Privacy Policy

Last updated: 17 October 2026

Controller and contact

The operator responsible for MasterFix is Frank Staib, Kronenstr. 58, 40217 Düsseldorf, Germany. For privacy enquiries, contact webmaster@masterfixaudio.com.

Audio processing

MasterFix processes audio locally using the browser's audio facilities. Selecting a recording for mastering does not upload its audio content to MasterFix servers. Audio selected for processing is held in the browser session for the requested processing and playback. Downloaded results remain on your own device. If you voluntarily attach a file to a support email, that is a separate disclosure through your email service.

Website delivery and security

Delivering the website involves processing network and request data, such as an IP address, requested URL, time and browser connection information. The website is hosted on Google Cloud Run in the us-west1 region (United States). Request logs can be used for operation, error investigation and protection against misuse. The basis is the legitimate interest in operating and securing the website (Article 6(1)(f) GDPR); data needed to provide a requested service can also be processed under Article 6(1)(b) GDPR.

Browser storage and owner access

MasterFix stores the selected product mode in local storage. Local storage remains on the device until it is changed or cleared. The private owner login additionally uses an authentication token and a session cookie; the reviewed server sets an owner session lifetime of seven days. These owner controls are separate from ordinary audio previewing. Clearing browser data may remove preferences and end a session.

MasterFix does not include advertising or audience-analytics tracking in this version. Google infrastructure can set necessary routing cookies. The customer access cookie mf_lemon_customer retains access for up to one year. It is used only to access purchases and is not an advertising identifier. You can restore purchased exports using your private recovery code after the cookie is cleared.

Contact enquiries

When you send an enquiry, we process the address, name if supplied, message and any attachments to respond and resolve the request. Pre-contract and purchase enquiries are processed under Article 6(1)(b) GDPR; other enquiries are handled on the basis of the legitimate interest in responding (Article 6(1)(f) GDPR). Messages to the domain contact address are forwarded by Namecheap to the operator's GMX inbox. Their email infrastructure processes the message for delivery, spam protection and storage.

Future Lemon Squeezy purchases

When Lemon Squeezy checkout launches, Lemon Squeezy will process purchase and billing information as the Merchant of Record identified at checkout. Review its privacy notice at https://www.lemonsqueezy.com/privacy MasterFix needs transaction identifiers, purchased product and payment status to fulfil and maintain export entitlements. MasterFix must not receive your full payment-card details. The prepared integration passes an internal order reference, rather than audio contents or audio filenames, to Lemon Squeezy. Purchased uses and track fingerprints are stored in Google Cloud Firestore when payments are enabled. The raw audio and full audio filenames are not stored in this payment ledger. A hashed recovery secret authenticates access to those purchases.

Recipients, transfers and retention

Relevant recipient categories include the hosting provider, email delivery and mailbox providers and, once enabled, Lemon Squeezy and its payment-processing partners. Providers may process data outside the European Economic Area. Google describes its contractual data-protection provisions and international transfer safeguards at https://cloud.google.com/terms/data-processing-addendum Cloud Run processing in the United States and global log storage can involve transfers outside the EEA. For information about data handling by Lemon Squeezy, consult https://www.lemonsqueezy.com/privacy Email forwarding is provided by Namecheap and the receiving mailbox by GMX. Contact us for information about the safeguards applicable to your enquiry.

Audio processing data is normally held only for the browser processing session. Browser preferences remain until changed or cleared; the owner session expires as described above. Support correspondence is retained as needed to resolve the enquiry and any related claim or legal obligation. Purchase records must be kept for the applicable accounting and tax requirements. The configured default Google Cloud log bucket retains logs for 30 days. The required administrative audit-log bucket retains logs for 400 days; it primarily records administration of the cloud project. These settings were checked on 17 October 2026.

Your rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it prospectively. You may complain to a data protection supervisory authority, including the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. Contact the operator using the details above to exercise your rights.