Privacy

The short version

This site sets no cookies of its own, stores nothing in your browser, runs no analytics and loads nothing from a third party except the waitlist signup form, which is hosted by Brevo and shown in a frame. Fonts and images are served from this domain. The only personal data anyone here can give us is an email address, and only by typing it into that form on purpose.

The Murmur application itself is a different matter and a simpler one: it is a local program. It has no account, sends nothing anywhere, and keeps your songs as files on your own disk.

Who is responsible

The controller within the meaning of Art. 4(7) GDPR is:

Maximilian Matjaz
Hauptstrasse 49, 2211 Pillichsdorf, Austria
[email protected]

Full details are on the imprint page. No data protection officer has been appointed; none is required at this scale.

Hosting and server logs

The site is hosted by Netlify (Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA). Serving a page necessarily involves your device sending its IP address, the page requested, the time, the referring page and your browser's user-agent string to the server. Netlify processes these as part of delivering and protecting the site.

Legal basis: Art. 6(1)(f) GDPR our legitimate interest in the site being reachable, stable and not abused. Netlify acts as our processor under Art. 28 GDPR. Because Netlify is a US company, this can involve a transfer outside the EEA; that transfer is covered by the EU Standard Contractual Clauses in Netlify's data processing addendum. We do not read these logs routinely and we do not build profiles from them.

The waitlist form

The signup form is hosted by Brevo, our email provider, and shown on this site inside a frame. Loading it means your browser contacts Brevo's servers, which necessarily sends your IP address and browser information there. If you enter your email address and submit the form, that address is stored by Brevo on our behalf. We use it for one purpose: to write to you about Murmur.

• What we ask for: an email address. Nothing else. There is no name field, no company field, and no checkbox that is ticked for you.
• Double opt-in: after submitting you receive an email asking you to confirm. If you do not click the link in it, nothing is sent to you.
• Legal basis: Art. 6(1)(a) GDPR your consent, given by submitting the form and confirming it.
• Processor: Brevo acts as our processor under Art. 28 GDPR. Brevo's own privacy policy applies to how it operates the form, and it is linked from the form itself.
• How long: until Murmur is released and the announcement has gone out, or until you ask to be removed whichever comes first. Addresses are deleted after that.
• Getting off the list: every message carries an unsubscribe link, and you can write to [email protected] at any time. We do not require a reason.

Withdrawing consent is always possible and does not affect the lawfulness of what happened before you withdrew it.

Email

If you write to us, your message and address are stored so we can answer, and kept as long as the exchange or any legal retention duty requires. Legal basis: Art. 6(1)(b) or (f) GDPR depending on what you wrote about. Our mail is handled by Google Workspace (Google Ireland Limited).

What this site does not do

• No analytics of any kind no Google Analytics, no privacy-friendly alternative either.
• No advertising or conversion pixels: no Meta, Google Ads, TikTok, LinkedIn or others.
• No session recording or heatmaps.
• No embedded video, maps or fonts from another company's servers. The only third-party content on the site is the Brevo signup form described above.
• No cookies of our own and no local storage. That is why you were not asked to accept any a banner that controls nothing is theatre, and we would rather not have the thing than the banner.

If that ever changes, this page changes first, and anything non-essential will not load until you have actually chosen.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have data erased (Art. 17);
• restrict how it is processed (Art. 18);
• receive it in a portable form (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw consent at any time (Art. 7(3)).

Write to [email protected] and we will act on it. If you think we have handled your data unlawfully you can complain to the Austrian data protection authority, the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna (dsb.gv.at).

Changes

When this policy changes, the date at the top of the page changes with it. There is no archive of previous versions; this site is young enough that there is nothing to archive.

Waitlist addresses are held by Brevo. This site keeps no copy of them.