1. Who is responsible for your data
Laruny Music. Contact: contact@laruny.com.
This policy follows Colombian data-protection law (Ley 1581 de 2012 and Decreto 1074 de 2015) and gives buyers from the EU and the UK the same rights.
2. What I collect, and why
If you buy something
- Your email address, to send the download links and your PDF licence. Without it there is no way to deliver what you paid for.
- Your name, which goes on the licence contract, because a licence issued to nobody is worth nothing.
- The PayPal transaction number and what you bought, to prove the licence is yours if it is ever questioned, and to re-send the files if you lose them.
I never receive your card number, your CVV or your bank details. PayPal handles the payment end to end.
If you subscribe to the newsletter
- Your email address, to send the welcome coupon and, occasionally, new beats and packs. Every email has an unsubscribe link that works.
If you write to me
- Whatever you put in the message, kept only as long as it takes to answer you and to remember the conversation if you write again.
3. Cookies and advertising
I advertise this store on Meta (Facebook and Instagram), Google and TikTok. To know whether an ad actually sold anything — instead of guessing — those platforms place cookies in your browser and receive a signal when you view a beat, add one to the cart, or buy.
Nothing loads until you agree
The first time you visit, a small notice asks. Until you press Accept, not one advertising script is downloaded. Not Meta's, not Google's, not TikTok's. If you press Only what's essential, they are never loaded at all, and the store keeps working exactly the same — the cart, the player, the lyrics editor and the checkout never needed them.
Changed your mind? Clear this site's data in your browser and the notice comes back.
What is placed, if you accept
- Meta Pixel — tells me an ad led to a sale, and lets me show an ad again to someone who looked at a beat and left. It does not tell me who you are.
- Google Analytics 4 and Google Ads — which pages get visited, which searches bring people in, which campaigns pay for themselves. IP addresses are shortened by Google before they are stored.
- TikTok Pixel — the same thing, for TikTok campaigns.
What these companies receive is the page visited, the product, the amount, and a device identifier. They never receive your name, your email or anything you typed — the site does not send it, and I have no way of linking a pixel to a person.
What is NOT here
No session recording. No heatmaps. No mouse or keystroke tracking. No data brokers. No selling of lists. No advertising inside this site — I sell beats, not your attention.
4. What stays inside your own browser
Some things are stored locally on your device, in what browsers call localStorage. They are not cookies, they are not sent to any server, and I cannot read them:
- Your cart, so it survives closing the tab.
- The lyrics you write in the lyrics editor, so you do not lose them.
- Your language choice, English or Spanish.
- Your answer to the cookie notice, so it does not ask you again.
Clearing your browser data deletes all of it. There is no copy anywhere else. These four are strictly necessary for the store to work, so they are not covered by the notice.
5. Who else sees your data
Only the services that make the store work, and only what they need:
- PayPal processes the payment. Their privacy policy governs what they do with it.
- The email provider sends the delivery email and the newsletter.
- The hosting provider serves the site and keeps standard server logs (IP address, time, page requested) for security. These are technical records, not a profile of you.
- YouTube and Spotify see nothing unless you press play on an embedded video or track. At that moment those companies see the request and apply their own policies. Nothing is embedded until you interact with it.
- Meta, Google and TikTok receive advertising signals, and only if you accepted the cookie notice. Section 3 explains exactly what.
Your data is never sold, rented, traded or handed to advertisers. There is no scenario in which that happens.
6. How long it is kept
- Purchase records and licences: as long as the licence is valid, plus the period accounting law requires. A licence you bought must stay provable.
- Newsletter: until you unsubscribe.
- Messages: up to two years.
7. Your rights
You can, at any time and free of charge:
- Know what data I hold about you.
- Correct anything that is wrong or out of date.
- Delete it, except the minimum needed to keep a licence you bought provable.
- Withdraw consent — for the newsletter with one click, and for the advertising cookies by clearing this site's data in your browser.
- Get a copy of your data in a readable file.
Write to contact@laruny.com. I answer within 10 business days at the latest, usually the same day. If you are in Colombia and you are not satisfied with my answer, you may file a complaint with the Superintendencia de Industria y Comercio.
8. Security
The site runs over HTTPS. Download links are unique and expire. Payment data never touches my systems because it never enters them. That said, no system on earth is perfectly secure, and I will not pretend otherwise. If a breach ever affected your data, I would tell you.
9. Children
This store is not aimed at anyone under 18 and I do not knowingly collect data from minors. If you believe a child has sent me personal data, write to me and I will delete it.
10. Changes
If this policy changes in a way that matters, the date at the top changes and — if you are on the newsletter — you get an email about it.