Privacy policy
Last updated
This privacy policy explains how Notify Sound ("we", "us", "our"), the operator of notifysound.com, handles personal data when you visit this website or use the Notify Sound editor.
It follows the EU General Data Protection Regulation (GDPR), Regulation 2016/679.
1. Data controller
The data controller responsible for your personal data is Notify Sound.
Website: https://notifysound.com
2. Your sounds stay in your browser
The Notify Sound editor runs entirely in your browser. Sounds are built, played and turned into sound files on your device. We never receive the sounds you make.
When you share a link, the sound is stored in the part of the link after the # sign. Browsers do not send that part to our server, so we do not see it. Anyone you give the link to can open the sound.
3. Server log data
When you visit this site, our hosting provider automatically records:
- IP address
- Browser type and version
- Referring URL
- Pages requested and the time of each request
Purpose: keeping the website secure, stable and working, including protection against denial-of-service attacks.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in running a secure and working public website.
Retention: log data is kept for a limited time in line with the hosting provider's retention schedule, then deleted automatically.
Our hosting provider processes this data on our behalf under a data processing agreement. If you need the name of the provider to use one of your rights, ask us using the contact details in section 1 and we will tell you.
4. Fonts
Pages on this site load the Inter font from Google Fonts, a service of Google LLC. To send the font, Google receives your IP address and basic browser details.
Purpose: showing the site in a consistent, readable font.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in a consistent and readable design.
Recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
International transfer: this data may be processed in the United States. Google LLC is certified under the EU-US Data Privacy Framework (Decision 2023/1795), which gives an adequate level of protection under Art. 45 GDPR.
5. Cookies, analytics and browser storage
This site uses Google Analytics 4, a service of Google LLC, to count visits and see which pages and features people use. Google Analytics is optional and sets its cookies only after you accept them:
_ga: tells visits apart. Kept for 2 years.-
_ga_<ID>: keeps the state of your current visit. Kept for 2 years.
The Google tag loads on every page in Google Consent Mode. Until you accept, it sets no cookies and sends Google only cookieless signals without any identifier: the page, the browser type and the time of the visit. After you accept, Google also receives the cookie identifiers above. Google receives your IP address in both cases. Google Analytics 4 does not log or store IP addresses. Advertising and ad personalisation stay off at all times.
Purpose: understanding how the site is used so we can improve it.
Legal basis: your consent (Art. 6(1)(a) GDPR) for the analytics cookies, and legitimate interests (Art. 6(1)(f) GDPR) in measuring and improving the site for the cookieless signals.
Recipient and transfer: Google LLC, as described in section 4. Read how Google uses cookies
A cookie bar at the bottom of the page asks for your choice. Press Accept to
allow the analytics cookies, or Necessary only to refuse them. Your
browser's local storage keeps your choice as the entry
cookieConsent so the bar does not come back. It stays on your
device and is never sent to us. Cookie settings in the page footer opens the
bar again, so you can change or withdraw your consent at any time. Rejecting
after an earlier acceptance also deletes the analytics cookies.
The editor keeps your saved sounds and a few settings in your browser's local storage, so your work is still there next time. This storage is required for the editor to work and needs no consent. This data stays on your device and is never sent to us.
You can remove cookies and local storage at any time by clearing site data in your browser, and you can block cookies in your browser settings. Your saved sounds are removed with the site data, and we cannot bring them back.
6. Contact by email
If you email us, we process your email address and the content of your message.
Purpose: answering your message.
Legal basis: steps before or under a contract (Art. 6(1)(b) GDPR), or legitimate interests (Art. 6(1)(f) GDPR) where no contract is involved.
Retention: as long as needed to answer your message, and at most 2 years after that.
7. Data we do not process
- We do not create user accounts or store registration data.
- We do not run a newsletter or mailing list.
- We do not use tracking pixels or advertising cookies.
- We do not show ads or use your data for targeted advertising.
- We do not receive, store or listen to the sounds you make.
- We do not sell or rent personal data to anyone.
- We do not use automated decision-making or profiling as defined in Art. 22 GDPR.
8. Who receives personal data
We share data only with:
- Our hosting provider, as described in section 3.
- Google LLC, as described in sections 4 and 5.
We do not share personal data with anyone else.
9. Your rights under the GDPR
You have the following rights. You can use them free of charge by emailing us at the address in section 1.
- Right of access (Art. 15): ask whether we process your personal data and get a copy of it.
- Right to rectification (Art. 16): ask us to correct wrong or incomplete personal data.
- Right to erasure (Art. 17): ask us to delete your personal data when it is no longer needed or you have withdrawn consent.
- Right to restriction of processing (Art. 18): ask us to limit how we use your data in certain cases, for example while its accuracy is checked.
- Right to data portability (Art. 20): where processing is based on consent or a contract and done by automated means, get your data in a structured, machine-readable format.
- Right to object (Art. 21): object at any time to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds that override your interests.
- Right to withdraw consent: where processing is based on consent, withdraw it at any time. This does not affect processing done before.
We will answer your request within 30 days. If we cannot do what you ask, we will explain why.
10. Right to lodge a complaint
If you believe we have processed your personal data in breach of the GDPR, you can lodge a complaint with a data protection supervisory authority in the EU country where you live, work, or where the breach happened.
We would appreciate the chance to sort out your concern directly before you contact an authority.
11. Data security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss or destruction. The site is served only over HTTPS.
12. Changes to this policy
We may update this policy when our practices or the law change. When we make an important change, we update the "Last updated" date at the top of this page. Please check back from time to time.
13. Contact
For any privacy question, or to use your rights, contact: