Privacy Policy
This privacy policy explains how personal data is processed when you visit the Sonomode website and listen to the set it composes.
1. Controller
Sandro Vogel
Klingsorstr. 66
12167 Berlin
Germany
Email: sandrovogel@pm.me
2. What happens in your browser
Sonomode synthesises and mixes its music in your browser, with the Web Audio interface built into it, and draws the visuals there too. The sound you hear is produced on your device. Sonomode does not use your microphone, camera or location, and it has no accounts.
3. Composition requests
Each record of the set is composed on our server. While you listen, your browser asks the server for the next record a few minutes ahead. Such a request contains only:
- a random number your browser picks when you start, which identifies your set (not you);
- the position of the requested record in the set and the time elapsed in the set;
- the direction you chose (deeper, auto or harder);
- a technical state token describing the records already played in your set.
These requests contain no personal data about you. The server composes the record, returns it and keeps no copy of the request, the set or the result. As with every request to a website, the technical access data described in section 4 is processed by our hosting provider.
4. Technical access data
When you visit the website, and when your browser requests a record, technically necessary access data may be processed to deliver the site and the music and to keep them secure and stable. This may include your IP address, date and time of access, requested URL, referrer URL, user agent, status codes and error data.
5. Local storage in your browser
If you choose a picture under Picture, or change the tone under Sound, Sonomode stores that choice in your browser's local storage (localStorage) so it applies again on your next visit on this device and in this browser. Nothing else is stored. We have no access to this local storage.
You can remove the stored choices by selecting “Random each visit” in the picture chooser, “Reset” under Sound, or by clearing your browser's site data.
6. Purposes and legal bases
The website, including the composition of records, is provided on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure, stable and functional website and service.
Local browser storage is used only where necessary to provide the picture and sound choices you requested. The legal basis for storing and reading this information on your device is Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
7. Hosting
This website and its composition server are hosted on Vercel. As part of hosting, Vercel may process technically necessary access data, including IP addresses, request metadata, timestamps, status data and error data.
Vercel may process data in the United States and other countries outside the European Economic Area. Where required, such transfers are based on appropriate safeguards, such as standard contractual clauses or other legally recognised mechanisms.
The source code of Sonomode is kept in a private repository on GitHub, from which the website is deployed. GitHub does not receive any data from visitors to this website.
8. Fonts, images and third parties
All fonts, images, scripts and sounds are delivered from this website itself. Sonomode does not load content from third-party servers, does not embed social media and does not use external font or content delivery services.
9. Cookies, analytics and tracking
Sonomode does not use cookies, analytics, advertising, tracking pixels or fingerprinting. The only information stored on your device is the picture and sound choices described in section 5.
10. Recipients
For ordinary website access and composition requests, recipients of personal data may include technical hosting providers, currently Vercel. No other recipients receive data.
11. Retention
Composition requests and the records composed for them are not stored by us. The picture and sound choices remain in your browser until you remove them.
Technical access logs are retained only as long as necessary for operation, security, troubleshooting and abuse prevention, unless longer retention is legally required.
12. Your rights
Subject to the statutory requirements, you have the right to request access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where processing is based on consent, you may withdraw it with effect for the future.
Because composition requests contain no personal data and are not stored, these rights mainly concern technical data processed when the website is accessed or hosted.
13. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. In Berlin, the competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.
14. Automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR. The composition of music is automated, but it makes no decisions about you.
15. Changes to this policy
We may update this privacy policy if the service, the hosting setup or legal requirements change. The current version is published on this page.
Last updated
November 3, 2026