Privacy Policy

Last updated: September 4, 2026 — Montreal, QC

1. Who we are (Controller)

jsm-loudness.com is operated by Sehmus, Montreal, QC H2X, Canada. Privacy Officer: Sehmus — contact via contact page. For Law 25 / PIPEDA / GDPR requests.

2. Core principle: Your audio never leaves your device

The Analyzer uses Web Audio API and WebAssembly. Your audio file is decoded locally. No upload to any server, no cloud processing. This is verifiable in DevTools Network tab.

3. What we collect

3.1 No audio collection

Zero audio data collected, stored or transmitted.

3.2 Analytics — only with consent

We use Google Analytics 4 (GA4) ID G-64EC8JJF7Q only after you click Accept. Using Consent Mode v2, analytics_storage stays denied until consent. When granted, GA4 collects: anonymized IP, page URL, device type, approximate region (city-level), time on page. No User-ID, no advertising personalization unless you consent to ad_storage (we never ask for it).

Legal basis: consent (GDPR Art 6(1)(a), Law 25 consent). Retention: 14 months, auto-delete. You can withdraw anytime via banner or clearing cookie jsm_consent_v1.

3.3 Essential storage

Cookie jsm_consent_v1 (6 months) stores your consent choice (accepted/rejected). No other tracking cookies.

4. Purposes

• Provide loudness analysis (legitimate interest + contract)
• Improve site performance (consent)
• Security, fraud prevention (legitimate interest)

5. Transfers outside Quebec

GA4 data may be processed by Google LLC in US/EU under Google's Data Processing Terms. Assessment done per Law 25. If you reject analytics, no transfer occurs.

6. Your rights

Quebec Law 25 + PIPEDA + GDPR rights: access, rectification, deletion, withdraw consent, data portability, object. To exercise: contact page. Response within 30 days. You can also file complaint with CAI (Quebec) or OPC.

7. Retention

Consent cookie 6 months. GA4 logs 14 months. No audio retained. Server logs (hosting provider) 30 days.

8. Security

TLS 1.3, no upload attack surface, CSP, no third-party scripts except GA4 after consent.

9. Minors

Not directed to under 14. No knowing collection.

10. Changes

We will update date and keep prior versions on request.