PRIVACY POLICY WickedMP3 by CC Integrity LLC Last Updated: February 7, 2026 Effective Date: February 7, 2026 ═══════════════════════════════════════════════════════════════════════════════ I. INTRODUCTION CC Integrity LLC ("Company," "we," "us," or "our") operates wickedmp3.com and provides the WickedMP3 software application (the "Software" or "Engine"). This Privacy Policy explains our data collection, use, and protection practices. CORE PRINCIPLE: DATA MINIMIZATION We have architected WickedMP3 using a "privacy-first" philosophy. We do not collect, store, or process personal information beyond what is absolutely necessary to deliver the Software to paying customers. Most privacy policies explain how companies use your data. This policy explains why we don't have your data in the first place. ═══════════════════════════════════════════════════════════════════════════════ II. INFORMATION WE DO NOT COLLECT To be absolutely clear about our privacy stance, we affirmatively state what we DO NOT collect: 2.1 We Do Not Collect Usage Data - We do not track which audio files you play - We do not monitor your queues or usage patterns - We do not record how long you use the Software - We do not log when you open or close the application 2.2 We Do Not Use Analytics or Tracking - No Google Analytics or similar services - No tracking pixels or web beacons - No heatmaps or session recording tools - No A/B testing frameworks - No behavioral profiling or fingerprinting 2.3 We Do Not Collect Personal Information (From the Software) - No user accounts or login credentials - No demographic data (age, gender, location) collected by the Software - No social media integration or profile linking - No device identifiers or advertising IDs 2.4 We Do Not Access Your Audio Files - We cannot see the files you load into the Software - We do not scan, inventory, or catalog your audio library - We do not index or transmit file metadata (e.g., ID3 tags) - Your audio files never leave your device ═══════════════════════════════════════════════════════════════════════════════ III. INFORMATION WE DO COLLECT Our data collection is limited to the bare minimum required to process payments and deliver the Software. IMPORTANT DISTINCTION: While the Software itself does not transmit usage data, we collect Transactional Data (name, email, billing info) required for payment processing and license delivery. This data is decoupled from your actual usage of the Software. 3.1 Payment Information (Processed by Stripe) When you purchase WickedMP3, payment processing is handled entirely by our third-party payment processors (currently Stripe, Inc.). Information Collected by Stripe (Not by Us): - Credit card number and billing information - Email address (for receipt delivery) - Name (as it appears on payment method) - Billing address Information We Receive from Stripe: - Transaction confirmation (Success/Failure status) - Transaction ID (for refund processing) - Purchase timestamp We DO NOT receive, store, or have access to your full credit card number, CVV, or other sensitive financial details. Stripe handles all payment data in compliance with PCI-DSS standards. For details on how Stripe handles your payment information, see: https://stripe.com/privacy 3.2 Email Addresses (Transactional Only) Stripe collects your email address to send you a purchase receipt and deliver your Software license/download link. We DO NOT: - Add your email to marketing lists - Send promotional newsletters - Sell or share your email with third parties - Use your email for any purpose beyond transaction fulfillment You may receive: - Purchase confirmation email (from Stripe) - Software download link (one-time, delivered via Stripe) - Critical security updates (rare, only if a major vulnerability is discovered; delivered via Stripe's customer notification system) CLARIFICATION: We do not maintain a separate email database. All customer communications are routed through Stripe's platform, which acts as the data controller for email addresses. If Stripe is unavailable or we are legally required to maintain a backup contact list, we will update this policy accordingly. You will NOT receive: - Marketing emails - Feature announcements - Product upsells or cross-promotions 3.3 Transactional Data To process your purchase, our third-party payment processors (e.g., Stripe) collect billing information (name, email, billing address, last 4 digits of credit card). We retain a record of your license purchase (email and transaction ID) solely for support and license verification purposes. This Transactional Data is completely decoupled from your actual usage of the Software. We have no knowledge of what audio files you play, how often you use the Software, or what features you access. 