Extension Privacy Policy

1. Controller

• Acridan IT Solutions OG, trading as Acridan Audio
• Altebergenstrasse 2C/2/3, 1140 Vienna, Austria
• [email protected]

2. What the extension does

The extension applies real-time audio effects to YouTube and YouTube Music. SoundCloud integration is available during an active Pro trial or paid Pro subscription.

Optional premium features use a Supabase account, a five-day account trial, signed browser-installation-bound access proofs, subscription-based premium access, and limited configuration synchronization across registered browser installations.

3. Information processed locally on your device

In short: per-site and per-track memory stays only in your browser. Signed-in users send limited account, registered-device, premium-status, and synchronized-configuration data to our Supabase backend. Separately, while the extension panel is open, the extension may request artwork or thumbnails from a supported platform or its CDN to display artwork and derive visual effects.

The extension stores settings and feature state in browser extension storage so that it can restore your preferences between page loads and browser sessions.

For signed-in users, the extension synchronizes only custom presets, keyboard shortcuts, global visual settings, the hide-in-fullscreen preference, and general song-memory preferences through Supabase. It does not synchronize per-site or per-track mappings, media identifiers, URLs, listening history, artwork, audio, or other media content. Preset import and export remain manual.

Per-site and per-song preferences may contain identifiers derived from the current page, such as a hostname, URL path, or media identifier, so the extension can reapply the correct preset on the same site or track later. In the current implementation, this can include a site hostname, a YouTube or YouTube Music media identifier, or a SoundCloud path. Because this information reflects which site or media page the browser is interacting with, it can be sensitive. We use it only to remember the settings you chose for the same site or track later and, unless a premium request described below is made, it remains local to your browser.

Clipboard writes happen only when you click the relevant export or copy controls. Clipboard contents are handled locally by your browser and are not sent to us by the extension.

• whether the extension is enabled
• audio effect settings and presets
• global visual settings
• keyboard shortcuts
• per-site preset data
• per-song or per-track preset data and song-memory preferences
• premium state, including a short-lived signed device-bound premium access proof
• preset export text that you explicitly copy to the clipboard by using the extension's copy or export controls
• a random server-issued device identifier and secret stored in background-owned extension storage
• the local Supabase session that keeps you signed in, including access and refresh tokens

4. Information sent to backend services, supported platforms, or other third parties

The extension does not sell personal data and does not use analytics or advertising trackers. It sends limited information to backend infrastructure, supported platforms or their CDN providers, and other service providers when you use premium features, when the extension loads artwork or thumbnails from supported media pages, or when you deliberately open external resources from the UI.

If you sign in, Supabase processes your email address, authentication-provider information, account identifier, account and session timestamps, access and refresh tokens, the server-authoritative trial end time, and optional marketing consent. Consent records include the wording version, source, opt-in time, and any withdrawal time.

Each account may register up to five browser installations. Every browser profile or extension installation counts separately, including two browsers on one computer. For each registration, the backend stores the account identifier, a random installation identifier, its displayed name, a one-way hash of the installation secret, and creation and last-seen timestamps. We do not create hardware fingerprints or collect hardware serial numbers.

The backend stores the current allowlisted synchronized-configuration payload, its version and update time, and the device identifier that last updated it. The unhashed device secret remains in background-owned storage on the registered installation and is sent only to authenticate device-bound operations.

If you purchase premium, manage a subscription, request a refund, or contact support, we or Polar may process your email address, order, subscription, invoice or tax identifiers, payment, refund, chargeback or subscription status, premium status, and support correspondence or attachments you choose to send.

Infrastructure providers may also process network and connection metadata such as your IP address, network operator information, request path, response status, user agent, request headers, and similar technical connection data for routing, abuse prevention, debugging, and service security. We do not use this data for advertising or profiling.

Creating an account and registering a browser installation are optional. Without them, we cannot provide the account trial, paid premium access, installation management, or cross-installation configuration synchronization.

