Privacy Policy

LAST UPDATED 26 OCTOBER 2026 · PLUGINDEX.APP

Plugindex is a desktop application that runs on your Mac or Windows PC. It is built so that the interesting parts happen locally, and this policy describes the small number of places where that isn't true.

What the app does not collect

Plugindex does not send your plugin library, your project files, your audio, your presets or your keyboard mappings to us or to anyone else. The two exceptions are the list of your plugins inside a Send feedback report, and the plugins you filed differently from Plugindex when you choose to share those fixes with its knowledge base; each goes only when you press its button (below). Apart from a Send feedback report, the only thing it sends about how you use them comes from a copy without a license and is described under Trial length and use below: three yes-or-no answers, and the names of the DAWs they are about. None of it names a plugin or says how many. The index of your library is built on your machine and stored on your machine. There is no account to create, and running the app does not require you to identify yourself.

Artwork captured for your library is generated locally from the plugins already installed on your computer and is stored in a folder in your home directory. It is never uploaded.

What the app does send

Update checks. The app periodically asks our update server whether a newer version exists. That request necessarily includes your IP address and the version of Plugindex you are running. We do not use it to build a profile of you.
Trial length and use. During the free trial, and on Free after it, the app records when the trial began, so it can tell you how many days are left and so that one computer gets one trial. What it sends is the start date and a one-way hash of your Mac's hardware identifier, which lets us recognise the same computer again without telling us whose it is. No plugin names, no file paths, no name or email. With them go three yes-or-no answers: whether a plugin has been loaded since the last time it was sent, whether setup has been finished, and on Free whether the week's loads ran out since the last time. With those go the names of DAWs: which of the DAWs Plugindex works with are on your computer (Logic Pro, for example), and which of those a plugin was loaded into since the last time. Only the name, from our own list: never a version, never any other app on your computer. Never which plugin or how many. From the European Economic Area, the United Kingdom, Switzerland, Brazil, South Korea, Turkey or Quebec the app sends neither the answers nor the DAW names, only the start date and the hash: our server tells it whether it may, and from those places the answer is no. A copy from before this change still sends its three answers from there until it updates, and a copy last opened somewhere else can send them once more; we keep neither. The app stops sending all of this once you have a license. Each time it arrives we also note the date, with the same hash, start date, answers and DAW names, plus the country the connection came from as our host, Cloudflare, reports it (the country only, never the address), and nothing more, so we can count how many copies without a license are running, how many of those are being used, in which countries, and which DAW's setup people do not finish; those notes are deleted after three months. When a computer checks in for the first time, the address of its connection is also counted for two days and then discarded, so one connection cannot start trials without limit. The record itself (the hash and the start date, nothing else) is kept indefinitely, because it is the only thing that stops one Mac from taking a second free trial. On Windows the same hash is made from the machine identifier Windows creates when it is installed, and nothing else changes.
License validation. When you activate a license, and about once a day afterwards while the app is online, the key you enter is sent to our server together with the same one-way hash of your machine identifier described above and your computer's name. Our server checks the key with Lemon Squeezy, who hold the activation under that computer name, and returns a signed confirmation that the app keeps on your computer, so you don't have to re-enter the key and so the app can run offline for up to sixty days between checks. We do not store the key or the hash. The one exception is a license that was transferred: for that license alone we keep its key's hash (a short fingerprint, never the key) with the date its twelve months of updates count from, and nothing else. The address of the connection is counted for two days for the rate limit and then discarded. A copy of the app earlier than version 1.4 sends the key and your computer's name to Lemon Squeezy directly, as this policy said before, until it updates.
Send feedback, only when you press it. Pressing Send feedback sends us the app's diagnostic log: what Plugindex did recently, how it is set up, what kind of computer it runs on (the operating system's version and the processor), and the list of plugins on your computer (names, makers and formats), so a missing or misfiled plugin can be fixed. Before it leaves, your account name, your computer's name and any drive named after you are taken out of it. It can name a session that was open, such as a Pro Tools session, but it holds nothing inside a project: no audio, no presets, no arrangement. On a Mac it can also carry two things from your DAWs. If macOS wrote a crash report in the last 7 days for a DAW, or for any other program that the crash report says a DAW started or is responsible for (the helper a DAW runs plugins in, or its plugin scanner, for example), your report carries a short summary of up to three of those crash reports: which program and version, when, the macOS version, the kind of failure macOS recorded and its one-line reason, and the names of the code that was running on the thread that failed, which can include a plugin's name. The reason is the crashed program's own text, cut to 300 characters, so like the rest of the report it can name a session or project that was open. If a DAW stops answering Plugindex, Plugindex asks macOS for a one-second sample of what that DAW's main thread is doing; when it gets one, it keeps a trimmed copy on your computer (the three newest, each removed after 14 days), and every report you send while a copy is kept carries it. It holds the same kind of thing: names of code, which can include a plugin's name. Neither holds anything from inside a project (no audio, no presets, no arrangement), and neither leaves your computer unless you press Send feedback. Both go through the same step as the rest of the report and are kept and deleted with it. On a Mac the report also carries one line of counts from Apple's Audio Unit cache about what Logic Pro's Plug-in Manager switched off: which folder under your home folder it was read from, how many entries the cache holds, how many of them Logic switched off, a few markers of the cache's own format and, if the cache could not be used, the reason. It names no plugin and no maker. The report is kept privately under the ID that appears in your email, read only to answer you, to find and fix faults in Plugindex and to improve how plugins are recognised, and deleted after 90 days. To stop it being abused, the address of the connection that sent it is counted for two days and then discarded. To read it first instead, Save debug log writes the same file to your computer and sends nothing, and you can attach it to an email yourself.
What a Send feedback report says about your computer. Besides the log and the plugin list, the report records the language your system and each DAW run in, how much memory the computer has, how many screens it has, their sizes and which screen Plugindex and your DAW's window are on, the names of the MIDI devices and control surfaces connected (a device or screen named after you is blanked), on a Mac with Logic Pro the MIDI ports its control surface setup lists, what you recently moved to Plugindex's Trash, hid, re-filed or changed in Settings (by plugin or setting, never a file's or preset's name, never how often you clicked), and on Windows whether Plugindex's MIDI messages reached their port. Every report from one computer carries the same random key, made the first time Plugindex runs, so two reports from the same computer can be read together; the key is sent with nothing else. If you pick what went wrong in the Send feedback box, that choice travels with the report.
Contributions, only if you press the button. In the app you can share the plugins you filed differently from Plugindex: their names, makers, formats, which of your DAWs they were found in, what each plugin says about itself, how Plugindex filed them and how you filed them. You see the whole list before it goes, and you can leave any of them out. It carries the version of Plugindex that sent it and whether it runs on macOS or Windows, and no name, email, machine identifier, file path or preset. Your IP address is used to limit how often one connection can send and is not stored with the list. Each list is kept until it has been read into the knowledge base and no longer than sixty days. What enters the knowledge base is a plugin's name, maker, formats and filing; that then ships inside the app and appears on plugindex.app. Nothing that identifies you or your library as a whole is published.

