Licences, services & privacy
Orrery's instruments and this site are built with the help of third-party software. Each
component is listed with its licence and source. Where a licence requires the complete
corresponding source code at the exact version used, it is linked below. The services that
operate the catalogue's commerce are acknowledged as well.
Bundled with the instruments
libgsm 1.0-pl22 (GSM 06.10 full-rate codec)
- Licence
- ISC-style permissive (see third_party/libgsm/COPYRIGHT — including the authors' 2009 addendum granting use/copy/modify/distribute for any purpose with or without fee, notice-preservation required).
- Obligations
- keep the copyright notice; no endorsement implied; no warranty.
- Source
- https://www.quut.com/gsm/gsm-1.0.22.tar.gz
JUCE 8.0.14
- Licence
- JUCE commercial licence, STARTER tier (dual AGPLv3 not used).
- Obligations
- stay within the Starter tier's revenue cap (the human reports revenue under $20k, inside it). The tier entitles disabling the splash screen: JUCE_DISPLAY_SPLASH_SCREEN=0 is set in cmake/OrreryPlugin.cmake and is compliant.
- Source
- https://github.com/juce-framework/JUCE
ymfm @ 17decfae (OPL3/YMF262 emulation)
- Licence
- BSD-3-Clause (see third_party/ymfm/LICENSE).
- Obligations
- keep the copyright notice + licence text; no endorsement.
- Source
- https://github.com/aaronsgiles/ymfm
minimp3 @ ea99364f61c1 (MPEG-1 Layer III decode)
- Licence
- CC0-1.0 (see third_party/minimp3/LICENSE — public domain dedication).
- Obligations
- none (public domain). Used: minimp3.h and minimp3_ex.h ONLY — the two headers this project compiles. Nothing else in the fetched tree is included in any build. FLAG: the fetched upstream tree contains files NOT covered by the CC0 dedication above (2026-08-22, D-051 addendum): - third_party/minimp3/player/FreeSans.ttf and its generated companion player/FreeSans.h are GNU FreeSans, **GPLv3**. - third_party/minimp3/vectors/ is ~26 MB of MPEG conformance bitstreams with NO stated redistribution terms. Neither is compiled, linked, or shipped in any Orrery binary, and both are excluded from the epicycle export (see ALLOWLIST.txt — that group ships minimp3.h, minimp3_ex.h, LICENSE, README.md and nothing else). They are, however, present in this repository because bootstrap.sh fetches upstream whole. Flagged here rather than removed: pruning the working clone is the keeper's call.
- Source
- https://github.com/lieff/minimp3
LGPL — corresponding source
Nothing bundled with the instruments today carries a copyleft licence. Until version 1.0.2
the Yumeo MP-3 encoded through LAME, used under the GNU Lesser General Public License v2 as
a replaceable shared library; from 1.0.2 the MP-3 runs on the archive's own MPEG-1 Layer III
engine. The offer travels with the copies already issued: if you hold version 1.0.0 or
1.0.1, you may relink that instrument against your own build of LAME, and the complete
source for the exact version those releases carried is here:
This site
Astro
- Licence
- MIT
- Obligations
- Keep the copyright notice and licence text.
- Source
- https://github.com/withastro/astro
Inter (variable)
- Licence
- SIL Open Font License 1.1 — Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter)
- Obligations
- Reproduce the OFL notice; do not sell the font by itself.
- Source
- https://github.com/rsms/inter
IBM Plex Mono
- Licence
- SIL Open Font License 1.1 — Copyright © 2017 IBM Corp. (https://github.com/IBM/plex)
- Obligations
- Reproduce the OFL notice; do not sell the font by itself.
- Source
- https://github.com/IBM/plex
Services
Paddle (Paddle.com Market Ltd)
- Role
- Merchant of record for every catalogue sale: Paddle operates the checkout, takes payment, and calculates, collects, and remits VAT and sales tax worldwide. Buyers' payment details go to Paddle, never to Orrery.
- Site
- https://www.paddle.com
- Terms
- https://www.paddle.com/legal
Keygen (Keygen LLC)
- Role
- The licensing registrar: issues each certificate of issue (licence key), records the entitlements it covers, and keeps the machine ledger — up to three machines per certificate. The instruments validate certificates against Keygen; the site's machine ledger page speaks to it directly from the buyer's browser, so keys never pass through Orrery's servers.
