Privacy Policy
Version of 30 October 2026
This policy explains what personal data ModFab Studio and the ModFab account use, why, and what you can do about it. In short: your projects and your sound stay on your computer, we keep only what the account needs, and there is no advertising or tracking.
1. Who we are
ModFab Studio and modfab.app are run by Mike Gazzaruso, publishing as NextEpochs (“we”, “us”). We are the controller of the personal data described here. For anything about privacy, write to privacy@nextepochs.com.
2. What stays on your computer
Your plugin projects, the sounds, pictures and fonts you use in them, and the plugins you build are kept on your computer. Studio does not send them to us. Studio contacts our server (api.modfab.app) only to sign you in, to renew your plan’s licence on your computer (about once a day) and to manage the computers you use.
When you choose a Google font in Studio, the font list and the font files are downloaded from Google Fonts, and Google receives your computer’s internet address. Google’s own privacy policy applies to that.
3. What we keep about your account
- Your email address, to identify your account and send you sign-in codes.
- Your name or brand, if you give it.
- The version of the Terms you accepted, and when.
- Your newsletter choice, and when you made it.
- Your plan and, for paid plans, its end date.
- The computers you use Studio on: the computer’s name as set on it, when it was first and last used, and a one-way code made from its hardware identifier. We never receive the hardware identifier itself.
- Sign-ins: when each one started and was last used. The key Studio uses to stay signed in is stored by us only in a scrambled form that cannot be turned back into the key.
- Sign-in codes, in a scrambled form, for at most 10 minutes. A code is deleted as soon as it is used.
4. Server logs
Our web server records the internet address, time and requested page of each visit to modfab.app and api.modfab.app, to keep the service safe and fix problems. These records are deleted automatically after 14 days. The logs of the account service itself do not contain internet addresses.
5. Why we use your data
- To give you the account and Studio’s features: signing in, your plan, the licence on each computer. This is needed to provide the service you asked for (GDPR Article 6(1)(b)).
- To keep the service safe and fair: limits on how many codes can be requested, refusing temporary email addresses, the limit of three computers per account. This is our legitimate interest in preventing abuse (Article 6(1)(f)).
- To show which Terms you accepted, should a question ever arise (Article 6(1)(f)).
- To send you news about ModFab, only if you said yes (Article 6(1)(a)). You can change your mind at any time in Studio’s Settings.
We do not sell your data, show advertising, or use analytics or tracking services.
6. Where your data is
On our own server, in a data centre of Hetzner Online GmbH in Helsinki, Finland, inside the European Union. Hetzner provides the server and does not use your data for its own purposes. Emails come from our own mail server on the same machine.
7. How long we keep it
As long as you have an account. When you delete your account in Studio’s Settings, your account, its sign-ins and its computers are deleted straight away. Server logs are deleted after 14 days as described above.
8. Your rights
You can ask us to show you, correct, delete or hand over your data, to limit what we do with it, or object to it, and you can withdraw your consent to the newsletter at any time. Write to privacy@nextepochs.com. You can also complain to a data protection authority, in Italy the Garante per la protezione dei dati personali, or the one where you live.
9. Children
ModFab is not meant for children under 14. If you are younger, please do not create an account.
10. Changes
If this policy changes, we publish the new version here with its date. If the change matters for your account, Studio tells you the next time you sign in.