The website

This site is a set of static pages and serves its own typefaces from this domain. The home page and the download page load Meta's advertising pixel, which is how we tell which ads actually lead to downloads. It sets cookies in your browser (_fbp, and _fbc if you arrived from an ad) and shares your IP address, your browser, and the fact that you visited with Meta. We do not send Meta your name or your email from this site. When you buy, we send Meta a one-way hash of your email address so it can credit the sale to the right ad; the hash is not reversible into your address. No other page on this site loads the pixel, including this one. Our host keeps standard server logs, which include IP addresses, for security and troubleshooting. Every page on this site, the plugin directory included, counts visits with Cloudflare Web Analytics, which our host runs: the page, the page that sent you here, your browser and your country. It sets no cookies and is not used to follow you across sites. When you download the app, the address of your connection is counted for two days and then discarded, so a download repeated the same day is counted once.

The help page remembers whether you chose Mac or Windows. It keeps that one word in your browser's own storage (localStorage), on your device. It is never sent to us, and clearing your browser's site data removes it.

The download page also reports the download to Meta from our server, not just from your browser. That server-side report carries your IP address, your browser's user-agent string, and the pixel's cookie values if the pixel set them. It exists so that a download is counted once even when the browser pixel is blocked. The same is true of the purchase report described above, which is sent from our server when Lemon Squeezy tells us an order went through.

