Privacy Policy

What we collect

Order history

FreshlyVault contains records of orders you have placed with Freshly Squeezed Samples, going back over a decade. Each order record includes the PayPal account email attached to the payment (which may differ from the email you used to register on the old website — we only have what PayPal sent us), the name on the PayPal account, the products purchased, the PayPal transaction reference, the purchase date, and the licence terms in force at that time.

Lookup logs

To protect against abuse, we keep a short log of lookup activity. Each row stores:

• A timestamp of the attempt and whether it succeeded.
• The year and product you submitted — these are not personal data and are kept readably so we can spot enumeration attacks (e.g. many attempts for the same year+product across different emails).
• A one-way hash of your email using a server-side secret. We do not retain the plaintext email here. The hash lets us count repeated failed attempts against the same address (a brute-force signal) without storing the address itself.
• A one-way hash of the requesting IP. We do not retain readable IPs.
• On success only, a reference back to the matched customer record — that record holds the plaintext PayPal email (you supplied it at purchase time, separately from this lookup).

Logs are automatically deleted after 90 days.

Cookies

FreshlyVault does not use cookies for the customer-facing pages. We do not use third-party advertising or tracking cookies.

How we use it

• To deliver downloads to the original purchaser.
• To prove that an order took place (e.g. when you sign a track and need to demonstrate licence ownership).
• To prevent and investigate abuse of the lookup form.
• To comply with legal obligations (e.g. tax records, fraud investigations).

How we share it

We do not sell your personal data. We share it only with:

• Hosting providers — to operate this site.
• Cloudflare and our file-delivery CDN — to serve download requests and protect the service from abuse.
• Legal authorities — where we are required to by law.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data. To exercise any of these rights, get in touch. Please note that if you ask us to delete your order records, we may lose the ability to verify proof of purchase for any tracks you have already signed using our products.

Retention

We retain order records indefinitely, because customers may need to demonstrate proof of purchase years after a track is signed. Lookup logs (timestamps + hashed IPs + hashed emails) are kept for up to 90 days for abuse-prevention purposes, then automatically purged.

Contact

Questions or requests: drop us a message.