3.4 Server Logs (Infrastructure Security) When you visit wickedmp3.com, our hosting infrastructure may temporarily log standard web server data for security purposes: CRITICAL DISTINCTION - SPLIT ARCHITECTURE: This logging applies ONLY to: - Visitors to the wickedmp3.com website - Initial download/access of the web-based PWA (Progressive Web App) This logging does NOT apply to: - The Desktop Application (.exe for Windows, .app for macOS, .AppImage for Linux) - The PWA after it has been cached and is running offline Standard server logs are generated only during direct interaction with the wickedmp3.com infrastructure (e.g., downloading the installer or loading the PWA container). Once the Desktop Application is downloaded and installed, it operates with ZERO network dependencies. The Desktop App does not "phone home," does not generate server logs upon launch or usage, and does not transmit any data to CC Integrity LLC. Information Logged (Website Visitors Only): - IP address - Browser type and version - Referring URL (if applicable) - Timestamp of request - Requested resource (excluding User Content file paths) Purpose: - DDoS attack prevention - Fraud detection - Server security monitoring - Compliance with legal obligations Retention: - Server logs are automatically deleted after 30 days - We do not perform long-term analysis or profiling of visitor data Legal Basis: - Legitimate interest in protecting our infrastructure and preventing abuse (GDPR Article 6(1)(f)) ═══════════════════════════════════════════════════════════════════════════════ IV. LOCAL DATA STORAGE (YOUR DEVICE ONLY) 4.1 Browser-Based Storage (PWA/Web Version) If you use the web-based version of WickedMP3 (Progressive Web App), the Software stores data locally in your browser using standard HTML5 APIs: Data Stored Locally: - User preferences (volume level, theme, EQ settings) - "Favorites" queue database - Recently played tracks list - Service Worker cache (for offline functionality) Storage Technologies Used: - LocalStorage - IndexedDB - Cache API (Service Workers) CRITICAL: This data is stored exclusively on YOUR device. It is NOT transmitted to our servers or synchronized across devices. If you clear your browser cache or use a different device, this data will not be available. 4.2 Desktop Application Storage The desktop version (.exe for Windows, .app for macOS, .AppImage for Linux) stores similar data in your operating system's local application data directory. Storage Locations: - Windows: %APPDATA%/WickedMP3/ - macOS: ~/Library/Application Support/WickedMP3/ - Linux: ~/.config/WickedMP3/ This data is stored locally on your device and is never transmitted to CC Integrity LLC or any third party. 4.3 Desktop Application: No Required Network Communication The desktop version of WickedMP3 is a standalone executable that operates completely offline after installation: Network Activity: - NOT REQUIRED for core playback functionality - No "phone home" functionality - No update checks or version pings - No crash reporting or telemetry transmission - Optional features (export, manual updates) may access file system or website What This Means: - You can run the Desktop App with your network cable unplugged - We have no technical ability to know if you're using the app right now - The Software does not include forced auto-update mechanisms; updates are applied only when the User manually downloads and installs a new version from our website - Your usage is completely private and untracked Server Logs Created: - ZERO (after the one-time download of the installer) This is not a limitation—it is a deliberate privacy feature. ═══════════════════════════════════════════════════════════════════════════════ V. COOKIES AND TRACKING TECHNOLOGIES 5.1 What We DON'T Use - No advertising cookies - No social media tracking pixels - No cross-site tracking - No remarketing or retargeting tags 5.2 What We DO Use (Minimal) - Strictly necessary cookies: Session cookies to maintain your active session during purchase (handled by Stripe) - Preference cookies: Browser-stored settings (e.g., theme preference, volume level) that never leave your device 5.3 Third-Party Cookies When you complete a purchase, Stripe may set cookies to process your payment securely. We do not control these cookies. See Stripe's privacy policy for details: https://stripe.com/privacy 5.4 Cookie Control You can disable cookies in your browser settings. However, disabling strictly necessary cookies may prevent you from completing a purchase or using certain features of the Software. ═══════════════════════════════════════════════════════════════════════════════ VI. THIRD-PARTY SERVICES 6.1 Payment Processing (Stripe) We use Stripe, Inc. for all payment processing. Stripe collects and processes payment information according to its own privacy policy: - Stripe Privacy Policy: https://stripe.com/privacy - PCI-DSS Compliance: Level 1 (highest security standard) 6.2 Hosting Infrastructure (DreamHost, Cloudflare) Our website is hosted by DreamHost and protected by Cloudflare for DDoS mitigation. These providers may temporarily log IP addresses and request data for security purposes, but they do not have access to User Content (audio files, playlists, etc.) because that data never leaves your device. 6.3 External Content Delivery Networks (CDNs) We use Google Fonts to render text styles on the website. Your IP address is transmitted to Google to retrieve these assets. This data transfer is subject to Google's Privacy Policy. 