CymbalForensics.uk

Privacy Policy

Last updated: 2026-06-15.

Cymbal Forensics is operated by Dr Zlatko Baracskai, a sole trader based in Bristol, United Kingdom (www.zlatko.hu), who is the data controller for the personal data described here. This notice explains what we collect and why. See also the Terms of Use and Refund Policy.

What data we collect

• Email address and username at signup, plus optional profile details (display name, website, bio, avatar) you choose to add.
• Audio recordings you upload for analysis, and the derived analysis data, pools, and qualifier ratings you create.
• Forum posts and comments.
• Server-side access logs (IP address, timestamp, URL) retained for 30 days.
• First-party usage analytics: which pages, cymbals, and analysis graphs are viewed, uploads, and how long a visit lasts. To group these into a visit we set a single random anonymous visitor cookie (no name, email, or other identifier — just a random id). This applies to guests as well as signed-in members, and we use it only to understand how the platform is used.
• Error diagnostics (stack traces, request URL, timestamp) captured when the service fails, on our own infrastructure — sensitive fields (passwords, email addresses, session cookies) are stripped before storage, and no data is sent to any third-party error-tracking service.
• Payment records (which plan or product, amount, date) needed to provide and account for paid features. We do not store your card details.

How we use your data

• To provide the spectral analysis service.
• To send transactional emails (account verification, password reset).
• To process payments and provide paid features.
• To detect and prevent abuse.

Payments and third parties

Paid subscriptions and one-off purchases are handled by Stripe, our payment provider. When you pay, your card and billing details are collected and processed by Stripe under their own privacy policy; we receive only the transaction outcome and a record of what you purchased. Transactional email is delivered through our email provider. We do not sell your personal data, and we do not embed third-party advertising or analytics trackers in the site. When we review aggregate usage, we may look up the approximate location (city/country) of a logged IP address through a geolocation service; this happens on our side, not in your browser, and is used only to understand where visitors come from.

Data retention & removal

We keep your content only while your account and (if any) subscription are active. You can request permanent removal of all your content at any time — from your account settings or by emailing [email protected].

When a subscription terminates and no active access remains, your data enters a 30-day grace window (so you can re-subscribe or export it) and is then permanently deleted. During that window you can choose to make your content immediately invisible. The same 30-day window applies when you delete your account yourself.

At removal the default is to purge everything. You may instead choose to keep your public contributions either anonymised or with your name attached; kept content may still be removed later, and a name-attached choice can be overridden by the operator. Free accounts with no subscription are affected only when you delete your account or request removal.

Your rights

You have the right to access, rectify, and erase your personal data. Use your account settings, or email [email protected] to request a copy of your data.

Contact

Data controller: Dr Zlatko Baracskai, a sole trader based in Bristol, United Kingdom. Questions, access requests, or complaints: [email protected]. UK residents may also complain to the Information Commissioner's Office (ICO).