Privacy Policy

You are here: / Privacy Policy

Last updated: November 9, 2026

This page explains what personal data we collect when you use neodcp.com, download and use NeoDCP Player, or buy a license, why we collect it, and what you can ask us to do with it.

Who we are

METREX s. r. o., Jakubovo námestie 2427/9, 811 09 Bratislava, Slovakia. Company ID (IČO): 36299367.
Privacy questions: [email protected], +421 948 333 885.

What we collect and why

Your account

When you register to download NeoDCP Player, we store your username, email address, password (in encrypted form), your answer to “How did you discover NeoDCP Player?”, and the date and IP address of the registration. We use this to give you access to downloads and to your account, and to help you when you ask for support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Google reCAPTCHA protects the download registration and account forms, the contact form, product pages, the cart and the checkout against bots, spam and card fraud. It loads with these pages whatever you choose in the cookie bar and sets a cookie. Google receives your IP address and data about your browser and your use of the page for this. Legal basis: our legitimate interest in protecting the site and payments (Art. 6(1)(f) GDPR).

Orders and licenses

When you buy a license, we store your name, company, billing address, VAT number if you give one, email address, phone number, what you ordered and your license details. We use this to deliver and activate your license, to issue invoices and to provide support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legal obligations for invoicing and accounting (Art. 6(1)(c) GDPR).

If you enter an EU VAT number, we check it in the European Commission’s VIES database to apply the correct VAT. Legal basis: our legal obligations (Art. 6(1)(c) GDPR).

Payments are handled by WooPayments (Automattic, with Stripe) and PayPal; Apple Pay and Google Pay are offered through PayPal. We do not receive or store your full card details. To prevent card fraud, WooPayments and Stripe check each card payment, using for example your IP address and data about your browser and device. PayPal’s scripts load on product pages, the cart and the checkout to show its payment buttons and to check for fraud. PayPal then receives your IP address and data about your browser and device and sets its own cookies. Legal basis: our legitimate interest in preventing fraud (Art. 6(1)(f) GDPR). If you pay by bank transfer, we receive the payer’s name and account details from our bank with your payment.

The NeoDCP Player software

NeoDCP Player works offline: playback and the license check run on your PC. Apart from the update check described below, the program sends us nothing about you, your PC or the DCPs you play.

The update check is the only function that connects to our server. When it runs, NeoDCP Player sends our server the version installed on your PC and asks which version is current. Our server receives your PC’s IP address with this request, as with any visit to a website. You can switch the update check off in NeoDCP Player. It then makes no connection to us, and you install updates from the download page. Legal basis: our legitimate interest in telling you about new versions (Art. 6(1)(f) GDPR).

Error details that NeoDCP Player records stay on your PC and are not sent to us. If you send them to us for support, we use them only to answer your request.

To license NeoDCP Player, you create a license request in the program and send it to us by email ([email protected]). The request contains the details you enter in its form and a hardware fingerprint of your PC: a code calculated from the PC’s hardware that ties the license to that PC. We use the request only to issue your license, to issue it again and, for Studio PT and Cinema PT licenses, to move it to a new PC. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Emails about your order

We send emails that belong to your order: order confirmations, license instructions, invoices and reminders about unpaid orders. If you enter your email address at checkout and do not finish the order, we may send you one reminder about it. Legal basis: performance of a contract and our legitimate interest (Art. 6(1)(b) and (f) GDPR).

Newsletter

We send the newsletter only if you tick the newsletter box when you register or order. After registering for the download, you get an email with a link to confirm your sign-up (double opt-in). The newsletter brings news about new versions, tips and offers, about once every few weeks.

We store your email address, your name if you gave it, the time of your sign-up and confirmation, and which of our emails you open and which links you click, so we can see what is useful to readers. The newsletter is sent with Mailchimp (Intuit Inc., USA).

For subscribers, the shop also sends Mailchimp their orders and carts. We use this to see which emails lead to orders and to decide which subscribers an email is relevant for.

