Legal

Privacy policy

What we collect, why, and what you can do about it. Last updated September 23, 2026.

Who we are

jelly.audio and the PhaseLock plugin are run by Thomas Dulin, a sole proprietor in Tennessee, USA ("we", "us"). This policy covers the jelly.audio website, PhaseLock trials, purchases and licensing, and the emails we send.

What we collect

  • When you browse the site: a random visitor ID (see Cookies below), the pages you view, the site that referred you, campaign tags in the link you followed (such as utm_source), ad click IDs (such as Meta’s fbclid or Google’s gclid), the Meta and Google cookie IDs described below, and your approximate country. Whenever we have any of those ad identifiers for you, we also keep your latest IP address and browser user agent with them, so the ad platforms can match a later signup or purchase.
  • When you start a trial: your email address and the trial license key we issue you.
  • When you buy: Stripe processes your payment. We never see or store your full card number. Stripe tells us your email address, what you bought, the amount and currency, and the status of any subscription.
  • When you use the plugin: your license key, an identifier derived from your computer so a license can be tied to a set number of machines, the computer’s name, and the times it activates and checks in with our license server.
  • When you sign in to your account page: the sign-in link we email you and a session cookie that keeps you signed in.
  • When you email us: whatever you choose to include.

How we use it

  • To issue, deliver and verify trial and purchased licenses, and to let you manage your activations.
  • To email you your license key, and during a trial, a short series of tips and a reminder when it ends. Every non-essential email has an unsubscribe link.
  • To prevent abuse, such as one person starting many trials. Where we only need to recognize a repeat, we store a scrambled (hashed) version of your email or machine identifier rather than the original.
  • To answer support requests.
  • To understand which marketing brings people to PhaseLock, and to measure and improve our ads (see below).

Advertising and analytics

We use the Meta Pixel and Meta Conversions API, and Google’s advertising and analytics tags (Google Ads and Google Analytics). They tell Meta and Google when someone views a page, starts a trial or buys PhaseLock, so we can see which ads work and so the platforms can show our ads to people likely to be interested.

Along with those events we may send your IP address, browser user agent, the platforms’ own cookie IDs, a hashed form of our visitor ID, and your email address in hashed form. We send trial signups and purchases this way whether or not you came from an ad, and Meta and Google may match them to an account you have with them. They use this under their own privacy policies and may combine it with information they already have about you.

We do not sell your personal information for money.

You can limit this through Meta’s ad preferences and Google’s My Ad Center, by blocking third-party cookies in your browser, or with a content blocker.

Cookies and browser storage

  • jelly_vid: our random visitor ID, used for first-party attribution. Kept in a cookie for 90 days (renewed on each visit) and in your browser’s local storage.
  • jelly_first and jelly_last (local storage): the campaign that first and most recently brought you to the site.
  • jelly_purchased (local storage): stops a purchase from being counted twice if you reload the page.
  • pl_session: keeps you signed in to your account page.
  • _fbp and _fbc: set by the Meta Pixel.
  • _ga, _ga_* and Google Ads cookies: set by Google’s tags.

Who we share it with

We don’t share your information except with the services that run jelly.audio and PhaseLock, each only for the job it does for us:

  • Cloudflare: website hosting, our license server and part of our database.
  • Supabase: our license and purchase database.
  • Stripe: payments.
  • Resend: sending license and trial emails.
  • Meta and Google: advertising measurement, as described above.

We may also disclose information if the law requires it, or to protect our rights or the safety of others.

How long we keep it

We keep license and purchase records for as long as your license exists and as long as tax and accounting rules require. We keep everything else only as long as we need it for the purposes above. Your data is stored and processed in the United States.

Your choices

You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing hello@jelly.audio. We will reply within 30 days. If we delete your data we may no longer be able to verify a license you bought, so tell us if you want to keep it. You can unsubscribe from trial and marketing emails at any time with the link in each one.

Security

We use encrypted connections, keep access to our systems limited, and hash data where we don’t need the original. No system is perfectly secure, but we take reasonable steps to protect your information.

Children

jelly.audio is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, email us and we will delete it.

Changes

If we change this policy, we will update the date at the top of this page. If a change materially affects how we use information you have already given us, we will email you before it takes effect.

Contact

Questions or requests about your data: hello@jelly.audio. Thomas Dulin, jelly.audio, Tennessee, USA.