If you are visiting from the European Economic Area, the United Kingdom, Switzerland, Brazil, South Korea, Turkey or Quebec, none of this runs: the pixel is not loaded, the server-side download report is refused, and we do not send Meta a purchase report for a buyer in one of those places, or for any order that was charged VAT. No consent banner is shown because there is nothing to consent to. Everywhere else, a content blocker or your browser's tracking protection will stop the browser pixel, and nothing on this site depends on it working.

Purchases

Payments are processed by Lemon Squeezy, who acts as the merchant of record. Your card details are entered on their systems and are never seen by, or transmitted through, us. We receive your email address, the license issued, and the country used for tax purposes. Lemon Squeezy's own privacy policy governs what they do with your data.

Email

If you email us for support, we keep that correspondence so we can follow up. We do not add you to a mailing list, and we do not sell or share your address.

If you give us your email address to hear about new features and releases, from the app's Free page or from this site, we keep it for that one purpose until you leave the list, and the link in every mail we send to it does that. It is used for nothing else and shared with no one. The mail itself is sent through Resend, who process it on our behalf. To stop the form being abused, the address of the connection that used it is counted for two days and then discarded.

If you are on a phone and ask us to send the download link to your computer, we use the address to send that one email and we do not keep it. There is no list to leave, because you were never put on one. That mail also goes through Resend. To stop the field being abused, the address of the connection that used it is counted for two days and then discarded, the same way the form above is counted.

If you send us a review from plugindex.app/review, we keep what you enter there: your words, your name, and whatever else you chose to add (what you do, your Instagram name, a link to your music, the DAWs you use), with the sentence you agreed to and when you agreed to it. We keep it to show your words with your name on this site and in our posts, and for nothing else. That page does not ask for your email address, and nothing else about the request is kept with it. A copy reaches our support inbox through Resend. To change what you sent, or to have it taken down from our records and from wherever it is shown, write to support@plugindex.app. To stop the form being abused, the address of the connection that used it is counted for two days and then discarded, the same way the forms above are counted.

Your rights

Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected, or to have it deleted. In practice this is your email address, your license record, and any support correspondence. Write to support@plugindex.app and we will action it within 30 days.

Children

Plugindex is a professional audio tool and is not directed at children under 16. We do not knowingly collect their data.

Changes

If this policy changes in a way that affects what we collect, we will update the date at the top of this page and add a line to the list below. The list begins on 16 September 2026; changes before that date are not listed.

