Privacy Policy
Who we are
This site, tuffnerds.net, is operated by Philipp Thioune, trading as Tuff Nerds, an independent creator based in Japan, who is the data controller for personal data processed through it. For any privacy question, email support@tuffnerds.net.
What we collect
- Information you give us. Your email address and message when you contact support. If you send feedback or a bug report, also your name, the DAW and operating system you use, your LEADR version, a rating, your Instagram handle if you add one, and any screenshots or diagnostic log you attach. If you ask for trial links, your email address. If you sign our Creator Agreement, the details listed under “Creator agreements” below.
- Purchase data, handled by our payment provider (see below). We receive order confirmation details, not your full card number.
- Basic technical data, standard server logs (such as IP address, browser type, and pages requested) that our host records to keep the site secure and working. The other services listed below also receive your IP address and browser information when your browser loads something from them.
- Choices stored in your browser. We store your cookie choice, and on the beta page which test boxes you ticked, in your browser's local storage. This stays on your device and is never sent to us. Clearing your site data removes it.
How we use it
To deliver and support your purchases, answer your messages, fix bugs you report, send the emails you asked for, keep the site secure, measure our advertising and see how the site is used where you allow it, and meet our legal obligations. We do not sell your personal information, and we do not make automated decisions about you.
Where the GDPR applies, we rely on performing our contract with you (orders, downloads and support), your consent (the advertising pixel, analytics, email updates, published reviews and loading a video), and our legitimate interest in keeping the site working and secure.
Contact, feedback and bug reports
Our contact, feedback and bug report forms are handled by Netlify Forms (Netlify, Inc., United States), which also hosts this site. What you submit, including any screenshot or diagnostic log you attach, is stored in our Netlify account and emailed to us at support@tuffnerds.net. We use it to answer you and to fix the problem you reported.
Creator agreements
If you make content for us and sign our Creator Agreement, we receive what you enter on the signing form: your name, Instagram handle, email address and country; your postal address and business name if you add them; how you want to be paid and, if you add them, your payment details (for example your PayPal email or bank account); the deal we agreed and the time you signed. The form is handled by Netlify Forms like our other forms: what you submit is stored in our Netlify account and emailed to us at support@tuffnerds.net.
We use these details to carry out the agreement: to pay you, keep our records and credit you, and we use your payment details only to pay you. As the agreement says, we also use your name, handle, image and voice as they appear in your content to promote LEADR, including in ads on Meta's platforms. Where the GDPR applies, the legal basis is performing our contract with you. Your payment details also go to the payment service you choose (PayPal, Wise or your bank). We keep the signed agreement and the payment records while the agreement runs and afterwards for as long as tax and accounting rules require.
Public reviews
If you choose to leave a public review of LEADR (rather than private feedback) and tick the consent box on the review form, we publish your review on tuffnerds.net together with the name you entered, and we may show which DAW you use and the Instagram handle you gave. We do not publish your email address or any other contact details.
Publishing your review is based on your consent, which you give by ticking that box. It is entirely voluntary, you can send feedback privately instead, and leaving a review is never a condition of buying or using LEADR. You can withdraw your consent and have your review removed at any time by emailing support@tuffnerds.net, and we will take it down promptly.
Email updates
If you give us your email address to get the LEADR trial links, we add it to our mailing list, which runs on Mailchimp (Intuit Inc., United States). You receive your trial links and occasional news about LEADR, such as a new version or a tutorial. This is based on your consent, and you can withdraw it at any time using the unsubscribe link in any of those emails or by emailing support@tuffnerds.net. We keep your address on the list until you unsubscribe.
Payments and downloads
Purchases are sold and processed by Moonbase, our merchant of record. Your payment details are entered with and handled by Moonbase (and its payment partners) under their own privacy policy; we do not receive or store your card data. We receive order confirmation details needed to deliver your product and provide support.
On our product pages Moonbase's storefront script loads so the buy buttons and checkout work, and your LEADR downloads are served from Moonbase's own systems. In both cases your IP address and browser information reach Moonbase.
