VA
Volume Audio

Privacy Policy

Last updated: 27 July 2026

1. Controller

The party responsible for the processing of personal data that may be collected through this web portal is:

2. Principle of Minimisation and Privacy by Design (Manifest V3)

At Volume Audio, we enforce a strict zero-tracking policy. The software has been designed using the modern Manifest V3 browser extension architecture. This means that:

  • 100% Local Processing: The digital processing of gain, the Equalizer, and audio frequencies is executed internally and locally on the user's browser using the native HTML5 Web Audio API.
  • No Access to History or Audio: The extension does not collect, record, read, store, or sell processed audio, user browsing history, IP addresses, or any other personal data related to online activity.
  • No Telemetry Transmission: The web portal does not use tracking cookies or third-party analytical trackers. The extension operates completely isolated from external servers.

3. Payment Management and Licence Data (ExtensionPay and Stripe)

Volume Audio is distributed under a freemium subscription model. To ensure user security and minimise data retention, we do not store or process billing information or credit card data.

The process of payment, validation, and management of Premium licences is entirely delegated to the following trusted external platforms:

  • ExtensionPay: A service acting as a secure licence bridge for browser extensions. It manages user licence registration linked to their email address. Please refer to the ExtensionPay Privacy Policy.
  • Stripe: A global payment gateway with PCI-DSS Level 1 security certification. Stripe is responsible for directly processing bank or credit card charges in an encrypted manner. Please refer to the Stripe Privacy Policy.

The Volume Audio developer only has access to internal purchase identifiers provided by the ExtensionPay API and the customer's email address for Premium licence validation and support, never to your bank details.

4. Legal Bases for Processing

In accordance with Article 6 of the EU General Data Protection Regulation (GDPR), the legal basis for processing the user's email during purchase is:

  • Performance of contract (Art. 6.1.b GDPR): Necessary to provide, activate, and maintain the functionality of the Premium licence acquired by the user.
  • Data subject consent (Art. 6.1.a GDPR): In the event that the user submits manual error reports or queries via support channels.

5. Data Subject Rights (ARCO+ Rights)

The GDPR grants you a series of rights regarding the processing of your personal data. You may exercise them free of charge by sending an email to privacy@volume.audio attaching proof of your identity. Your rights are:

  • Access: To request to know what data we process regarding your Premium licence.
  • Rectification: To request the correction of inaccurate data (such as the licence email).
  • Erasure (Right to be Forgotten): To request the deletion of your account and Premium licence record.
  • Restriction: To request a temporary suspension of your data processing.
  • Portability: To request the delivery of your subscription data in a structured format.
  • Objection: To object to processing for reasons related to your particular situation.

Likewise, you have the right to lodge a complaint with the relevant Supervisory Authority (in Spain, the Spanish Data Protection Agency - AEPD at aepd.es).

6. Data Security

We adopt the necessary organisational and technical measures to ensure the cybersecurity of the website and prevent alteration, loss, or unauthorised access. Given that all payment infrastructure is delegated to secure HTTPS servers via Stripe and ExtensionPay, the risk of data leakage is proactively minimised.