24 October 2026. For a license that was transferred, we now keep the hash of its key (never the key) with the date its twelve months of updates count from, so the new owner keeps what was left of the seller's year. Nothing else is kept, and nothing is kept for any other license.
23 October 2026. The help page now remembers whether you chose Mac or Windows, in your browser's own storage. It stays on your device and is not sent to us. This policy did not mention it before today.
12 October 2026. Two things about a Send feedback report. This policy now says a report is also read to find and fix faults in Plugindex; until today it said a report is read only to answer you and to improve how plugins are recognised. The app has not changed here. And this policy now says the report tells us what kind of computer Plugindex runs on. The operating system's version and the type of processor (Apple silicon or Intel, for example) are already in a report, and until today this policy did not mention them. A later release of the app will add the processor's model (for example "Apple M2 Max"); the app you have does not send that yet, and this policy says so before it ships. It is the model's name only, the same for every computer of that kind.
10 October 2026. A later release of the app will add one line to a Send feedback report on a Mac: counts from Apple's Audio Unit cache of what Logic Pro's Plug-in Manager switched off, with no plugin name. The app you have does not do this yet; this policy says so before it ships. The line goes only when you press Send feedback, with the same names taken out. Until today this policy did not mention it.
6 October 2026. Three corrections to what this policy says a Send feedback report can carry on a Mac. The app has not changed; in each place this policy said less than the app does. The crash summary covers a DAW and any other program that macOS's crash report says a DAW started or is responsible for; until today this policy named only the helper process a DAW runs plugins in. The summary's one-line reason is the crashed program's own text, so it can name a session or project that was open; until today this policy said only that the summary holds nothing from inside a project. And every report you send while a sample is kept carries it (the three newest, each removed after 14 days); until today this policy said a kept sample goes with your next report.
6 October 2026. On a Mac, a Send feedback report can also carry a short summary of up to three crash reports macOS wrote in the last 7 days for a DAW or the helper process it runs plugins in, and a trimmed one-second sample of what a DAW's main thread was doing when it stopped answering Plugindex, kept on your computer until then (the three newest, for 14 days). Either can name a plugin; neither holds anything from inside a project. Both go only when you press Send feedback, with the same names taken out, and are deleted with the report after 90 days. Until today this policy said the only thing the app sends about how you use your plugins comes from a copy without a license.
4 October 2026. A check-in from a copy without a license also names DAWs: which of the DAWs Plugindex works with are on the computer, and which of those a plugin was loaded into since the last check-in. Until today this policy said a check-in never says in which DAW. Only the name, never a version or any other app, and still nothing from a copy with a license. It is there so we can see which DAW's setup people do not finish. From the European Economic Area, the United Kingdom, Switzerland, Brazil, South Korea, Turkey and Quebec the app sends neither these names nor the three yes-or-no answers, and the answers a copy from before this change still sends from there are no longer kept.
4 October 2026. Meta's pixel, the download report and the purchase report are switched off for Brazil, South Korea, Turkey and Quebec as well, the same way they already were for the European Economic Area, the United Kingdom and Switzerland. To know where a buyer is, we now read the country on the customer record Lemon Squeezy holds for the order.
29 September 2026. What the app can send to the knowledge base is the plugins you filed differently from Plugindex, when you choose to share those fixes, rather than the plugins Plugindex has not confirmed. Each carries the same facts as before, with how Plugindex filed it and how you filed it. You see the list first and can leave any of them out.
28 September 2026. The app can send us the plugins Plugindex has not confirmed, when you press the button that sends them: their names, makers, formats, the DAWs they were found in, what each says about itself and how it was filed, with the app's version. You see the list first. It is kept until it has been read into the knowledge base, and no longer than sixty days.
20 September 2026. License checks go to our own server first. When you activate, and about once a day while the app is online, it sends us the key, the one-way hash of your machine identifier and your computer's name; we check the key with Lemon Squeezy and return a signed confirmation, and we store neither the key nor the hash. Copies earlier than version 1.4 keep sending the key to Lemon Squeezy directly until they update.
20 September 2026. Changes to this policy are listed here from now on. Until today this section promised them in the app's release notes instead.
19 September 2026. A check-in also carries the country the connection came from, as our host reports it, never the address. On a first check-in, a download and a feedback report, the address of the connection is counted for two days and then discarded, so one connection cannot start trials without limit.
18 September 2026. Send feedback sends us the app's log and the list of plugins on your computer when you press it, kept privately for 90 days. A check-in from a copy without a license also carries three yes or no answers: a plugin was loaded, setup is finished, the week's free loads ran out.
16 September 2026. The app keeps recording when the trial began after the trial ends, on Free, and each check-in is counted so we can tell how many copies without a license are running. Those notes are deleted after three months.

Contact

Plugindex is operated by DE Productions LLC, 6339 Charlotte Pike, Unit A227, Nashville, TN 37209, USA. Reach us at support@plugindex.app.

日本語での概要

このプライバシーポリシーの要点を、日本語でまとめたものです。正式な内容は上の英語の本文です。内容に違いがある場合は、英語の本文が優先されます。

アプリが送らないもの。 プラグインの一覧、プロジェクトファイル、音声、プリセット、キーボードの割り当ては、当社にも第三者にも送りません。ただし、下の 2 つのボタンを押したときは除きます。ライブラリの索引は、お使いのコンピューターの中で作られ、そこに保存されます。アカウントの作成は必要ありません。

