VA
Volume Audio

Privacy Policy

Last updated: 27 July 2026

1. Data Controller

The party responsible for the processing of personal data that may be collected through this website portal is:

2. Minimization Principle and Privacy by Design (Manifest V3)

At Volume Audio we apply a strict zero-tracking policy. The software has been designed using the modern Manifest V3 architecture for browser extensions. This means that:

  • 100% Local Processing: Digital processing of gain, Equalizer, and audio frequencies is executed internally and locally in the user's browser using the native HTML5 Web Audio API.
  • No Access to History or Audio: The extension does not collect, record, read, store, or sell processed audio, user browsing history, IP addresses, or any other personal data related to online activity.
  • No Telemetry Sent: The website portal does not use tracking cookies or third-party analytical trackers. The extension operates completely isolated from external servers.

3. Payment Management and Licence Data (ExtensionPay and Stripe)

Volume Audio is distributed under a freemium subscription model. To ensure user security and minimize data retention, we do not store or process billing or credit card information.

The process of payment, validation, and management of Premium licences is delegated entirely to the following trusted external platforms:

  • ExtensionPay: Service acting as a secure licence bridge for browser extensions. Manages the user's licence registration associated with their email. Please consult the ExtensionPay Privacy Policy.
  • Stripe: Global payment gateway with Level 1 PCI-DSS security certification. Stripe handles direct bank or credit card charge processing in an encrypted manner. Please consult the Stripe Privacy Policy.

The Volume Audio developer only has access to internal purchase identifiers provided by the ExtensionPay API and the customer's email for Premium licence validation and support, never your bank details.

4. Legal Basis for Processing

In accordance with Article 6 of the EU General Data Protection Regulation (GDPR), the legal basis for processing the user's email during purchase is:

  • Contractual execution (Art. 6.1.b GDPR): Necessary to provide, activate, and maintain the functionality of the Premium licence purchased by the user.
  • Data subject consent (Art. 6.1.a GDPR): In the event that the user sends manual bug reports or inquiries through support channels.

5. Data Subject Rights (GDPR Rights)

The GDPR grants you a series of rights regarding the processing of your personal data. You can exercise them free of charge by sending an email to privacy@volume.audio attaching proof of your identity. Your rights are:

  • Access: Request to know what data we process regarding your Premium licence.
  • Rectification: Request correction of inaccurate data (such as the licence email).
  • Erasure (Right to be Forgotten): Request the deletion of your account and Premium licence record.
  • Restriction: Request to temporarily suspend the processing of your data.
  • Portability: Request the delivery of your subscription data in a structured format.
  • Objection: Object to processing for reasons based on your particular situation.

Likewise, you have the right to lodge a complaint with the relevant Supervisory Authority (in Spain, the Spanish Data Protection Agency - AEPD at aepd.es).

6. Data Security

We adopt the necessary organizational and technical measures to ensure the cybersecurity of the website and prevent alteration, loss, or unauthorized access. Since the entire payment infrastructure is delegated to secure HTTPS servers from Stripe and ExtensionPay, the risk of leaks is proactively minimized.