You can unsubscribe at any time with the link at the bottom of every newsletter, or by writing to [email protected]. Legal basis: your consent (Art. 6(1)(a) GDPR). Withdrawing consent does not affect emails sent before.

Support

If you write to us or call us, we use what you tell us to answer you. For remote help we use AnyDesk, only in a session that you start and allow. Legal basis: performance of a contract or, before a purchase, our legitimate interest in answering you (Art. 6(1)(b) and (f) GDPR).

Security

To protect the site and the shop against attacks, our security tools (Cloudflare, Jetpack and Wordfence) process the IP address and browser data of every visit and log sign-in attempts. Legal basis: our legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR).

Website statistics and cookies

The site uses cookies and similar technology. Some are needed for the site and the shop to work, for example your cart, your sign-in, your cookie choice and security checks. Others are for statistics and advertising:

  • Google Analytics 4 (Google), for visitor statistics
  • Google Ads (Google), to see which ads led to an order and to show our ads to people who visited the site before
  • Jetpack Stats (Automattic), for visitor statistics
  • Cloudflare Web Analytics (Cloudflare), for visitor statistics without cookies
  • WooCommerce order attribution, to see which pages or campaigns led to an order
  • Mailchimp for WooCommerce (Mailchimp), to see which orders come from our emails

Some pages also load content from other services. Google reCAPTCHA and PayPal load whatever you choose in the cookie bar, as described above. The site’s Google Fonts and the Google Map on the contact page load only after you allow them in the cookie settings. These services receive your IP address and browser data when they load.

Cookies that are not needed for the site to work are used only with your consent, which you give or refuse in the cookie bar and can change at any time with the cookie badge at the bottom left of the page. Legal basis: your consent (Art. 6(1)(a) GDPR). Until you accept, and after you refuse, no statistics or advertising cookies are set. Google Analytics and Google Ads then receive only cookieless signals about page views and other actions on the page, without a cookie or a lasting identifier for your browser (Google consent mode), and Jetpack Stats and Cloudflare Web Analytics count visits without cookies. Legal basis for these cookieless statistics: our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR). More in our Cookie Policy.

Who else receives your data

We share data only with the service providers we use to run the site and the shop, and only as far as they need it:

  • Hetzner Online GmbH, Germany (web hosting and email)
  • Cloudflare (content delivery, security and cookieless visitor statistics)
  • Automattic (WooPayments, Jetpack and WooCommerce services) and Stripe (card payments)
  • PayPal (PayPal, Apple Pay and Google Pay payments)
  • Mailchimp / Intuit Inc. (newsletter and shop data, see above)
  • Google (Analytics, Google Ads, reCAPTCHA, Fonts, Maps)
  • Defiant Inc. (Wordfence security)
  • European Commission (VIES check of EU VAT numbers)
  • AnyDesk Software GmbH, Germany (remote support, only when you start a session)

Some of these providers are based in the USA. Those transfers rely on the EU-US Data Privacy Framework or on the EU standard contractual clauses.

How long we keep it

  • Account: until you delete it or ask us to delete it.
  • Orders and invoices: as long as Slovak tax and accounting law requires (currently 10 years).
  • License requests and license details: as long as the license can be used.
  • Support emails: as long as the license they concern can be used; other emails as long as we need them to answer you.
  • Server and security logs, including update checks: until the server’s automatic log rotation deletes them.
  • Newsletter: until you unsubscribe. We keep a record of the unsubscribe so that we do not write to you again.
  • Website statistics: Google Analytics keeps event data for 2 months and data linked to your browser for 14 months after your last visit.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit its use, or to receive it in a portable format. You can object to processing based on our legitimate interest, and you can withdraw your consent at any time. Write to [email protected].

You can also complain to a data protection authority, for example the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk) or the authority in your country.

Changes

We update this page when our services change. The date at the top shows the current version.