VA
Volume Audio

Privacy Policy

Last updated: July 27, 2026

1. Data Controller

The party responsible for the processing of personal data that may be collected through this web portal is:

2. Principle of Minimization and Privacy by Design (Manifest V3)

At Volume Audio, we apply a strict zero-tracking policy. The software has been designed under the modern Manifest V3 browser extension architecture. This means that:

  • 100% Local Processing: Digital gain processing, the equalizer, and audio frequencies are executed internally and locally in the user's own browser using the native HTML5 Web Audio API.
  • No Access to History or Audio: The extension does not collect, record, read, store, or sell processed audio, user browsing history, IP addresses, or any other personal data related to online activity.
  • No Telemetry Sent: The web portal does not use tracking cookies or third-party analytical trackers. The extension operates completely isolated from external servers.

3. Payment Management and License Data (ExtensionPay and Stripe)

Volume Audio is distributed under a freemium subscription model. To ensure user security and minimize data retention, we do not store or process billing information or credit cards.

The process of payment, validation, and management of Premium licenses is delegated in its entirety to the following trusted external platforms:

  • ExtensionPay: Service acting as a secure license bridge for browser extensions. It manages the registration of user licenses associated with their email. Please consult the ExtensionPay Privacy Policy.
  • Stripe: Global payment gateway with Level 1 PCI-DSS security certification. Stripe handles direct bank or credit card charge processing in an encrypted manner. Please consult the Stripe Privacy Policy.

The Volume Audio developer only has access to internal purchase identifiers provided by the ExtensionPay API and the customer's email address for Premium license validation and support, never to your bank details.

4. Legal Bases for Processing

In accordance with Article 6 of the EU General Data Protection Regulation (GDPR), the legal basis for processing the user's email during the purchase is:

  • Performance of a contract (Art. 6.1.b GDPR): Necessary to provide, activate, and maintain the functionality of the Premium license purchased by the user.
  • Consent of the data subject (Art. 6.1.a GDPR): In the event that the user sends manual bug reports or queries via support channels.

5. Data Subject Rights (ARCO+ Rights)

The GDPR grants you a series of rights regarding the processing of your personal data. You may exercise them free of charge by sending an email to privacy@volume.audio attaching proof of your identity. Your rights are:

  • Access: To request information about what data we process regarding your Premium license.
  • Rectification: To request the correction of inaccurate data (such as the license email).
  • Erasure (Right to be forgotten): To request the deletion of your account and Premium license record.
  • Restriction: To request a temporary suspension of your data processing.
  • Portability: To request the delivery of your subscription data in a structured format.
  • Objection: To object to processing for reasons related to your particular situation.

Likewise, you have the right to file a complaint with the competent Supervisory Authority (in Spain, the Spanish Data Protection Agency - AEPD at aepd.es).

6. Data Security

We adopt the necessary organizational and technical measures to ensure the cybersecurity of the website and prevent unauthorized alteration, loss, or access. Since the entire payment infrastructure is delegated to secure HTTPS servers from Stripe and ExtensionPay, the risk of data leaks is proactively minimized.