Privacy Policy

Last updated: 30 July 2026

Sweet Decibels limits personal-data processing to what is needed to run this website, respond to requests, provide products and licences, send the newsletter when requested, and understand aggregate website use. Sweet Decibels does not sell personal data.

Who is responsible for your data?

Sweet Decibels SAS is the data controller for the processing described in this policy, except where a named provider acts as an independent controller for its own services.

Sweet Decibels SAS
176 rue du 4 Septembre
77810 Thomery
France

Privacy questions and requests can be sent through the contact form. Sweet Decibels has not appointed a Data Protection Officer.

Website hosting and security

The website is hosted by OVH SAS in France. Standard hosting logs may contain technical information such as an IP address, request date and time, requested page or file, browser information, and error data. These logs are used to deliver and secure the website, investigate faults, prevent abuse, and meet applicable legal obligations. This processing is based on Sweet Decibels' legitimate interest in operating a secure and reliable website.

Sweet Decibels does not export hosting logs for separate long-term storage. OVHcloud retains service logs according to the applicable hosting terms and legal requirements. Read the OVHcloud personal-data information .

The website's fonts, images, styles, and other design assets are hosted locally. Opening a page does not contact an external font provider.

Your privacy choices

Cookie-free audience measurement is enabled by default. You can object and switch it off at any time through the Cookie settings link in the footer. External media and marketing services remain disabled until you allow them. Reject all disables analytics and every optional service.

The necessary sweet_decibels_consent cookie stores the consent version, the date of your decision, and the categories you allowed. It does not directly identify you and expires after six months. If a browser blocks cookies, the same preference may be kept in local browser storage instead. When analytics is disabled, the website may also store an umami.disabled opt-out flag locally. These preferences are strictly necessary to remember and apply your choices.

Audience measurement

Sweet Decibels uses the EU-hosted version of Umami Cloud to understand aggregate website visits and improve navigation and product information. Only standard page-view measurement is used. Sweet Decibels does not enable custom events, distinct visitor identifiers, heatmaps, session replay, revenue tracking, or user profiling.

Umami processes technical information such as the page visited, referrer, browser, operating system, device type, screen size, language, approximate location, and anonymous session information. The visitor's IP address may be used to derive approximate location but is not stored by Umami. URL search parameters and fragments are excluded, tracking is limited to the Sweet Decibels production domains, and browser Do Not Track settings are respected.

Sweet Decibels does not send names, email addresses, customer account identifiers, order identifiers, payment information, or licence information to Umami. Umami does not set analytics cookies. The website only uses local storage in connection with Umami to preserve an analytics opt-out.

This limited processing is based on Sweet Decibels' legitimate interest in measuring aggregate website use and improving the website. Analytics data is stored in the European Union and retained for six months under the Umami Cloud Hobby plan. You can object at any time through Cookie settings. Read the Umami Privacy Policy .

Storefront, purchases, and licensing

Moonbase provides customer accounts, carts, checkout, product delivery, downloads, and software-licensing services. The external Moonbase storefront is loaded when you initiate a storefront action such as signing in, viewing the cart, or starting a purchase.

Depending on the service requested, Moonbase may process your name, email address, account information, billing address, order and payment status, licence information, and the IP address used for licence activation and abuse prevention. Moonbase and its payment providers handle payment-card details; Sweet Decibels does not receive complete card details.

Account, delivery, purchase, and licence processing is necessary to take steps at your request, perform the product contract, and meet applicable accounting, tax, fraud-prevention, and consumer-law obligations. Optional Moonbase newsletter and product-update preferences rely on your consent and are synchronized with the Sweet Decibels MailerLite list.

Moonbase acts as merchant of record and as an independent controller for parts of the transaction. Moonbase AS is established in Norway. Its policy states that necessary account data is kept while the account is active, unnecessary data is deleted when the account is closed, and active support-dialogue information is retained for 24 months. Transaction records may be kept for longer where required by law. Read the Moonbase Privacy Policy .

