Legal

Privacy

Last updated: 25 August 2026

The application collects nothing

Queue Up makes no network connections whatsoever. No account, no sign-in, no analytics, no telemetry, no crash reporting, no update check. Your audio files, playlists, pad assignments and settings stay on your own machine, in your user folder, and the application has no way to send them anywhere.

This is a deliberate design decision, not an oversight. A venue with no wifi is a normal working environment, and software that needs the internet to play a file is software that will one day fail in front of an audience.

What this website stores

The waiting list. If you join it, we store your name (if you gave one), your email address, which version you are waiting for, the optional role you chose, the optional note you wrote, and the date. It is used to tell you when that version is ready. It is never sold, rented or shared, and you can have it deleted by asking.
Customer contact details. When you buy, we keep your name and email address, and a record of what you bought. Two reasons, both of them practical: so we can support you and reissue a lost licence key, and so we can tell you about updates, new versions and anything that matters — a security problem, say, or a version that will not run on next year’s operating system.
The same applies if we issued your license directly rather than through the shop — a review copy, a prize, a replacement, or a sale we invoiced you for. There is no order behind those, so the record we keep is the licence itself alongside your name and email; without it we could not give you yours again if you lost it. Ask and we will delete it, which does not affect your licence — it carries on working, because the application verifies it offline and never checks with us.
Our lawful basis is legitimate interests: you bought software from us, and people who own software expect to hear when it changes. Every message carries an unsubscribe link, and unsubscribing stops all of it immediately. We do not advertise anyone else’s products to you, ever.
Your currency and Amazon-store preference. Stored in your own browser (localStorage), never sent to us.
Which pages get visited, through Google Analytics. It records the page you are on, roughly where in the world you are, and what kind of browser and device you use, and sets cookies to tell one visit from the next. It is how we know which parts of this site are worth writing more of. It is never linked to your name, your email address or any order, and never used to advertise to you. Whether you are asked first depends on where you appear to be, and we would rather say so plainly than leave you to work it out. In the United Kingdom, the European Economic Area, Switzerland and anywhere else we cannot place with confidence, you are asked before anything loads, and nothing is loaded from Google unless you accept — refuse and no analytics script runs and no analytics cookie is set, on that visit or any later one. Everywhere else it loads without asking, which is what the law there allows, and you can switch it off at any moment with at the bottom of every page. Switching it off takes effect immediately, lasts, and can be reversed the same way. We work out which of those you are in from your browser’s own timezone setting, read on your machine — we do not look your address up anywhere, because asking a third party where you are in order to decide whether to measure you would be its own intrusion. Google process what is collected on their own terms as well as ours — policies.google.com/privacy. Your answer is kept in your own browser’s local storage rather than in a cookie, so a refusal costs you nothing and never reaches us; clearing your browser data resets it.
Nothing else. Apart from the analytics above there are no advertising pixels and no other tracking on this site. The only other cookie we ever set is the admin session, which only exists for the site’s owner.

Videos

The videos are hosted on YouTube, and an ordinary embed would contact Google on every page it appeared on whether or not you watched anything. So nothing is loaded from YouTube until you press play. Until then a video is a still picture served from this site and a play button — no embed, no script, no cookie, no request of any kind.

Press play and the player loads from youtube-nocookie.com, Google’s reduced-tracking domain. From that moment Google’s own privacy policy applies to the player, and they will know you watched. That is your decision to make, which is why it is a button rather than something that has already happened by the time the page finishes loading. The player also says so on the page, above the button.

When you buy

The payment is processed by PayPal. We are the seller, so the purchase record is ours: your name, email address, what you bought, the country — and, in Canada, the province — you bought from, the tax charged, and your licence key. Your card details never reach this site; PayPal handles those under their own privacy policy.

We keep the country and province because the tax due depends on them and we have to be able to show why we charged what we charged. For the same reason we record the country your browser appeared to be in alongside the billing country you gave, so the two can be compared — tax authorities expect a seller to hold more than the buyer’s word for where they are. It is kept with the order, used for nothing else, and never used to profile or target you.

Amazon links

The hardware recommendations on our remote guide are Amazon affiliate links. Following one takes you to Amazon, who will know you came from here and may set their own cookies under their own policy. We receive aggregate commission reports — never anything that identifies you.