アプリが送るもの。

アップデートの確認。 新しいバージョンがあるかどうかを、当社のサーバーに問い合わせます。このとき、IP アドレスと、お使いの Plugindex のバージョンが送られます。
試用（トライアル）中と、その後の Free（ライセンスなし）の場合。 1 台のコンピューターにつき試用を 1 回に限るため、試用の開始日と、コンピューターの識別子を元に戻せない形に変換した値（ハッシュ）を、当社のサーバーに送ります。あわせて、「前回の送信のあとにプラグインを読み込んだか」「セットアップが終わったか」「Free の 1 週間分の読み込み回数を使い切ったか」の 3 つの答え（はい・いいえ）を送ります。また、Plugindex が対応している DAW のうち、お使いのコンピューターにあるものの名前と、前回の送信のあとにプラグインを読み込んだ DAW の名前も送ります。プラグインの名前や数、DAW のバージョン、そのほかのアプリの情報、お名前やメールアドレスは送りません。送信先は、Cloudflare 社のサービス上で動く当社（DE Productions LLC）のサーバーです。目的は、ライセンスなしのアプリが国ごとにいくつ動き、いくつ使われているか、どの DAW のセットアップが最後まで進みにくいかを知ることです。届いた内容は、日付と接続元の国名（国名だけで、IP アドレスは含めません）を添えて記録し、3 か月で削除します。ハッシュと開始日だけの記録は、2 回目の試用を防ぐために、期限を決めずに保存します。ライセンスを有効にすると、これらの送信は止まります。
ライセンスの確認。 ライセンスを有効にしたときと、その後もオンラインのときは 1 日に 1 回ほど、ライセンスキー、上と同じハッシュ、コンピューターの名前を、当社のサーバーに送ります。当社のサーバーは、キーとコンピューターの名前を、販売を担当する Lemon Squeezy 社に照会します。当社は、キーとハッシュを保存しません。ただし、譲渡されたライセンスに限り、そのキーのハッシュ（キーそのものではない短い識別用の値）と、12 か月の無料アップデート期間の起点となる日付だけを保存します。
「Send feedback」を押したとき。 アプリの診断ログと、お使いのコンピューターにあるプラグインの一覧（名前、メーカー、形式）を、当社に送ります。診断ログには、お使いのコンピューターの種類（OS のバージョンとプロセッサー）も含まれます。診断ログには、開いていたセッション（Pro Tools のセッションなど）の名前が入ることがありますが、プロジェクトの中身（音声、プリセット、アレンジ）は含まれません。Mac では、次の 2 つも含まれることがあります。1 つ目は、macOS が過去 7 日以内に書き出したクラッシュレポートの短い要約です（最大 3 件）。対象は、DAW のクラッシュと、クラッシュレポートに「DAW から起動されたもの」または「DAW が責任を持つもの」として記録されている、ほかのプログラムのクラッシュです（たとえば、DAW がプラグインを動かすための補助プロセスや、プラグインのスキャナー）。要約には、プログラムの名前とバージョン、日時、macOS のバージョン、macOS が記録した障害の種類とその 1 行の理由、障害が起きたスレッドで動いていたコードの名前が含まれ、そこにプラグインの名前が入ることがあります。この 1 行の理由は、クラッシュしたプログラム自身が残したテキストを 300 文字までに切り詰めたもので、診断ログのほかの部分と同じように、開いていたセッションやプロジェクトの名前が入ることがあります。2 つ目は、DAW が Plugindex に応答しなくなったときに、Plugindex が macOS に求める、その DAW のメインスレッドの動きの 1 秒間のサンプルです。取得できた場合は、短くしたコピーをお使いのコンピューターに保存し（新しいもの 3 件まで、それぞれ 14 日で削除）、コピーが保存されているあいだは、「Send feedback」を押すたびに一緒に送ります。こちらにも、動いていたコードの名前が含まれ、そこにプラグインの名前が入ることがあります。どちらにも、プロジェクトの中身（音声、プリセット、アレンジ）は含まれません。送る前に、アカウント名、コンピューターの名前、お名前を含むドライブ名は取り除かれます。お問い合わせへの回答、Plugindex の不具合の調査と修正、プラグインの認識の改善のためだけに使い、90 日で削除します。ボタンを押さないかぎり、送られません。
「Send feedback」のレポートが、お使いのコンピューターについて記録すること。 ログとプラグインの一覧のほかに、レポートには次のことが記録されます。システムと各 DAW の言語。メモリの容量。画面の数と大きさ、そして Plugindex と DAW のウインドウがどの画面にあるか。接続されている MIDI 機器とコントロールサーフェスの名前（お名前を含む機器名や画面名は取り除かれます）。Mac で Logic Pro をお使いの場合は、Logic のコントロールサーフェス設定に並ぶ MIDI ポートの名前。最近 Plugindex のゴミ箱に移したもの、隠したもの、分類を変えたもの、設定で変えたもの（プラグインや設定の単位で、ファイルやプリセットの名前とクリックの回数は記録しません）。Windows では、Plugindex の MIDI メッセージがポートに届いたかどうか。同じコンピューターからのレポートには、Plugindex の初回起動時に作られた同じランダムなキーが付くので、同じコンピューターからの 2 つのレポートをまとめて読めます。このキーは、レポート以外には送られません。「Send feedback」の画面で何が起きたかを選んだ場合は、その選択もレポートと一緒に送られます。
「Share your fixes」を押したとき。 お客様が Plugindex とは違う分類にしたプラグインについて、名前、メーカー、形式、見つかった DAW、プラグインが自身について示す情報、Plugindex の分類、お客様の分類を送ります。送る前に一覧を確認でき、送りたくないものは外せます。お名前、メールアドレス、コンピューターの識別子、ファイルの場所は含まれません。一覧は長くても 60 日で削除します。ナレッジベースに入るのは、プラグインの名前、メーカー、形式、分類だけで、アプリと plugindex.app で公開されます。

