Privacy Policy

This policy explains what Preston Cotton, doing business as RawKey ("RawKey", "we") collects on rawkey.com and why. RawKey is responsible for your information (the data controller). We collect as little as we can to sell and deliver beats.

What we collect

• Order details: your name, email, the beat and license you bought, the amount, and your license number.
• Form submissions: what you send through the free beats, offer, contact, and service forms.
• Basic technical logs (IP address, browser) kept by our hosting provider for security and abuse prevention.
• Site analytics through Google Analytics 4, described below, unless you opt out.

We never see or store your full card number. Payment details go straight to Stripe.

How we use it

• To deliver your files, license, and receipts, and to re-send links when you ask.
• To answer your messages, offers, and service inquiries.
• To send new-drop emails if you joined the list. Every email has an unsubscribe option.
• To prevent fraud and handle refunds and disputes.

Who processes it

• Stripe: payments and fraud prevention.
• Supabase: our database and file storage.
• Mailgun: transactional and list emails.
• Vercel: website hosting.
• Google (Google Analytics 4): site analytics.

We do not sell your personal information.

Retention

We keep order records as long as needed for licensing, tax, and accounting. You can ask us to delete list and form data at any time.

Your choices

To access, correct, or delete your information, or to unsubscribe, email lord@rawkey.com.

Analytics (Google Analytics 4)

We use Google Analytics 4 to see which beats and pages people visit, so we can improve the store. It collects:

• Pages viewed on rawkey.com (the address without any query string), the page you came from, and time on the site.
• Approximate location (country and region) that Google works out from your IP address. Google Analytics 4 does not log or store IP addresses.
• General device information: device type (phone, tablet, desktop), browser, operating system, and screen size.
• Store actions: viewing a beat, adding to cart, starting checkout, and purchases. A purchase is sent with its amount and a random id, never your name, email, order number, or payment details.

We turned off Google signals, ad personalization, and advertising features, and granular location and device collection. Analytics data is kept for 2 months and then deleted by Google. We do not use it for advertising and we do not run ad tags. If we ever add ad measurement, it will only load after you explicitly allow it, wherever you are.

Analytics never runs on pages that can carry private details: download links, order confirmation, offers, account sign-in, unsubscribe, and admin pages.

How to opt out

• In the European Economic Area, the United Kingdom, and Switzerland (or if we cannot tell where you are), nothing loads until you click Allow on the banner. Decline keeps it off.
• Everywhere else, analytics is on by default. Click "Opt out of analytics" at the bottom of any page to turn it off.
• If your browser sends Global Privacy Control or Do Not Track, we treat it as an opt-out automatically and analytics does not load.
• Opting out stops Google Analytics, removes its cookies, and remembers your choice on this browser. The same link at the bottom of the page lets you opt back in.
• You can also use Google's browser add-on at tools.google.com/dlpage/gaoptout.

Cookies

• _ga and _ga_ followed by an id: Google Analytics 4, set only when analytics is on. They expire after up to 2 years unless you opt out.
• rk_consent: remembers your analytics choice for 1 year.
• rk_cr: notes whether your region needs a consent banner (yes or no only, no location), for 7 days.
• Stripe sets its own cookies on its checkout pages to process payments securely.

The store does not use advertising cookies.

Contact

Questions about privacy or analytics: lord@rawkey.com.