Privacy Policy

1. Information we collect

We collect different types of information depending on how you use UnstuntedSFX:

We do not collect or store:

• Full credit card numbers (Stripe handles all payment data)
• Microphone audio from hum-to-search (see Section 2)
• Browsing activity on other websites
• Data from contacts, files, or other apps on your device

2. Microphone and audio data

Our hum-to-search feature requests temporary access to your device microphone. Here is exactly what happens:

• Audio is captured only while you hold the search button
• Audio is analyzed in real-time to extract frequency patterns
• Frequency data is compared against our sound library to find matches
• The raw audio stream is discarded immediately after processing

We never record, store, transmit, or sell your voice or audio data. The microphone permission can be revoked at any time through your browser settings.

3. How we use your information

We use collected data strictly to:

• Provide core functionality (authentication, downloads, project saving)
• Enforce plan limits (daily download quotas, hum-search quotas)
• Process payments and manage subscriptions via Stripe
• Send transactional emails (receipts, password resets, account changes)
• Prevent abuse and protect the service from bots and fraud
• Respond to support requests

We do not use your data for advertising, profiling, or behavioral targeting.

4. Data sharing

We do not sell, rent, or trade your personal data. We share data only with third-party services required to operate UnstuntedSFX:

Each provider is bound by their own privacy policies and data processing agreements. We do not share data with any other third parties.

5. Cookies and local storage

UnstuntedSFX uses minimal cookies and local storage:

The auth, theme, and bot-detection items above are strictly necessary and are always active. The only non-essential cookies we use are Google Analytics cookies, and they are not set unless you click “Accept” on our cookie banner. Until you accept (or if you decline), Google Analytics runs in consent-denied mode and sets no cookies. You can change your choice at any time by clearing the usfx_cookie_consent value in your browser’s site settings. We do not use advertising pixels or behavioural-advertising cookies of any kind.

6. Data retention

• Account data: Retained for as long as your account is active. Deleted within 30 days of account deletion.
• Download history: Retained for as long as your account is active.
• Payment records: Retained by Stripe per their policies and as required by tax/financial regulations.
• Server logs: IP and request logs retained by Cloudflare per their standard retention periods.

7. Your rights

Regardless of where you live, you can:

• Access your personal data — email us and we'll provide a copy
• Correct inaccurate data — update your profile in settings, or email us
• Delete your account and data — use the account deletion option in your dashboard, or email us
• Export your data — email us and we'll provide a machine-readable export

For EU/EEA residents (GDPR)

Under the General Data Protection Regulation, you have additional rights:

• Legal basis: We process your data based on (a) your consent when creating an account, (b) contractual necessity to provide the service, and (c) legitimate interest for security and abuse prevention.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to object: You can object to processing based on legitimate interest.
• Right to portability: You can request your data in a structured, machine-readable format.
• Right to lodge a complaint: You may contact your local data protection authority if you believe your rights have been violated.

Our data processing is conducted in the United States via Google Cloud (Firebase) and Cloudflare infrastructure.

For California residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how it's used (see Sections 1-4 above)
• Delete your personal information
• Opt out of the sale of personal information — we do not sell personal information, so there is nothing to opt out of
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise any of these rights, email [email protected] with "Privacy Request" in the subject line. We will respond within 30 days.

8. Children's privacy

UnstuntedSFX is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

9. Security

We protect your data through:

• HTTPS encryption on all connections
• Firebase Authentication with secure token management
• Stripe PCI-DSS compliant payment processing
• Cloudflare DDoS protection and WAF
• Firestore security rules that restrict data access to authenticated users

No system is 100% secure. If we discover a breach that affects your data, we will notify you within 72 hours as required by GDPR.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or by placing a notice on the site. Your continued use of UnstuntedSFX after changes take effect constitutes acceptance of the updated policy.

11. Data controller & contact

The data controller responsible for your personal data is [[LEGAL ENTITY NAME]], [[BUSINESS ADDRESS]].

Questions about this policy? Email [email protected] with "Privacy" in the subject line.