What the licence check sends

Activating

You never type your email or password into the plugin. Pressing ACTIVATE sends the licence server the plugin’s product code, a salted hash of a machine identifier (never the raw hardware id), the name of the computer so you can tell your machines apart in your account, and the plugin version. The server answers with a short code, and the plugin opens stms.app in your browser.

You sign in on stms.app, or create an account, and approve. Your password goes to the website, never to the plugin. While you do that, the plugin asks the server every few seconds whether you have approved, sending only the code it was given. When you approve, the server sends back a signed licence token and a refresh key, and the plugin stores them in a licence file on your computer.

Refreshing

Checking the licence while you work sends nothing: the plugin reads the signed licence file on your computer.

When a plugin loads, and its last attempt was more than five minutes ago, it asks the server for a fresh token. That request sends the activation id and the refresh key the plugin was given when you approved, the machine hash and the product code. The plugin’s name and version travel in the request’s user agent. It sends no email and no password. This is how a released machine or an ended licence is noticed: the next time the plugin loads.

If you open the preset packs, the plugin asks the server for the list of packs for that plugin. Downloading a pack that needs a licence sends the same activation id, refresh key, machine hash and product code as a refresh.

What the server sees, and what it does not

Like any server, ours also sees the network address each request comes from, and when it arrived. We keep your account, the machine hash and computer name, the plugin and version that asked, and the time, so your licence works and you can manage your machines.

There is no telemetry. The plugin sends nothing about your projects, your audio or how you use it, and it only talks to the server to activate, to refresh a licence, or to list and fetch packs.

seethe privacy policy