- Site
- https://keygen.sh
- Terms
- https://keygen.sh/legal/terms/
Cloudflare (Cloudflare, Inc.)
- Role
- Hosts and delivers the whole estate: the website (Pages), the download archive the instruments are borrowed from (R2), and the fulfillment worker that turns a completed purchase into a certificate of issue (Workers + KV). CDN in front of all of it.
- Site
- https://www.cloudflare.com
- Terms
- https://www.cloudflare.com/terms/
Published by the bench
epicycle
- What
-
The bench's own MPEG-1 Layer III encoder — clean-room, written for the
restoration of the Yumeo MP-3 — published as open source.
- Licence
- MIT
- Source
- github.com/orreryarchive/epicycle
Refunds
Paddle, as merchant of record, handles refund requests under its buyer terms. If a refund
is approved, the licence it covered is suspended in the registrar and the instruments stop
authorising at their next consultation. Nothing here limits any statutory right you hold
as a consumer.
Privacy
Who is responsible
Orrery is operated by Matthew Croydon, who is the data controller for the personal data
described here. Write to privacy@orrery.dk.
What is processed, and why
Purchases. Checkout and payment are operated by Paddle.com Market Ltd as
merchant of record. Paddle is an independent controller of the information you provide at
checkout — name, email address, payment details, billing country — under
Paddle's privacy policy. We never see
your payment details; we receive the transaction reference and what was purchased, which
we use to issue your licence.
Licensing. To issue and honour your certificate of issue we process,
with our processor Keygen LLC: your licence key, the entitlements it covers, and — when
an instrument or the machine ledger consults the registrar — a one-way-hashed machine
identifier, your computer's name, its operating system, and activation timestamps. Legal
basis: performance of our contract with you.
Hosting. The website, the download archive, and fulfilment run on
Cloudflare, Inc. (our processor), which processes IP addresses and standard server logs
to deliver and secure the service. Our fulfilment worker stores the transaction reference
and the licence it issued.
Email. If we send your certificate by email, it goes to the address you
provided at checkout, for that purpose only. If you tick the notices box at checkout, we
send one confirmation email; you join the bulletin only if you confirm. The address is
otherwise used solely to deliver your licence. Separately, the archive publishes
occasional notices by email — only to addresses that asked for them and then confirmed
by clicking a link (double opt-in; legal basis: your consent). We record when you asked,
when you confirmed, and the wording you saw; unconfirmed requests are deleted after
thirty days. Every notice carries an unsubscribe link, and withdrawing consent ends the
notices at once. Sending runs through our processor Resend (EU region). Beyond
certificates and notices, we send nothing.
What we do not do
No accounts. No analytics. No advertising or tracking. No sale of personal data.
Cookies
This site sets no cookies. If you open the checkout, Paddle sets cookies that are
strictly necessary to process the purchase; they appear only then, and strictly necessary
cookies require no consent banner.
Retention & transfers
Licence and transaction records are kept for as long as your licence may need honouring;
server logs are short-lived. Keygen and Cloudflare are United States companies; transfers
are covered by their standard data-protection terms.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict,
or receive a copy of your personal data, and to complain to your local data-protection
authority. Write to privacy@orrery.dk and we will
answer.
The fiction, plainly
Orrery is a work of fiction. The restoration house in Copenhagen, its catalogue, its
serials and provenance, the four houses — Salo, Tekura, Yumeo, and Halvyn — and Iver
Sandholm himself are invented, together with their histories and dates. None of them is,
or refers to, a real company or person; any resemblance to real companies, products, or
people is coincidental.
The instruments are real. They are audio plug-ins in the VST3 and Audio Unit formats,
genuinely built, genuinely sold, and genuinely licensed: purchases are real transactions
handled by Paddle, certificates of issue are real licences that are honoured, and the
software does what the catalogue says it does. Only the story around it is a story.
VST is a registered trademark of Steinberg Media Technologies GmbH. Audio Units is a
technology of Apple Inc. macOS is a trademark of Apple Inc.; Windows is a trademark of
Microsoft Corporation.
Materials for the press
This page is generated from the project's licence register so it cannot drift from what
ships. It is a statement of attribution and plain-language privacy practice, not legal
advice.