1. Data controller
The personal data controller is the service operator (complete company details before launch). Contact: kontakt@slowedandreverb.pl.
2. Categories and purposes
Account data: username, email, securely hashed password, and the declared private or commercial account use and chosen purpose. These declarations are visible to the service administrator for account and service planning; they do not automatically trigger billing. Library data: track titles, genres, playlists, cover images, audio files, playback settings, timestamps and favorites. Technical data: IP addresses and server logs for security and diagnostics. Processing is necessary to provide the account service (GDPR Art. 6(1)(b)), to maintain security and defend claims (Art. 6(1)(f)), and where applicable to comply with legal obligations (Art. 6(1)(c)).
3. File handling
Editing is carried out in your browser. When a registered user chooses Save, the selected audio file, optional cover image and metadata are transmitted to the service for private encrypted storage. Stored audio and covers are accessible to the authenticated owner through protected endpoints and, for justified operational or legal purposes, authorized administrators. They are not shared in a public catalogue. Users are responsible for the rights to material they provide.
4. Optional guest sample and support
Guests may voluntarily opt in to sending an audio sample (up to 10 MB) for internal review. This does not happen by default. Only the last ten opted-in samples are stored encrypted; samples are scheduled for removal after about 24 hours. The operator can access the samples. Contact form entries (name, email, message) are kept in the WordPress Support panel until handled and sent to the designated support inbox. Simple, first-party usage statistics are kept as aggregate daily counters.
5. Retention
Account and library data are retained while an account is active or until the user deletes a track or asks for account deletion, subject to legal retention duties. Security logs are retained according to the hosting provider's retention policies. User preferences saved locally in the browser can be removed by clearing site data.
6. Recipients and transfers
Hosting and infrastructure providers may process data as processors to operate and secure the service. The audio editor does not require transmitting files to an external conversion API. An optional third-party MP3 encoder script may be downloaded from a CDN when MP3 export is selected; this request can expose standard technical metadata to the CDN provider. No transfer outside the EEA is guaranteed absent vendor verification.
7. Your rights
You may request access to, rectification or deletion of data, restriction, portability or object where applicable. You can complain to the Polish data protection authority (UODO). You may contact the operator via kontakt@slowedandreverb.pl. Account creation is voluntary, but certain data are necessary to provide account functions.
8. Security and cookies
The service uses essential login and security cookies and browser preferences. Private files are stored encrypted and retrieved via authenticated endpoints. We do not claim absolute security. Additional analytics or marketing technologies, if ever introduced, require separate review of legal obligations and consent where applicable.
Version: 2 November 2026.