6.4 No Other Third Parties We do NOT use: - Email marketing platforms (e.g., Mailchimp, SendGrid) - Analytics platforms (e.g., Google Analytics, Mixpanel) - Advertising networks (e.g., Google Ads, Facebook Pixel) - Social media integrations (e.g., Facebook Login, Twitter sharing) ═══════════════════════════════════════════════════════════════════════════════ VII. DATA SHARING AND DISCLOSURE 7.1 No Sale of Data We DO NOT sell, rent, lease, or trade your personal information to third parties for marketing purposes. 7.2 Limited Disclosure Scenarios We may disclose your information ONLY in the following narrow circumstances: (a) Legal Compliance: If required by law, court order, subpoena, or government investigation (b) Fraud Prevention: To prevent fraud, unauthorized access, or illegal activity (c) Business Transfers: If CC Integrity LLC is acquired, merged, or undergoes bankruptcy proceedings, customer data may be transferred as part of the transaction (subject to the same privacy protections) (d) With Your Consent: If you explicitly authorize us to share your information 7.3 Practical Reality Because we collect minimal data, there is very little to disclose in the first place. In most scenarios, we would have no responsive documents to produce in response to a subpoena because we do not track User Content or usage patterns. ═══════════════════════════════════════════════════════════════════════════════ VIII. DATA RETENTION 8.1 Payment Data - Stripe retains payment records according to its own retention policies (typically 7 years for financial compliance) - We retain transaction IDs for refund processing (1 year after purchase) 8.2 Server Logs - Automatically deleted after 30 days - Not archived or backed up 8.3 Email Addresses - Retained by Stripe for transactional purposes - We do not maintain a separate customer email database - If you request deletion, we will instruct Stripe to remove your email from their system (subject to Stripe's legal obligations) 8.4 Local Data (Your Device) - Data stored on your device (queues, preferences) persists until you manually delete it - We have no access to this data and cannot delete it remotely ═══════════════════════════════════════════════════════════════════════════════ IX. YOUR PRIVACY RIGHTS 9.1 GDPR Rights (EU Users) If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR): - Right to Access: Request a copy of the personal data we hold about you - Right to Rectification: Correct inaccurate or incomplete data - Right to Erasure ("Right to be Forgotten"): Request deletion of your data - Right to Restrict Processing: Limit how we use your data - Right to Data Portability: Receive your data in a portable format - Right to Object: Object to processing based on legitimate interests - Right to Withdraw Consent: Revoke consent at any time PRACTICAL NOTE: Because we collect minimal data, most rights are automatically satisfied. For example, we cannot "forget" your usage patterns because we never recorded them in the first place. To Exercise Your Rights: - Email: wickedmp3player@gmail.com (or your designated privacy contact) - Include: Proof of purchase (transaction ID or receipt) - Response Time: 30 days 9.2 CCPA Rights (California Users) If you are a California resident, you have the right to: - Know what personal information we collect, use, and share - Request deletion of your personal information - Opt-out of "sale" of personal information (Note: We do not sell data) - Non-discrimination for exercising your rights To Submit a CCPA Request: - Email: wickedmp3player@gmail.com - Include: Proof of California residency and proof of purchase - Response Time: 45 days 9.3 Right to Opt-Out of Marketing You may opt-out of receiving promotional emails by: - Clicking "Unsubscribe" in any marketing email - Emailing wickedmp3player@gmail.com PRACTICAL NOTE: We do not send marketing emails, so there is nothing to opt out of. You will only receive transactional emails (purchase receipts). 9.4 Do Not Track (DNT) We honor "Do Not Track" signals by default because we do not track users in the first place. Whether your browser sends a DNT signal or not, our data collection practices remain the same (minimal). ═══════════════════════════════════════════════════════════════════════════════ X. CHILDREN'S PRIVACY (COPPA COMPLIANCE) 10.1 Age Restriction WickedMP3 is NOT intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. 10.2 Parental Consent (Ages 13-17) Users aged 13-17 may use the Software only with verifiable parental consent. By allowing a minor to use WickedMP3, parents/guardians agree to supervise the minor's use and accept responsibility for their actions. 10.3 Age Verification We rely on Stripe's payment processing system, which requires a valid credit card or payment method, as an indirect age verification mechanism. Minors typically cannot complete a purchase without parental involvement. 