When the extension panel is open, the extension may request media artwork or thumbnails from the currently supported platform or its CDN so that the UI can derive colors from that artwork and, if enabled, render artwork-based background effects.

• Supabase, for authentication, browser-installation registration, configuration synchronization, subscription records, database access controls, and Edge Functions
• Google, only if you choose to sign in with Google, for authenticating your Google account
• Polar and its payment providers, for checkout, subscriptions, billing, customer portal, cancellations, and refunds
• supported platforms and their CDN providers, only for artwork or thumbnail requests initiated by the extension while the panel is open
• Featurebase, only if you choose to open the feedback board link

5. Information submitted through the Acridan Audio support and withdrawal pages

If you use the support or withdrawal form, we process the submitted name, email address, optional postal address, browser details, extension version, affected site, message contents, and any transaction reference you provide.

Acridan Audio support and withdrawal requests are delivered by email and are not added to the website general contact-submission tracking table. Website hosting and mail-delivery providers process the request and delivery metadata needed to secure and deliver the message.

6. Data sources and purposes

If you purchase, renew, cancel, refund, charge back, or otherwise manage premium through Polar or another checkout or merchant-of-record provider, we may receive order, subscription, payment-status, tax, refund, chargeback, or support data needed for access, contract handling, fraud prevention, or legal compliance.

• provide the extension's audio and settings features
• remember your preferences between sessions
• synchronize the limited configuration categories described above across registered browser installations
• register, authenticate, display, rename, and remove up to five browser installations per account
• restore per-site and per-song behavior you chose to save
• copy preset export data to your clipboard when you explicitly use export or copy controls
• authenticate accounts and validate premium access
• administer subscriptions, refunds, and support requests
• prevent fraud, abuse, and misuse
• determine trial eligibility and remaining trial time
• debug service failures and maintain service security

7. Legal bases

• legitimate interests, for storing settings, restoring per-site and per-song behavior you choose to save, operating the extension, and providing its core user-facing features
• performance of a contract, when you ask us to provide account authentication, browser-installation registration, configuration synchronization, premium-status checks, subscription handling, refunds, or support
• performance of a contract, legal obligations, and legitimate interests, for handling support requests, withdrawal requests, and billing-related website form submissions connected to Acridan Audio
• legitimate interests, for securing the service, preventing fraud or account sharing, enforcing the five-installation limit, handling operational issues, and defending or resolving claims
• consent, for optional product-news and offer emails; consent can be withdrawn in the extension account screen or through an unsubscribe mechanism
• legal obligations, where we must keep invoice, tax, accounting, consumer-protection, refund, chargeback, or similar compliance records

8. Retention, transfers, and rights

Local settings remain until removed, reset, or uninstalled. A local installation credential remains until that installation is removed, account data is cleared, or the extension is uninstalled.

Installation registry and synchronized configuration remain until removed, overwritten, account deletion, or an applicable deletion request. Consent evidence is retained after withdrawal only as necessary to demonstrate compliance and honor suppression. Subscription, security, support, billing, tax, refund, and chargeback records remain only for their stated purpose or applicable legal retention.

Depending on where you use the extension and where our providers operate infrastructure, your information may be processed in countries outside your own, including outside the EEA. This can include processing by Supabase, Polar, or their providers in countries where they operate. Where required, we rely on an adequacy decision or appropriate safeguards, such as standard contractual clauses.

Where GDPR applies, you may request access, rectification, erasure, restriction, objection, portability, and consent withdrawal. Contact [email protected] with your account email. Austria’s supervisory authority is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, [email protected], https://dsb.gv.at/. You may also lodge a complaint with the supervisory authority of your own EU member state of residence or place of work.

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects about you.

9. Contact and updates

To exercise rights or ask questions, contact [email protected] and include enough information for us to locate the relevant record, such as the extension name, your account email if relevant, and the approximate date of your request.

The extension and premium services are not directed to children, and we do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. The current version will be published at this URL.

Last updated: 2026-07-15