試用情報の初回送信、ライセンスの確認、「Send feedback」、ダウンロード、メールアドレスの入力では、接続元の IP アドレスを 2 日間だけ使って回数を数え、そのあと破棄します。使いすぎや悪用を防ぎ、同じ日のダウンロードを重複して数えないためです。

レビューを送ったとき。 plugindex.app/review のページからレビューを送ると、そこに入力した内容（ご感想、お名前、任意で入力した肩書き、Instagram のユーザー名、音楽へのリンク、お使いの DAW）と、同意した文とその日時を保存します。目的は、ご感想をお名前とともにこのサイトと当社の投稿で紹介することだけです。このページではメールアドレスをお尋ねしません。写しは Resend を通じて当社のサポート用の受信箱に届きます。内容の変更や削除をご希望の場合は support@plugindex.app までご連絡ください。悪用を防ぐため、接続元の IP アドレスを 2 日間だけ使って回数を数え、そのあと破棄します。

このウェブサイトが送るもの。 トップページとダウンロードページでは、どの広告がダウンロードにつながったかを知るために、Meta 社の広告用ピクセルを読み込みます。ブラウザに Cookie（_fbp、広告から来た場合は _fbc）が保存され、IP アドレス、ブラウザの種類、ページを訪れたことが Meta 社に送られます。ダウンロードのときは、当社のサーバーからも、IP アドレス、ブラウザの種類、ピクセルの Cookie の値を Meta 社に送ります。購入のときは、メールアドレスを元に戻せない形に変換した値を Meta 社に送ります。お名前やメールアドレスそのものを、このサイトからヘルプのページは、Mac と Windows のどちらを選んだかを、ブラウザ内の保存領域（localStorage）に覚えます。この値はお使いの端末の中にとどまり、当社には送られません。 Meta 社に送ることはありません。ほかのページでは、ピクセルを読み込みません。コンテンツブロッカーや、ブラウザのトラッキング防止機能でピクセルを止めても、このサイトは問題なく使えます。このサイトのすべてのページ（プラグインのディレクトリを含む）では、ホスティング事業者が運営する Cloudflare Web Analytics で訪問数を数えます。数えるのは、ページ、参照元のページ、ブラウザの種類、国です。Cookie は保存せず、他のサイトをまたいだ追跡にも使いません。ホスティング事業者は、安全の確保と不具合への対応のために、IP アドレスを含む通常のサーバーログを保存します。

購入とメール。 お支払いは、販売者である Lemon Squeezy 社が処理します。カードの情報が当社に届くことはありません。当社が受け取るのは、メールアドレス、発行されたライセンス、税金の計算に使われた国です。サポートあてのメールは、対応を続けるために保存します。新機能やリリースのお知らせのためにメールアドレスを登録された場合は、その目的だけに使います。配信には Resend 社のサービスを使います。登録は、各メールのリンクからいつでも解除できます。

お問い合わせ。 当社が保有するお客様の個人データ（メールアドレス、ライセンスの記録、サポートとのやり取り）の開示、訂正、削除をご希望の場合は、 support@plugindex.app までご連絡ください。30 日以内に対応します。運営者は DE Productions LLC（6339 Charlotte Pike, Unit A227, Nashville, TN 37209, USA）です。