Email

Support email is ordinary email, stored in an ordinary mailbox. Waiting-list mail goes out with an unsubscribe link, and replying “stop” to anything works just as well.

How it is kept

Both lists live in a private database that only the site owner can reach, behind a password. There is no public page or address anywhere on this site that will return anyone’s details. Nothing is copied into an advertising platform, a customer-relationship tool, or anybody else’s mailing service.

We keep customer records for as long as you own the software, because a licence you bought in 2026 may still need reissuing in 2031. Waiting-list entries are removed once that version has shipped and been announced.

AI, and what is not done with your data

Nothing you give this site is used to train AI models, by us or by anyone else. Email addresses, waiting-list notes, support messages and customer records are not sold, rented, shared for anyone else’s marketing, or fed into a model as training data.

AI tools were used in building the software and this site, which is stated in the website terms — that is about how the product was written, not about your data. If an AI tool is ever used to help answer support email, your message is not added to anyone’s training set, and a person reads and sends the reply.

Who is responsible, and who else is involved

This site is run by a sole proprietorship in Florida, United States — Boris Cherniak, contactable at support@quppro.com. Where European or British data protection law applies, that is the data controller. There is no data protection officer, because the scale of this does not require one.

Which law applies depends on where you are, and we have not used that as an excuse to do less. The United States has no general federal privacy law of the kind Europe has, and the state laws that do exist — Florida’s included — set revenue thresholds far above a one-person business. So almost nothing here is legally required of us. It is done anyway, and the rights below are offered to everybody rather than only to the people who can demand them.

If you are in the United Kingdom or the European Economic Area, UK GDPR and the GDPR apply to us because we offer goods to people there, and you have the full set of rights under them. Our lawful basis for the waiting list is your consent, and for customer records it is legitimate interests — telling somebody who owns the software about updates and anything urgent.

Only these third parties are involved at all, and none of them is given data for their own marketing:

PayPal — processes the payment. As a regulated financial business they decide their own purposes for payment data, so for the payment itself they are a separate controller, not our processor, and their privacy policy applies to it alongside this one. The purchase record itself is ours and is held under this notice — which is the change from how this used to work, when a reseller was the seller and held it instead.
The hosting and database provider — runs the site and stores the two lists on our instructions. That is a processor relationship, with the provider’s standard data processing terms in place.
The email provider we reply from.

We are in the United States, and most of these providers are too. So if you are in the UK or the EEA, your data is transferred outside it — to us as well as to them. Those transfers rely on the standard safeguards: UK/EU standard contractual clauses, or the UK Extension and the EU–US Data Privacy Framework where a provider is certified under it.

Asking for a copy, a correction, or deletion

You can ask what is held about you, ask for it to be corrected, ask for it to be deleted, object to it being used, or ask for a copy in a portable form. These are rights under UK and EU data protection law, and we extend them to everybody — you do not have to be in Europe to ask, and you will not be asked where you live. Email support@quppro.com from the address you signed up or bought with and say which you want. There is no form, no account to log into, and nothing to prove beyond that.

You will get a reply within 30 days and in practice within a few working days — there is not much to look through. Deletion means the record is removed rather than hidden. Two honest caveats: a record needed for a legal obligation (an invoice, for tax) has to be kept for as long as the law requires, and the payment record held by PayPal is theirs, so a deletion request for that goes to them as well.

If you are unhappy with the answer: in the UK, the Information Commissioner’s Office; in the EEA, your own country’s supervisory authority; in the United States, your state attorney general or the Federal Trade Commission, who police unfair and deceptive practices — including a business that does not do what its own privacy notice says. Please try us first, though — it is one person and it will be sorted out.

Data processing agreements

For almost everyone this is not needed, and here is why. The application processes nothing: it makes no network calls at all, so none of your files, track names, playlists or show data ever leave your machine and we never become a processor of anything belonging to you or to your organization. There is nothing for a data processing agreement to cover.

Where an organization buys licences, the only personal data we hold is the purchaser’s own contact details, and for those we are the controller rather than a processor. If your procurement process still needs paperwork — a signed DPA, a security questionnaire, a supplier form — email and it will be dealt with properly rather than ignored.