Privacy Policy

Last updated: 15 September 2026

Controller

Marcus Bornold, sole proprietorship trading as Saltwaves Studio, Oskarsparken 6, 702 12 Örebro, Sweden. Contact: hello@saltwaves.studio

What we collect

We process your email address, uploaded audio, file and job details, and delivery status to provide the mastering service. If you create an account, we also process your account and sign-in details and subscription status. Service providers may process technical connection and security logs.

Free tier

You can upload without creating an account. Your email address and job details are stored temporarily in our Supabase job queue to process and deliver your file. Free audio uploads go directly to our own hardware.

Retention

Download links expire 48 hours after processing completes. Working copies are removed when processing finishes. Original uploads, original-audio previews and mastered files are removed by scheduled cleanup. Link expiry and physical deletion are separate: cleanup runs periodically and may be delayed while a failed cleanup is retried. Paid cloud inputs are cleaned up separately after their job finishes, fails or expires. Download and keep your own copy; the service is not an audio archive.

Where processing happens

Audio processing runs on our own hardware within the EU. Creator, Studio and Founding uploads use private Supabase Storage in Frankfurt as temporary input storage before our hardware retrieves the file for processing. Completed, cancelled and expired cloud inputs are removed by automatic cleanup. Mastered files are served from our own hardware.

Paid accounts

Account details are stored to provide the service. Stripe handles checkout, billing and payment records under its own privacy terms and applicable data-protection roles. Stripe may process data outside the EU. Its privacy policy describes the safeguards used for international transfers.

Sign-in and email providers

Google processes sign-in information when you choose Google sign-in. Supabase stores account and job information. Resend handles sign-in and delivery emails. If you submit an updates or spec-sheet form, your email is passed to MailerLite for that requested communication. Payment and account records have retention requirements separate from audio files.

Browser tools and previous analytics

Loudness Inspector processes audio in your browser. Its optional analytics collection is paused. Earlier versions recorded tool events, audio-level measurements, duration, selected targets and referrer information in Supabase, and used a 30-day first-party cookie to attribute later usage. Pausing collection does not itself delete previously stored events. Contact us about access or deletion of personal data.

Your rights under GDPR

Access, rectification, erasure, data portability, restriction and objection. Send requests to hello@saltwaves.studio. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Cookies

Sign-in uses cookies needed to operate your account. Loudness Inspector no longer sets its optional first-touch analytics cookie or sends new measurement events. Its updated code removes the old marker when invoked. Any future optional analytics will need a separate choice before activation.

Data Processing Agreement

A Data Processing Agreement under GDPR Article 28 is available to business customers on request.