Who this policy is about

RBAnalyzer (RecBedroomAnalyzer) is developed and published by Borys Zhelonka, an individual (hobbyist) developer — not a company. Borys is the data controller for the website at this domain. There is no separate company, agency, or legal entity behind this project.

Contact for privacy questions or requests: smile@borys.dev

This policy covers the RBAnalyzer website (this domain) — the pages you are browsing now, and the download flow for the plug-in installer. It does not cover the plug-in software itself once installed in your DAW; the plug-in processes audio locally on your machine and is not covered by this policy because it does not communicate with this website or send data anywhere.

Information this site collects

Analytics (Google Analytics)

This site uses Google Analytics 4 (GA4), provided by Google Ireland Limited (and, for transfers, Google LLC in the United States), to measure site traffic and count how many times the plug-in installer is downloaded. GA4 is only active if you click Accept in the cookie notice; if you click Reject or close the notice without choosing, GA4 does not load and no analytics cookies are set.

When active, GA4 may collect: pages visited, approximate location derived from your IP address (GA4 does not log full IP addresses), device/browser type, referring site, and the download-button click event used to count downloads. GA4 does not receive your name, email address, or any account information — this site has no accounts, forms, or logins.

See Google’s own disclosure of this processing: How Google uses information from sites or apps that use our services.

Donation button (Buy Me a Coffee)

The home and download pages embed the official Buy Me a Coffee donation button, third-party content loaded from Buy Me a Coffee’s CDN (cdnjs.buymeacoffee.com) together with a font stylesheet from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). Loading these resources necessarily discloses your IP address and user-agent to those servers, like any embedded web resource. The widget sets no cookies on this site and performs no tracking here. If you click it, you leave for buymeacoffee.com, where Buy Me a Coffee’s own privacy policy applies to anything you do there, including donations.

Server / hosting logs

The site is served as static files by a hosting provider (currently Netlify and/or Cloudflare Pages). Like virtually any web host, the provider’s edge servers automatically log basic technical data for every request — IP address, timestamp, requested URL, and user-agent string — for security, abuse prevention, and reliability purposes. This site owner does not separately collect or query these logs for analytics; they exist at the infrastructure level and are retained according to the hosting provider’s own policies.

Browser-local preferences

The site stores two small values in your browser’s local storage: your light/dark theme choice, and your cookie-notice choice (accepted/rejected). These stay on your device, are not transmitted to this site or any third party, and are not used to identify you. See the Cookie Policy for details.

Why this data is processed (legal basis)

Analytics (GA4): processed only with your consent (GDPR Art. 6(1)(a)), given by clicking Accept. You can withdraw consent at any time — see “Your choices” below — and doing so stops future GA4 collection (it does not retroactively delete data already sent to Google; see “Your rights”).
Server/hosting logs: processed under the hosting provider’s and this site owner’s legitimate interest (GDPR Art. 6(1)(f)) in keeping the site secure and operational. These logs are not used for profiling or marketing.
Donation button (Buy Me a Coffee): loaded under the site owner’s legitimate interest (GDPR Art. 6(1)(f)) in offering a way to support a free, non-commercial project. It sets no cookies and does no tracking on this site; the only processing is the technical disclosure of your IP/user-agent to the servers that host the button and its font.
Local preferences: strictly necessary to remember a choice you already made (theme, cookie notice); no separate legal basis is required beyond your direct interaction with the control.

Who this data is shared with

Google (Google Ireland Limited / Google LLC), as the processor operating Google Analytics, when GA4 is active.
The hosting provider (Netlify and/or Cloudflare Pages), as the processor serving the site and generating basic connection logs.
Buy Me a Coffee (and Google Fonts, which serves the button’s typeface): these hosts receive the technical request data (IP address, user-agent) needed to deliver the donation button on every page view. No cookies are set and no site activity is shared with them.

This site does not sell personal data, does not use the data for advertising, and does not otherwise share it with third parties.

International data transfers

Google Analytics may transfer data to Google LLC in the United States. Google self-certifies under the EU-U.S. Data Privacy Framework (and equivalent UK and Swiss extensions) and additionally relies on Standard Contractual Clauses as a transfer safeguard. Details are in Google’s own Analytics data processing terms.

Data retention

GA4 event-level data: retained for 14 months, then automatically deleted by Google (per this site’s GA4 configuration).
Server/hosting logs: retained for the period set by the hosting provider’s own operational policies (typically a matter of days to weeks), not controlled by this site owner.
Local-storage preferences: persist until you clear your browser storage or change your choice; there is no server-side copy.

Your rights

Regardless of where you are located, you may ask to:

know what data (if any) is held about you,
correct inaccurate data,
have data deleted,
object to or restrict processing,
receive a copy of data you provided, in a portable format,
withdraw consent to analytics at any time, with no effect on past lawful processing.

Because this site has no accounts or logins, most requests will in practice concern Google Analytics data tied to your device/browser rather than an identified profile — Google’s own user deletion tools may be the fastest route for analytics-specific data. You can otherwise reach the site owner directly at smile@borys.dev for any request, and it will be handled on a best-effort basis given this is a one-person, non-commercial project with no dedicated compliance staff.

Supervisory authority

If you are in the EU/EEA, you have the right to lodge a complaint with the data protection authority of the EU/EEA member state where you live, work, or where the alleged issue occurred. [Owner: name your specific national authority here if you want one referenced explicitly.] UK residents may contact the ICO. Residents of other countries may have equivalent rights and complaint mechanisms under their local law (for example, the CCPA/CPRA in California); this site aims to honor equivalent requests from any visitor regardless of whether a specific law’s threshold technically applies to a project of this size.

Children’s privacy

This site is not directed at children and does not knowingly collect personal data from children.

Changes to this policy

If this policy changes, the “last updated” date at the top will be revised. Material changes (for example, adding a new data use) will be reflected here before they take effect.

Contact

For privacy questions or requests, contact smile@borys.dev.

Privacy Policy