Video
On our updates page and our LEADR pages the tutorial is click to play. We show a still image from our own server, and nothing at all is requested from YouTube until you press play. When you do, the player loads from youtube-nocookie.com (Google Ireland Limited), which then receives your IP address and browser information and may store data on your device. Pressing play is your consent to that; if you never press it, nothing is sent. One exception: on some LEADR pages, outside Europe (we go by your browser’s timezone, as for our cookie notice), the tutorial starts by itself, without sound, once you scroll to it, and the player then loads from youtube-nocookie.com with the same data going to Google. It doesn’t if you said no to cookies here, if your browser sends Global Privacy Control, or if Data Saver or reduced motion is on. Elsewhere on the site we only link to YouTube, and nothing is sent until you follow the link. See the Google Privacy Policy.
Cookies, local storage and other services
Apart from the Meta Pixel and PostHog described below, this site sets no cookies of its own. Besides our host, our payment provider and the services already named, your browser loads our web fonts and, on some pages, a 3D graphics library from outside providers, which receive your IP address and browser information.
Advertising (Meta Pixel)
We use the Meta Pixel (Facebook Pixel), provided by Meta Platforms Ireland Ltd., to measure whether our Facebook and Instagram ads lead to visits and purchases, to improve those ads, and to show them to people who have visited our site. When the pixel is active it sets cookies (such as _fbp and _fbc), and events like page views and completed purchases (including the order value) are shared with Meta, which may process this data in the United States.
If you are in the EU, EEA, United Kingdom or Switzerland, the pixel loads only if you accept it in our cookie banner. That is based on your consent (Art. 6(1)(a) GDPR). If you decline, the pixel is not loaded and nothing is sent to Meta.
Elsewhere, the pixel is active by default and you can switch it off at any time. That is based on our legitimate interest in measuring and improving our advertising (Art. 6(1)(f) GDPR where it applies).
Either way you can change your choice whenever you like using the Cookie settings link in our footer, or by clearing this site's cookies in your browser. We also honour the Global Privacy Control browser signal: if your browser sends it, the pixel stays off without you having to do anything. You can read how Meta handles data in the Meta Privacy Policy.
Analytics (PostHog)
We use PostHog, provided by PostHog Inc. (United States), to see how visitors use this site: which pages they view, what they click, how far they scroll and how long a page stays open. PostHog also records sessions, replays of how a page was used, in which anything typed into a form is hidden. We do not send PostHog your name or email address. Like the other services here it receives your IP address and browser information, and it stores a cookie and a local storage entry (both starting with ph_) to recognise a returning browser. Our PostHog data is stored in the United States.
We also use PostHog to compare versions of our LEADR sales page. If you arrive from one of our ads, you may see one of two versions, and a cookie named tn_ab remembers which one for 30 days so you get the same page when you come back.
If you are in the EU, EEA, United Kingdom or Switzerland, PostHog loads only if you accept it in our cookie banner, and you are never part of the page comparison. That is based on your consent (Art. 6(1)(a) GDPR). Elsewhere, PostHog is active by default and you can switch it off at any time. That is based on our legitimate interest in improving our site and our offer (Art. 6(1)(f) GDPR where it applies). The Cookie settings link in our footer and the Global Privacy Control signal switch it off just as they do the Meta Pixel.
PostHog keeps session recordings for 30 days and the other analytics data for one year.
Where your data goes
We are based in Japan, and the providers above are in Japan, the European Union and the United States. That means your data may be transferred outside your own country, including to the United States. Each provider sets out in its own privacy terms the safeguards it uses for those transfers, such as the European Commission's standard contractual clauses. If you would like to know which provider handles a specific piece of your data, email us and we will tell you.
Data retention
We keep personal data only as long as needed for the purpose it was collected, then delete or anonymize it. In practice: order records for as long as tax and accounting rules require; support messages, feedback and bug reports for as long as we need them to help you and to fix the problem; your email address on our mailing list until you unsubscribe; analytics data in PostHog for up to one year (session recordings for 30 days); a published review until you ask us to take it down.
Your rights
Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you, to receive a copy of it, to object to or restrict certain processing, and to withdraw a consent you gave us (which does not affect what we did before you withdrew it). To make a request, email support@tuffnerds.net and we'll respond within a reasonable time.
If you are in the EU, EEA or the United Kingdom, you also have the right to complain to your local data protection authority. If you are in Japan, you may contact the Personal Information Protection Commission.
Changes
We may update this policy from time to time. The current version always lives on this page, with the date it was last changed shown at the top.