Privacy policy.

Florian Schären, operating as Wavaudiolab (sole proprietorship), Rue du Nord 1, 1180 Rolle, Switzerland. This is the data controller for everything described here.

For anything on this page — access, correction, deletion, or a complaint — wavaudiolab@gmail.com reaches a real person, not a ticket queue.

Browsing this site. Nothing is collected about you. There is no analytics, no advertising, no tracking pixels, and no third-party scripts profiling visitors. The site stores a small amount of data in your own browser (your language choice, what's in your cart, whether you asked the Studio to remember your email) — that stays on your device, is never transmitted anywhere, and is cleared when you clear your browser data.

Buying a sample pack. Checkout is handled entirely by Stripe, on Stripe's own hosted page. Stripe collects your email address, payment details, and billing country. Card numbers never reach this site or any server of ours. What comes back is your email address, the amount, and which packs you bought — needed to complete the sale, issue a receipt, and answer questions about your order later. Legal basis: performance of a contract.

Using the Studio. Creating an account stores your name, email address, and either a password (hashed — never visible to us in plain text) or the fact that you signed in with Google. Starting a project stores what you put in the brief: artist name, track titles, genre, the service you want, notes, reference links, and the links you supply to your own audio files, plus any messages exchanged and the invoice details for that project. Legal basis: performance of a contract.

Audio files. Your audio is not uploaded to this site. You share it via your own link (WeTransfer, Drive, Dropbox, whatever you use), and that link is what gets stored. Delivered masters work the same way in reverse.

The free tools. The loudness meter, converter, and the rest of the tools on /tools run entirely inside your browser. Audio you drop into them is never uploaded, never leaves your machine, and is never seen by anyone including us. The same goes for the ear-training drills on /training: your best scores are kept in your own browser's storage and are never sent to us.

Emailing or messaging. If you get in touch, the contents of that conversation and your contact details are kept so the conversation can continue. Legal basis: legitimate interest in answering people who write in.

These are the only third parties involved. Each one handles data strictly on instructions, under a data processing agreement, and none of them are permitted to use it for their own purposes.

• Stripe (Stripe Payments Europe Ltd., Ireland) — payment processing for sample packs.
• Google Firebase (Google Ireland Ltd.) — Studio accounts and project data. The database is hosted in the EU (Belgium, europe-west1).
• EmailJS — sends the notification emails the Studio triggers (new brief received, master ready, and similar).
• Vercel (Vercel Inc.) — hosting for this site and the Studio. Vercel processes standard server request data, including IP addresses, as part of serving pages and defending against abuse.
• File hosting — purchased sample packs are served from a cloud storage link. Downloading a pack means requesting a file from that provider.

Your data is never sold, rented, or shared with anyone for marketing. There is no mailing list.

Some of the providers above are US-headquartered and may process data outside Switzerland and the EEA. Where that happens, it is covered by the European Commission's Standard Contractual Clauses together with the Swiss addendum recognised by the FDPIC, or by an adequacy decision. Your own project data in the Studio is stored in the EU.

• Order and accounting records: 10 years, as Swiss commercial law requires (Art. 958f Code of Obligations). This one can't be shortened on request.
• Studio account and projects: kept while your account exists. Delete the account from Settings inside the Studio and the account and its data go with it — apart from anything that falls under the accounting retention above.
• Emails and messages: kept as long as they're useful for the working relationship, then deleted.

Under the Swiss Federal Act on Data Protection and, where it applies to you, the GDPR, you can ask for: a copy of the data held about you; correction of anything wrong; deletion; restriction of processing; a portable copy; and you can object to processing based on legitimate interest. Exercising any of these is free and does not need a reason.

Email wavaudiolab@gmail.com and you'll get an answer within 30 days. If you think something has been handled wrongly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or to your own national data protection authority if you're in the EU/EEA.

This site sets no tracking or advertising cookies, and there is no consent banner because there is nothing to consent to. The only data stored in your browser is the strictly functional kind described above — your language, your cart, your session in the Studio. Third-party embeds you choose to open inside the Studio (a YouTube, Spotify, or SoundCloud reference link) may set their own cookies once loaded; those are governed by their own policies.

Payments are handled entirely by Stripe and never touch this site's servers. Studio accounts are authenticated through Firebase Authentication, and access to project data is restricted to the account that owns it and the studio engineer. Everything is served over HTTPS. No system is perfect, but nothing is stored that doesn't need to be.

If this policy changes, the date at the top changes with it. Material changes affecting Studio clients will be raised directly rather than quietly edited in.