CymbalForensics

Privacy Policy

Last updated: 2026-06-15.

Cymbal Forensics is operated by Dr Zlatko Baracskai, a sole trader based in Bristol, United Kingdom (www.zlatko.hu), who is the data controller for the personal data described here. This notice explains what we collect and why. See also the Terms of Use and Refund Policy.

What data we collect

• Email address and username at signup, plus optional profile details (display name, website, bio, avatar) you choose to add.
• Audio recordings you upload for analysis, and the derived analysis data, pools, and qualifier ratings you create.
• Forum posts and comments.
• Server-side access logs (IP address, timestamp, URL) retained for 30 days.
• Error diagnostics (stack traces, request URL, timestamp) captured when the service fails, on our own infrastructure — sensitive fields (passwords, email addresses, session cookies) are stripped before storage, and no data is sent to any third-party error-tracking service.
• Payment records (which plan or product, amount, date) needed to provide and account for paid features. We do not store your card details.

How we use your data

• To provide the spectral analysis service.
• To send transactional emails (account verification, password reset).
• To process payments and provide paid features.
• To detect and prevent abuse.

Payments and third parties

Paid subscriptions and one-off purchases are handled by Paddle, our payment provider and merchant of record. When you pay, your card and billing details are collected and processed by Paddle under their own privacy policy; we receive only the transaction outcome and a record of what you purchased. Transactional email is delivered through our email provider. We do not sell your personal data, and we do not use third-party advertising or analytics trackers.

Data retention & removal

We keep your content only while your account and (if any) subscription are active. You can request permanent removal of all your content at any time — from your account settings or by emailing [email protected].

When a subscription terminates and no active access remains, your data enters a 30-day grace window (so you can re-subscribe or export it) and is then permanently deleted. During that window you can choose to make your content immediately invisible. The same 30-day window applies when you delete your account yourself.

At removal the default is to purge everything. You may instead choose to keep your public contributions either anonymised or with your name attached; kept content may still be removed later, and a name-attached choice can be overridden by the operator. Free accounts with no subscription are affected only when you delete your account or request removal.

Your rights

You have the right to access, rectify, and erase your personal data. Use your account settings or the data export endpoint.

Contact

Data controller: Dr Zlatko Baracskai, a sole trader based in Bristol, United Kingdom. Questions, access requests, or complaints: [email protected]. UK residents may also complain to the Information Commissioner's Office (ICO).