Effective date: 12 October 2026
This policy explains what personal data Minta Foundry KLG ("we", "us") processes when you visit www.mintafoundry.com, buy or download our products, create a customer account or sign up for our newsletter, and what rights you have. It is written to meet the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU/EEA General Data Protection Regulation (GDPR).
1. Who is responsible
Minta Foundry KLG
Irgelstrasse 7, 8135 Langnau am Albis, Switzerland
Email: yo@mintafoundry.com
Our shop runs on Moonbase (Moonbase AS, Utsikten 6, 3718 Skien, Norway). Moonbase sells our products to you as an authorised reseller and merchant of record: it takes your payment, issues the receipt and handles sales tax/VAT, refunds and chargebacks. For the order, payment and tax records Moonbase is a separate controller under its own privacy policy. For everything else (your customer account, licences, downloads, device activations and our emails) Moonbase processes data on our behalf, and this policy applies.
2. What we process and why
Visiting the website. When you open a page, our hosting and file delivery providers receive technical data your browser sends: IP address, date and time, page or file requested, referrer, browser and operating system. This is needed to deliver the site and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). These logs are kept by the providers for a short period (usually no more than 30 days) and are not used to identify you.
Buying a product. At checkout you give your name, email address, billing country/address and payment details. Payment details go directly to Moonbase's payment providers (such as Stripe and PayPal); we never see your card data. We receive the order: who you are, what you bought, the price, discounts and the order status. We use it to deliver your products, provide support and keep our accounting records (contract and legal obligation, Art. 6(1)(b) and (c) GDPR). Business records are kept for 10 years as required by Swiss and EU accounting and VAT rules.
Customer account and licences. Your account holds your name, email address, a password (stored only in hashed form by Moonbase), your purchases, licence keys, downloads and the devices on which you have activated a plug-in (device name and identifier, activation date and the IP address used). We use this to let you download what you own, activate and manage plug-ins, and prevent licence abuse (contract and legitimate interest). We keep account data for as long as your account exists. You can ask us to delete your account at any time; purchase records we must keep for accounting are retained until the legal period ends.
Newsletter and product updates. If you subscribe, we use your email address (and your name, if you give it) to send you news about new packs, deals and free stuff. Sign-up uses a double opt-in: you only receive the newsletter after confirming the link we email you. Our legal basis is your consent (Art. 6(1)(a) GDPR). Customers may also receive updates about plug-ins they own. You can unsubscribe from either with the link in every email or in your account settings, and we stop using your address for that purpose. Emails are sent through Moonbase.
Contacting us. If you email us, we use your message and contact details to answer you (legitimate interest, or contract if it concerns a purchase) and delete the correspondence when it is no longer needed.
Website analytics (only with your consent). With your consent we use Google Analytics 4 (Google Ireland Limited / Google LLC) to understand how visitors use the site: pages viewed, time on page, approximate location (country/city), device and browser type, and how you arrived. Google Analytics sets cookies for this (see section 5). IP addresses are not stored by Google Analytics 4. We have no Google advertising features enabled. Our legal basis is your consent (Art. 6(1)(a) GDPR); without it, Google Analytics is not loaded. You can withdraw your consent at any time with the "Cookie settings" link in the footer. Analytics data is deleted after 14 months.
Embedded videos. Some pages contain YouTube videos (Google). They are only loaded after you click on them; at that point YouTube receives your IP address and may set cookies under Google's privacy policy.
Audio previews, images and downloads are delivered from our own domain via Bunny.net (BunnyWay d.o.o., Slovenia). Some code libraries are loaded from public content delivery networks (jsDelivr, unpkg, cdnjs by Cloudflare), which receive your IP address in order to deliver the files (legitimate interest in a fast, reliable site).
3. Who receives your data
We do not sell your data and only share it with service providers who help us run the shop, under data processing agreements or their own legal obligations:
- Moonbase AS (Norway): shop, checkout, customer accounts, licences, emails. Data is hosted with Amazon Web Services in Ireland (EU).
- Payment providers used by Moonbase (such as Stripe and PayPal): payment processing.
- Vercel Inc. (USA): website hosting.
- BunnyWay d.o.o. (Slovenia): delivery of audio, images and downloads.
- Google (Ireland/USA): Google Analytics (only with consent) and YouTube (only after you click a video).
- Public CDNs (jsDelivr, unpkg, Cloudflare): delivery of code libraries.
- Authorities and advisers (such as tax authorities or our accountant), where the law requires it.
4. Transfers abroad
Your data is mainly processed in Switzerland and the EU/EEA, which Switzerland recognises as providing adequate protection. Some providers (Vercel, Google, Stripe, PayPal, Cloudflare) may process data in the USA. Such transfers are based on the EU-U.S. and Swiss-U.S. Data Privacy Frameworks, where the provider is certified, or on the European Commission's standard contractual clauses (also recognised in Switzerland).
5. Cookies and browser storage
We only use what is needed for the shop to work, plus analytics if you allow it. Necessary storage stays in your browser and is never used for tracking:
- mf_cart_v2 (local storage): your shopping cart. Kept until you clear it or check out.
- moonbase_auth (local storage): keeps you signed in to your account. Removed when you log out.
- mf_last_email (local storage): fills in the email address you last logged in with on this device.
- mf_storefront (session storage): caches prices and what you own for faster pages. Removed when you close the tab.
- mf_consent (local storage): remembers your cookie choice for 12 months.
Only with your consent:
- _ga, _ga_<ID> (cookies, Google Analytics): distinguish visitors and sessions. Expire after 2 years.
- YouTube cookies: only set if you play an embedded video.
You can change your choice at any time with "Cookie settings" in the footer, and you can delete cookies and site data in your browser settings.
6. Your rights
You have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format and withdraw any consent at any time (this does not affect processing that happened before). To exercise these rights, email yo@mintafoundry.com; we may ask you to confirm your identity. You can also update your details and email preferences yourself in your account.
You can complain to a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch); in the EU/EEA, the authority in the country where you live or work.
7. Security
The site is only available over encrypted connections (HTTPS). Passwords are stored in hashed form, payment data is handled by certified payment providers, and access to customer data is limited to what we need to run the shop.
8. Other points
We do not use automated decision-making or profiling with legal effects. Our shop is not aimed at children under 16.
9. Changes
We update this policy when our shop or the law changes. The current version is always on this page, with its effective date at the top.
