Privacy

What we collect, why, and who else sees it.

Last updated 25 October 2026

The short version. Boxed Ear sets no cookies for ordinary browsing, runs no analytics, and carries no advertising or tracking pixels. We collect what we need to take an order, give you your downloads, answer your email and send the newsletter you asked for — and nothing else.

Who we are

Boxed Ear Ltd., a company registered in England and Wales, is the data controller for this website. For anything in this policy, email info@boxedear.com or use our contact form.

Buying something

Our shop runs on FastSpring, who are the merchant of record. When you buy, FastSpring takes the payment and holds your billing details. We never see or store your card details. We read your order history from FastSpring's system when you sign in to your account — your name, email address and what you bought.

Your account

There is no password. You enter your email address and we send you a sign-in link that works once and expires after 15 minutes. If it works, your browser keeps a sign-in cookie for 30 days, and the server keeps a file recording that the session belongs to your email address. Signing out deletes it. We also keep short-lived counters against your email address and IP address to stop someone spamming sign-in emails.

Downloads

Your files are served through a temporary link that stops working after 30 minutes. Nothing about the download is recorded beyond our host's ordinary web server logs.

The newsletter is run through Mailchimp. We store the email address and first name you give us, and nothing else. You only receive it if you ask for it, and every email has an unsubscribe link that removes you immediately. Mailchimp records whether emails are opened and links clicked.

Contact form

The contact form is delivered by Formspree, which forwards your name, email address and message to us by email. We keep the email for as long as it is useful to the conversation.

Showing prices in your currency

So that prices appear in pounds, euros or dollars, your IP address is sent to ipapi.co, which replies with a country. The answer is kept in your browser for the current tab only and is forgotten when you close it. No identifier is stored and nothing is sent back to us.

Audio and video previews

Demos are hosted by SoundCloud, and some product videos by YouTube (using their no-cookie domain). Nothing is requested from either until you interact with the page — if you arrive and leave, they are told nothing at all. Once a player loads, that provider receives your IP address and applies its own privacy policy.

Private listening links

If we have given you a personal password for a private listening page, that area records the name the password belongs to, the time, your IP address, your browser, and which tracks were played. This is so we know whether material we have shared before release has been listened to, and it applies only to the handful of people given a link.

Cookies and local storage

We set no cookies for ordinary browsing of this site. Two things are stored in your own browser and never sent to us:

your shopping cart, stored by FastSpring so it survives moving between pages;
your detected currency and the position of a demo you were playing, both cleared when you close the tab.

Cookies are used only after you sign in — to the account area or a private listening page — to keep you signed in. There are no analytics, advertising or tracking cookies, which is why this site has no cookie banner.

Who else sees your data

Only the services above, each for the one job described: FastSpring (payments and orders), Mailchimp (newsletter), Formspree (contact form), ipapi.co (currency), SoundCloud and YouTube (previews), and SiteGround, who host the site. We do not sell, rent or trade your details to anyone, ever.

How long we keep things

Order records are kept for six years, because UK tax law requires it. Newsletter details are kept until you unsubscribe. Sign-in links last 15 minutes, sessions 30 days, and anti-spam counters a few hours. Everything else is kept only while it is being used.

Your rights

Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct or delete it, ask us to stop using it, or withdraw consent you have given. Email info@boxedear.com and we will deal with it within a month. If you are not happy with how we respond, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, the date at the top changes with it. There is no archive of old versions; if a change matters to you, the newsletter is where we would mention it.