If you actively agree and subscribe, your email address is sent to MailerLite so Sweet Decibels can manage the subscriber list, operate double opt-in confirmation, send occasional newsletters, and provide unsubscribe links. The website does not contact MailerLite until you submit the signup form. MailerLite open tracking and link-click tracking are disabled for the Sweet Decibels newsletter.

Newsletter processing is based on your consent. Subscriber data is kept until you unsubscribe. A minimal suppression record and evidence of consent may then be retained where necessary to respect your choice and demonstrate compliance. You can withdraw consent at any time through the unsubscribe link included in every newsletter.

MailerLite stores subscriber-list data in the European Union. Where its approved subprocessors process information outside the European Economic Area, MailerLite applies the safeguards described in its data processing agreement. Read the MailerLite Privacy Policy .

Contact requests

If you use the contact form, Sweet Decibels processes your name, email address, selected topic, and message to reply and manage the conversation. Providing these fields is necessary for Sweet Decibels to understand and answer your request. Contact data is not added to the newsletter unless you separately subscribe.

This processing is based on Sweet Decibels' legitimate interest in responding to correspondence or, where your request concerns a possible purchase or contract, taking steps at your request before entering into that contract. Messages are delivered to a Proton Mail mailbox that only the Director of Sweet Decibels can access.

Ordinary messages are retained for 12 months after the conversation ends. Relevant information may be kept longer when necessary to perform a contract, provide continuing product support, comply with a legal obligation, or establish, exercise, or defend a legal claim.

Basic anti-spam checks are applied before a message is sent. A one-way hash of the submitting IP address is used to enforce a one-hour rate limit. The raw address is not stored by this mechanism. Expired entries are ignored after one hour and removed during later form submissions.

External media

YouTube and SoundCloud embeds remain unloaded until you allow external media through Cookie settings. YouTube embeds use its privacy-enhanced domain where available.

Once enabled, the relevant provider may receive technical information such as your IP address, browser, device, referring page, and media activity, and may use cookies or local browser storage under its own policy. This processing is based on your consent. You can withdraw that consent through Cookie settings; reloading the page applies the new choice. Read the Google Privacy Policy and SoundCloud Privacy Policy .

Who receives personal data?

Within Sweet Decibels, personal data is accessible only to the Director where needed. Depending on your use of the website, recipients may include OVHcloud for hosting, Proton Mail for correspondence, Umami for aggregate analytics, MailerLite for newsletters, Moonbase and its payment providers for commerce and licensing, and YouTube or SoundCloud after external-media consent. Data may also be disclosed where required by law or a competent authority.

Sweet Decibels does not give website data to unrelated employees, contractors, accountants, advertising networks, or data brokers.

International transfers

The main website, analytics dataset, and subscriber-list storage are located in the European Economic Area. Proton is established in Switzerland, which benefits from an EU adequacy decision. Some providers or their subprocessors may operate from other countries. Where the GDPR requires it, those providers use an adequacy decision, standard contractual clauses, or another legally recognized safeguard. Their linked privacy notices provide further details.

Your rights

Subject to the conditions of applicable law, you may request access to your personal data, correction, deletion, restriction of processing, or data portability. You may object to processing based on legitimate interest and withdraw consent at any time without affecting processing that was lawful before withdrawal.

Use the contact form or write to the registered address above to exercise these rights. Sweet Decibels may request reasonable information to verify your identity and will normally respond within one month.

You may also lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) or another competent supervisory authority.

Automated decisions and children

Sweet Decibels does not use personal data for automated decision-making or profiling. The website and products are intended for professional and general audiences and are not intentionally directed at children.

Changes to this policy

Sweet Decibels may update this policy when services, providers, or legal requirements change. The current version and its update date will remain available on this page. Material changes affecting an existing subscriber or customer relationship will be communicated through an appropriate channel where required.