Your session.
Your information.

Updated 1 October 2026. This notice explains what Barz does with your personal information, why, where it is kept and what you can ask us to do about it. Barz is a Windows plugin for FL Studio; this website, the plugin and the account service behind them are operated by PRIVACYPORTAL LTD.

Who is responsible

The data controller is PRIVACYPORTAL LTD, trading as PrivacyPortal, a company registered in England and Wales under company number 14907634, registered office 16 Commerce Square, Nottingham, England, NG1 1HS. For anything in this notice, including access, correction or deletion requests, email welcome@barz.cc. We are not required to appoint a data protection officer; your message reaches the people who run the service.

What we hold, why, and for how long

Your account

Your email address, a hashed password, whether the address is confirmed, the display name you choose, your trial and access dates, any access you later purchase and — only if you allowed campaign cookies — the campaign tags on the link you arrived through. We need these to give you an account and access to the plugin, so the lawful basis is performance of our contract with you. We keep them while your account exists; ask us to delete the account and we remove it within 30 days, apart from records we must keep for tax and accounting.

Payments

The free trial does not collect a payment card or create a Stripe payment. If you choose to buy lifetime access, Stripe handles card entry and payment. We never receive or store your card number or security code. What we keep is the Stripe customer and subscription reference, whether a card has been verified, your plan, your trial and access dates, and payment status. The basis is our contract with you, and for invoice and tax records our legal obligation; those records are kept for six years as UK tax law requires.

Your computers

When you activate Barz in FL Studio we store a hashed device credential, the computer name you type, and when it was last seen, so that the three-device limit works and so you can sign a machine out. Basis: our contract with you. Removing a computer deletes its credential.

Registration and repeat-trial checks

Cloudflare Turnstile checks registration requests for automated abuse. Cloudflare processes browser and request information to complete that security check; see Cloudflare’s privacy policy. Existing customers do not need this check to sign in.

We compare protected identifiers derived from your confirmed email address and a signed, random identifier in an essential first-party browser cookie. Known Gmail-style aliases are treated as the same mailbox. We store keyed hashes of these identifiers to recognise repeat-trial attempts without keeping a hardware fingerprint. A matching previous trial can prevent a new free trial from starting; it does not charge you or cancel an existing paid membership. Browser cookies do not identify a person reliably, so if you share a studio computer or believe we made a mistake, contact us for a human review. Sharing a network or IP address alone does not make you ineligible.

Text verification for a free trial

Before a new trial starts, we ask you to confirm a mobile number with a text message. Cloudflare protects these requests, applies rate limits and records redacted security events. Twilio Verify receives the number to deliver and check the code. Barz keeps a keyed hash of the number and a masked suffix; we do not store your full phone number or code in our account database or application logs. These protected identifiers are still personal data.

Each verified number can claim one trial. Its trial claim has no automatic expiry and remains after account deletion so deleting or creating an account cannot reset eligibility. This claim is an exception to the general account-deletion and 365-day identifier periods described here. It is used to prevent repeat trials, not for advertising or marketing texts. Contact us to request a review, object to this use or raise a recycled-number issue. A number may have belonged to someone else, so we offer human review instead of treating a match as proof of wrongdoing. Existing active access and paid purchases do not require a new free-trial verification.

No card is collected for a free trial. For accounts that previously registered a card or later make a purchase, review signals can also include a protected identifier derived from Stripe’s card fingerprint. We do not store full card numbers or security codes. The basis is our legitimate interest in preventing abuse of a free offer; you can object using the contact address above. Repeat-trial identifiers expire 365 days after they were last seen and are then deleted automatically.

Support messages and the newsletter

If you write to us we keep your email address and message so we can answer and follow up; the basis is our legitimate interest in supporting customers. Newsletter signup stores your address, your explicit permission, the date and any campaign information you allowed, on the basis of your consent, which you can withdraw at any time using the unsubscribe link or by emailing us. We keep a record of an unsubscribe so you are not accidentally re-added. Please do not put passwords or card numbers in a support message.

Security and server logs

Our servers record request information, including IP addresses, so we can rate-limit sign-in attempts and defend against abuse. The basis is our legitimate interest in keeping the service secure, and these logs are short-lived.

Where your information is kept

The account service runs on Cloudflare Workers with a Cloudflare D1 database whose primary copy is in Western Europe, and the Barz installer is served from Cloudflare R2. Payments run through Stripe. Account email is sent through Cloudflare Email Sending, and replies to welcome@barz.cc are forwarded to our support mailbox at Google Workspace. Those providers process personal data on our instructions under data processing terms, and where they move data outside the UK they rely on approved safeguards such as the UK Addendum to the EU Standard Contractual Clauses.

An earlier version of this notice said the account service used Supabase. That is no longer accurate: the service moved to Cloudflare on 15 September 2026, and this page was corrected on 16 September 2026.

Twilio processes phone-verification requests under its service and data-processing terms. See Twilio’s privacy notice for its handling of delivery and verification data.

Cookies and browser storage

Essential only, unless you opt in. A session cookie keeps you signed in. An essential, signed registration cookie lasts up to 365 days and helps enforce one free trial; it is not used for advertising or tracking you across sites. Your colour theme and your cookie choice are stored in your browser. If you accept optional cookies, we keep the campaign source, medium, name, content and term from the link you arrived through for up to 30 days and attach them to trial and guide links and to forms you submit. Choosing “Essential only” clears that optional information immediately. You can change your mind at any time with Cookie settings in the footer.

There is no Google Analytics, no advertising pixel, no Meta or Reddit tag and no third-party session recording on this site. We do not sell or share your information for advertising, and we do not use it for automated decisions that produce legal effects.

Inside the plugin

Your lyrics are saved with your FL Studio project. Favourites, playlists and downloaded audio are stored locally by the plugin. This website never receives your lyrics or your projects. Each music site you browse inside Barz — YouTube, SoundCloud, BeatStars — sets its own cookies and applies its own privacy policy, exactly as it would in your normal browser. The plugin checks your access online when it starts and while it runs.

The demo on this site

The screenshots and short narrated videos are hosted with this site, so viewing them does not load a YouTube, SoundCloud or BeatStars player. They show a separate demo project using publicly visible beat pages and original sample lyrics, and do not imply endorsement by the artists, producers or platforms shown.

Your rights

You can ask us for a copy of your personal information, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you have given. Email welcome@barz.cc and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, though we would like the chance to put it right first.

Security

Traffic is encrypted in transit. Passwords are hashed and never stored in readable form, device credentials are stored as hashes, and card details never reach our systems. Sign-in, signup and password-reset attempts are rate limited. Access to the production database is restricted to the people who operate the service.

Children

Barz is not intended for children under 16 and accounts are not knowingly created for them.

Changes

The date at the top of this page shows the current version. If we make a change that materially affects you and you have an account, we will email you.

Terms of service · Refunds & cancellation · About PrivacyPortal · Back to Barz →