Privacy Policy
Last updated: August 12, 2026
1. Controller
The controller responsible for data processing described here is:
Justin Felix Schöllmann
Ostertorwall 23a
31785 Hameln, Germany
Email: justin@jfs-audio.com
For anything related to your personal data — access, correction, deletion, or questions about this policy — email us at the address above. We handle these requests manually and respond within one month, as required by the GDPR.
2. What SoundDeck is and how this policy applies
SoundDeck is an audio production suite with a desktop app, a mobile app, and this website. The same account works across all three. This policy covers all three surfaces together, since they share one backend and one account system.
3. Data we process, and why
3.1 Account data
When you create a SoundDeck account (on the website, in the desktop app, or in the mobile app), we store:
- Email address — used as your login identifier and to send account-related emails (e.g. password reset).
- Password — never stored in plain text; only a salted bcrypt hash is kept, which cannot be reversed to recover your password.
- Username / display name — how you appear inside the app.
- Your projects and audio files — the content you create and upload while using SoundDeck, so it can sync across your devices.
Legal basis: performance of a contract with you (Art. 6(1)(b) GDPR) — we need this data to provide the account and sync features you sign up for.
3.2 Signing in with Google
If you choose "Continue with Google" instead of a password, Google shares your email address, name, and whether your email is verified with our backend, so we can create or recognize your account. We never see or store your Google password. This exchange is handled by Google Identity Services / Google Sign-In; see Google's Privacy Policy for how Google itself processes data.
Legal basis: your consent, given by choosing this sign-in method (Art. 6(1)(a) GDPR).
3.3 Password reset
If you request a password reset, we generate a single-use link valid for one hour and email it to you. We do not log or retain the contents of that email beyond what's needed to send it.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in keeping your account secure (Art. 6(1)(f) GDPR).
3.4 Crash and performance reporting
Both the desktop and mobile apps use GlitchTip, an error-tracking service, to automatically report crashes and performance data when something goes wrong. This can include: device/OS information, app version, IP address, and a technical snapshot (stack trace) of the error. This helps us find and fix bugs — it is not used for advertising or profiling.
Legal basis: our legitimate interest in keeping the app stable and secure (Art. 6(1)(f) GDPR).
3.5 The website itself
This website does not use cookies, analytics, or advertising
trackers. When you sign in on the website, your session token is
kept in your browser's localStorage (not a cookie) so
you stay signed in — this is strictly necessary for the account
feature to work and is never used for tracking.
4. Who we share data with
We use a small number of service providers ("processors") to run SoundDeck. They may only use your data to provide their service to us, not for their own purposes.
| Provider | Purpose | Data involved |
|---|---|---|
| Render | Backend hosting (API, account database, file storage) | Account data, uploaded projects/audio, technical connection data |
| Hostinger | Website hosting | Standard web server connection data |
| Google Ireland Ltd. | Optional "Continue with Google" sign-in | Email, name, profile info — only if you use this sign-in method |
| GlitchTip | Crash / error reporting for the apps | Device info, app version, IP address, error details |
| Email provider (to be finalized) | Sending password-reset emails | Your email address, reset link |
Some of these providers may process data outside the EU/EEA (e.g. in the United States). Where that's the case, we rely on their standard contractual clauses or an equivalent safeguard recognized under GDPR Art. 46.
We do not sell your data, and we do not share it for advertising purposes.
5. How long we keep your data
- Account data — kept as long as your account exists.
- Login sessions — expire automatically after 30 days.
- Password reset links — expire after 1 hour, or immediately after use.
- Crash reports — retained per GlitchTip's standard retention period.
6. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Delete your account and associated data ("right to be forgotten");
- Restrict or object to certain processing;
- Receive a copy of your data in a portable format;
- Complain to a data protection supervisory authority — in Germany, the authority responsible for the state you live in.
To exercise any of these rights, email justin@jfs-audio.com. As a small, independently-run project, requests are currently handled manually rather than through a self-service tool — we still process them within the one-month period required by law.
7. Children
SoundDeck is not directed at children under 16. We do not knowingly collect data from children under this age.
8. Changes to this policy
As SoundDeck evolves (for example, when subscriptions and payments launch), this policy will be updated to reflect any new data we process. We'll update the date at the top of this page when that happens.