Privacy Policy

Who we are

Audio Matters | andres.audio is operated by Andrés Navarro (“I”, “me”), an independent creative & audio engineer based in Norway. This site and the tools under the Audio Matters name (Loudness Targets, Delivery Analyzer, and related utilities) are run as a small, solo operation — not a company with a legal department. I take privacy seriously and try to collect as little as I reasonably can.

For any question about this policy or your data, write to hola@andres.audio.

What I collect, and why

Email address (only if you subscribe)

If you enter your email address and check the consent box on a subscribe form, I collect and store your email address so I can send you updates about Audio Matters tools — new releases, the Delivery Specs PDF when it’s ready, and occasional related notes. No tracking, no marketing partners.

Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time — see “Your rights” below.

Email address and message (if you contact me)

If you email hola@andres.audio or use a contact form, I keep the email content in my inbox so I can reply and follow up. Legal basis: my legitimate interest in responding to inquiries (GDPR Art. 6(1)(f)).

License information (Delivery Analyzer and paid tools)

When you activate a license, I store the email address tied to that license, the activation status, and a hashed machine fingerprint (not the hardware itself — a one-way hash). This is used to validate activations and prevent abuse. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

Server logs

My hosting provider (Vercel) records standard server logs — IP address, timestamp, requested URL, user agent — for security and debugging. These are retained for a short window by Vercel and I don’t personally inspect or analyze them unless something breaks. Legal basis: legitimate interest in keeping the site secure and working (GDPR Art. 6(1)(f)).

What I don’t do

No ad tracking. No third-party analytics beacons on the Audio Matters tools at the time of writing. No selling or renting of your data. No “enriching” your email with outside profile data.

Who processes your data on my behalf

To actually run the site and the email list, I use a small number of service providers (“processors”). They act on my instructions and under their own privacy terms:

• Resend — sends welcome and update emails, stores the subscriber list. Based in the US. Acts as a processor. Resend privacy policy.
• Vercel — hosts the website, runs the API endpoints, and provides cookie-less web analytics (aggregate page views and anonymous custom events — no personal identifiers, no cross-site tracking). Based in the US. Vercel privacy policy.
• Cloudflare — DNS and network layer for andres.audio. Cloudflare privacy policy.
• Upstash — Redis database used to store license records for paid tools (email, plan, activation state). Upstash privacy policy.

Transfers outside the EEA are covered by Standard Contractual Clauses and/or the providers’ own certified frameworks.

How long I keep data

• Subscriber email: until you unsubscribe, or until I shut the list down. I also periodically remove addresses that have been inactive for a long time.
• Contact emails: kept in my inbox as long as they’re useful for the conversation or for audit. You can ask me to delete a thread.
• License records: kept for the life of the license plus a reasonable period for support and accounting.
• Server logs: retained by Vercel according to their defaults (typically around a month).

Your rights

Under GDPR and equivalent laws, you have the right to:

• Access the personal data I hold about you.
• Ask me to correct data that’s wrong.
• Ask me to delete your data (“right to be forgotten”).
• Withdraw your consent to email updates at any time — either by clicking “unsubscribe” in any email, going to /unsubscribe, or emailing me.
• Ask for a copy of your data in a portable format.
• Object to processing based on legitimate interest.
• Lodge a complaint with a data protection authority. In Norway, that’s Datatilsynet.

The fastest way to exercise any of these is to email hola@andres.audio. I’ll reply within a reasonable time — usually within a few days.

Cookies

I don’t set marketing cookies. The site may use minimal technical cookies required to keep things working (for example, session preferences). If that changes I’ll update this page and, where required, ask for consent.

Children

This site isn’t aimed at children under 16, and I don’t knowingly collect their data. If you think a minor submitted data to the site, write to me and I’ll delete it.

Changes to this policy

If this policy changes in a meaningful way, I’ll update the “Last updated” date at the top. For material changes affecting subscribers, I’ll also send a note by email.