Privacy Policy
Last updated 16 August 2026
SloWave Studio is built to need as little about you as possible. There are no accounts, no passwords, no advertising, and no third-party tracking scripts. This page describes exactly what is collected and what is not.
What we do not collect
- No account, username or password — there is nothing to sign up for.
- No third-party analytics, no Google Analytics, no advertising or social trackers, and no tracking cookies.
- No per-visitor identifier of any kind. We cannot follow you between visits and we have not built the ability to.
- No card details. Payment happens on Stripe's own checkout page and card data never reaches our server.
Your audio
Audio you upload or record is sent to our server, processed, and returned to you.
- The file you sent is deleted the moment processing finishes — whether the render succeeded or failed.
- The rendered file is deleted within 24 hours.
- Nobody listens to it, it is never made public, and it is never used to train or improve anything.
- Share links contain effect settings only — numbers describing a sound. They never contain your recording.
Because of this, a request to delete your audio is usually already satisfied by the time it reaches us.
Your email address
If you buy a render credit or a subscription, we store your email address alongside the key it belongs to. It is used for two things:
- sending you the key you paid for;
- letting you restore that purchase on another device, and adding to it if you buy again.
We do not send marketing email and there is no mailing list. Email is delivered through an SMTP provider that handles the message in transit.
Payment information
Payments are processed by Stripe. We receive confirmation that a payment succeeded, the email address you gave at checkout, and identifiers for the purchase and subscription. We never receive your card number. Stripe's handling of your data is governed by their privacy policy.
Technical information
- IP address. Used to apply rate limits so one visitor cannot exhaust the service for everyone. It is held in memory only, for a short window, and is never written to disk or associated with your files or your email.
- Event counts. We keep daily totals of a handful of events — a page view, an upload, a render started, a render downloaded. These are counters: a number against a date, with no identifier of any kind attached. We can tell that forty renders happened yesterday. We cannot tell who did any of them.
- Server logs. Ordinary web-server logs are produced in the normal course of running the site and are rotated. Purchase keys are deliberately redacted from them.
- Browser storage. Your key, your effect settings and your last track are stored in your own browser, so the page survives a refresh. That data lives on your device, not ours, and clearing your browser data removes it.
Who your data is shared with
Nobody, except the services needed to run the site: Stripe for payments, our email provider for delivering your key, and Cloudflare, which sits in front of the site and sees requests in transit. We do not sell data and we have nothing to sell.
Where your data is held
The service is operated from Australia. Stripe and Cloudflare are international services and may process data outside Australia in the course of providing them.
How long anything is kept
- Uploaded audio — deleted immediately after processing.
- Rendered audio — deleted within 24 hours of being produced.
- Email address and purchase key — kept while the purchase is valid, so you can restore it. Ask us and we will delete it.
- Daily event counts — kept as aggregates, with no way to link them to a person.
Your rights
You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. In practice the only thing we are likely to hold is an email address and a purchase key, and deleting it will invalidate any credits attached to it — tell us if that is what you want.
If you are in the EU or UK, the same requests are your rights under the GDPR. If you are in Australia, they are your rights under the Australian Privacy Principles. Either way, email us.
Children
The Service is not directed at children under 13 and we do not knowingly collect anything from them.
Changes
If this policy changes, the date at the top changes with it.