10.4 Discovery of Underage Users If we become aware that we have inadvertently collected information from a child under 13 without parental consent, we will: - Delete the information immediately - Terminate access to the Software - Not use the information for any purpose Parents who believe their child has provided information to us should contact: wickedmp3player@gmail.com ═══════════════════════════════════════════════════════════════════════════════ XI. DATA SECURITY 11.1 Technical Safeguards We implement industry-standard security measures to protect the limited data we collect: - HTTPS encryption (TLS 1.3) for all website traffic - Secure server infrastructure (DreamHost, Cloudflare) - Regular security audits and updates - Restricted access to server logs (authorized personnel only) 11.2 Payment Security All payment processing is handled by Stripe, which is PCI-DSS Level 1 certified (the highest level of payment security). We do not store credit card numbers or CVV codes on our servers. 11.3 Local Data Security (Your Responsibility) Data stored on your device (queues, preferences, audio files) is subject to your device's security settings. We recommend: - Using strong device passwords/biometrics - Enabling full-disk encryption - Keeping your operating system updated - Using antivirus software Because the Company has no access to this local data, we cannot recover it if lost, nor can we be compelled to produce it by third parties. 11.4 No Guarantee While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our control. ═══════════════════════════════════════════════════════════════════════════════ XII. INTERNATIONAL DATA TRANSFERS 12.1 Data Processing Location Our servers are located in the United States. If you access WickedMP3 from outside the U.S., your information may be transferred to, stored, and processed in the U.S. 12.2 GDPR Compliance for EU Users For users in the European Economic Area (EEA), we rely on the following legal mechanisms for international data transfers: - Adequacy Decisions: Transfers to countries deemed "adequate" by the European Commission - Standard Contractual Clauses (SCCs): Contracts with service providers (e.g., DreamHost, Cloudflare) that include EU-approved data protection clauses - Data Minimization: Because we collect minimal data, transfer risks are inherently reduced 12.3 Your Consent By using WickedMP3, you consent to the transfer of your limited data (server logs, payment confirmation) to the United States and other jurisdictions where our service providers operate. ═══════════════════════════════════════════════════════════════════════════════ XIII. CHANGES TO THIS PRIVACY POLICY 13.1 Right to Modify We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last Updated" date. 13.2 Material Changes If we make material changes that significantly expand our data collection practices, we will: - Notify users via email (if we have contact information) - Display a prominent notice on wickedmp3.com - Provide at least 30 days' notice before changes take effect 13.3 Continued Use Your continued use of WickedMP3 after changes are posted constitutes acceptance of the updated Privacy Policy. 13.4 Historical Versions We will maintain an archive of previous Privacy Policy versions upon request. Email wickedmp3player@gmail.com to view historical versions. ═══════════════════════════════════════════════════════════════════════════════ XIV. CONTACT INFORMATION For privacy-related questions, data requests, or concerns, contact: CC Integrity LLC Privacy Officer 5441 S MACADAM AVE Portland, Oregon 97239 Email: wickedmp3player@gmail.com Website: https://wickedmp3.com For GDPR or CCPA requests, please include: - Your full name - Proof of purchase (transaction ID or receipt) - Specific nature of your request - Proof of identity/residency (if required by law) We will respond to all requests within 30 days (45 days for CCPA requests). ═══════════════════════════════════════════════════════════════════════════════ XV. DISPUTE RESOLUTION 15.1 Governing Law This Privacy Policy is governed by the laws of the State of Oregon, United States, without regard to conflict of law principles. 15.2 Jurisdiction Any disputes arising from this Privacy Policy shall be resolved in the state or federal courts located in Multnomah, Oregon. 15.3 EU Users (GDPR) EU users have the right to lodge a complaint with their local Data Protection Authority if they believe we have violated GDPR. However, we encourage you to contact us first so we can address your concerns directly. ═══════════════════════════════════════════════════════════════════════════════ XVI. SUMMARY: OUR PRIVACY COMMITMENT We built WickedMP3 on a simple principle: Your audio files are yours. Your privacy is non-negotiable. What This Means: ✓ We do not log file playback activity ✓ We don't sell your data ✓ We don't build user profiles ✓ We don't send marketing emails ✓ Your files never leave your device ✓ We collect only what's legally required for payment processing Privacy isn't a feature—it's the foundation of WickedMP3. ═══════════════════════════════════════════════════════════════════════════════ BY USING WICKEDMP3, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY. ═══════════════════════════════════════════════════════════════════════════════ END OF PRIVACY POLICY