VA
Volume Audio

Privacy Policy

Last updated: July 27, 2026

1. Data Controller

The controller responsible for personal data that may be collected through this web portal is:

2. Minimization Principle and Privacy by Design (Manifest V3)

At Volume Audio, we apply a strict zero-tracking policy. The software has been designed using the modern Manifest V3 browser extension architecture. This means that:

  • 100% Local Processing: Digital processing of gain, Equalizer, and audio frequencies is executed internally and locally in the user's browser via the native HTML5 Web Audio API.
  • No History or Audio Access: The extension does not collect, record, read, store, or sell processed audio, user browsing history, IP addresses, or any other personal data related to online activity.
  • No Telemetry Sent: The web portal does not use tracking cookies or third-party analytical trackers. The extension operates completely isolated from external servers.

3. Payment Management and License Data (ExtensionPay and Stripe)

Volume Audio is distributed under a freemium subscription model. To ensure user security and minimize data retention, we do not store or process billing or credit card information.

The payment, validation, and management process for Premium licenses is entirely delegated to the following trusted external platforms:

  • ExtensionPay: A service acting as a secure license bridge for browser extensions. It manages user license registration associated with their email. See the ExtensionPay Privacy Policy.
  • Stripe: A global payment gateway with PCI-DSS Level 1 security certification. Stripe directly handles encrypted bank or credit card charge processing. See the Stripe Privacy Policy.

The Volume Audio developer only has access to internal purchase identifiers provided by the ExtensionPay API and the customer's email address for Premium license validation and support, never to your bank details.

4. Legal Bases for Processing

In accordance with Article 6 of the EU General Data Protection Regulation (GDPR), the legal basis for processing the user's email address during the purchase is:

  • Contractual performance (Art. 6.1.b GDPR): Necessary to provide, activate, and maintain the functionality of the Premium license purchased by the user.
  • Data subject consent (Art. 6.1.a GDPR): In the event the user submits manual bug reports or inquiries through support channels.

5. Data Subject Rights (ARCO+ Rights)

The GDPR grants you a series of rights regarding the processing of your personal data. You may exercise them free of charge by sending an email to privacy@volume.audio attaching proof of your identity. Your rights are:

  • Access: Request to know what data we process regarding your Premium license.
  • Rectification: Request correction of inaccurate data (such as license email).
  • Erasure (Right to be forgotten): Request the deletion of your account and Premium license registration.
  • Limitation: Request to temporarily suspend the processing of your data.
  • Portability: Request the delivery of your subscription data in a structured format.
  • Opposition: Object to processing based on grounds relating to your particular situation.

Additionally, you have the right to file a complaint with the competent Supervisory Authority (in Spain, the Spanish Data Protection Agency - AEPD at aepd.es).

6. Data Security

We implement necessary organizational and technical measures to ensure the website's cybersecurity and prevent alteration, loss, or unauthorized access. Since all payment infrastructure is delegated to secure HTTPS servers via Stripe and ExtensionPay, the risk of data leaks is proactively minimized.