they rely on the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses.

How long data is kept

• On your device: until you delete it or clear the site data.
• Server logs: by Netlify under its own retention rules.
• Emails we sent: Resend keeps a record under its own retention rules.
• Order details in Stripe, including the withdrawal box and the confirmation record: as long as accounting law requires. In Finland that is six years from the end of the year in which the financial year of the purchase ends; then the customer record is deleted. Stripe also keeps what its own legal duties require.
• Support email: until your request and any follow-up are dealt with, then deleted.

Your rights

You can ask for a copy of your personal data, for corrections, for deletion where no legal duty requires keeping it, for restriction of its use, and for a machine-readable copy of the data you gave for a purchase. You can object to any use based on legitimate interest. Email support@rudirok.com; you’ll get an answer within one month.

For data Stripe uses as a separate controller, you can also contact Stripe directly. If you think your data is handled unlawfully, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or the data protection authority where you live.

Contact

Questions about privacy: support@rudirok.com. If this notice changes, the date at the top changes too. Purchase terms: Terms.