Privacy policy

Audio data

Generated signals, microphone samples and local comparison files stay on your device by default. Raw captured samples are discarded after analysis unless you explicitly choose to download them.

Local storage

Saved recipes, technician and reviewer acceptance runs, audio baselines, low-frequency listening observations and comparisons, diagnostic-session observations, and commercial-consent preferences use storage in this browser. They are not account-synced. Acceptance runs can be removed on the recipes page or deliberately exported and imported as JSON. You can delete low-frequency records on the subwoofer test page and a saved diagnosis in the diagnostic workspace. Clearing this site's browser data removes local records.

Analytics and commercial content

WaveLocus does not currently load third-party analytics, advertising providers, or affiliate inventory. If privacy-preserving analytics or commercial content are introduced, they require a separate choice where applicable and will not include raw audio, local filenames, continuation secrets, detailed hardware fingerprints, or evidence-pack contents.

Cross-device continuation

If you choose cross-device handoff, the service temporarily receives the structured test state required for that experiment. Raw audio is not relayed. The one-time continuation expires after ten minutes. The service keeps no general account or permanent diagnostic history.

Optional assistant comparisons

The assistant integration is in development and is not enabled on the public website. When enabled in a testing environment, creating a comparison sends a temporary investigation record to Cloudflare. Pairing requires your browser approval. Sending results to the paired assistant requires a separate Share comparison action.

Shared fields are the application category, your browser and application observations, whether the same microphone was used, and the factors you changed. These are user-reported observations, not imported microphone measurements. We do not send recordings, microphone names, local filenames, free-text notes or conversation transcripts through this workflow.

The optional recording-review workflow analyses up to three WAV, MP3, M4A/AAC or FLAC excerpts locally, subject to browser decoding support. When you start it from your assistant, a one-use link connects the browser to that authenticated temporary connection. The link expires after ten minutes and is removed from the address bar when the page opens. Approving the connection shares no measurements. A separate Share report action sends only the displayed per-channel sample levels, timestamps, DC-offset and full-scale indicators, method/reference versions, decoding-format category, intended-use category, editor category and revision context. A batch includes only the recordings you select, identified by numbered slots. Sharing replaces the previous report or batch. No raw audio, filename, transcript or device identifier is included. These values are computed by the browser, not independently verified from audio on the server.

Investigation access expires after 24 hours at most. Delete comparison or Delete report revokes access and removes its active application record. Scheduled cleanup removes expired records; infrastructure failures can delay cleanup but do not extend access. Refreshing the page loses the browser access secret. Pairing codes and unclaimed recording links expire after ten minutes and assistant access tokens after thirty minutes. Do not forward the launch link or publish it.

Connection approval uses a Secure, HttpOnly consent cookie and a temporary approval record that expire after ten minutes. Authorization codes expire after two minutes and can be used only once. Stored access and browser-secret values are hashed; this temporary authorization is not a permanent WaveLocus account.

Shared results become available to the assistant platform under its own policies. Deleting a WaveLocus comparison cannot remove messages already received by that platform. Cloudflare also operates the hosting and storage infrastructure. Its SQLite storage supports recovery of earlier database states for up to thirty days. Deletion from active storage is not a promise of immediate deletion from provider recovery copies. We do not use recovery to extend expired investigation access.

To limit abuse, the service uses a keyed identifier derived from the connecting IP address and UTC day. It stores that identifier, not the raw address, in temporary hourly creation counters. Global daily counters do not contain comparison contents. These controls are not advertising identifiers. Cloudflare necessarily processes network addresses to serve requests.

Questions

For privacy or product questions, email support@wavelocus.com.