Privacy

Last updated 22 October 2026

This notice explains what information Sonodia (“we”, “us”) collects when you visit sonodia.com, why, how long we keep it, and the rights you have. We keep it short because we collect very little.

Who is responsible

Sonodia operates this website and is responsible for (the “controller” of) the information described here. For any privacy question or request, use our contact form.

What we collect

You don’t need an account to use this site and we don’t ask for your name or email. When you load a page, we automatically record:

• your IP address;
• approximate location derived from that IP address (country, and sometimes region or city), never your precise location;
• the date and time, and the page or address you requested;
• the page that linked you here (the “referrer”), if your browser sends it;
• your browser and device type (the “user agent”) and preferred language.

If you use our contact form, we receive what you enter (your reply email address, your message and, optionally, your name and visit details), along with your IP address. The form may run an automated check to tell people from bots, which can process your IP address and browser information.

Why we collect it

• to keep the site secure and working, and to detect and block abuse;
• to understand how many people visit, from where, and how they find us (for example, which other sites link here);
• to find and fix broken or outdated links.

We do not use this information to identify you personally, to build advertising profiles, or to make automated decisions about you.

Legal basis (EU, UK and similar laws)

We process this information on the basis of our legitimate interests in running a secure, reliable website and understanding its audience. We have weighed these interests against your rights and keep the data minimal and short-lived. You can object at any time (see Your rights). If you contact us, we rely on legitimate interests to reply to you.

Cookies and local storage

We do not use advertising, tracking or third-party analytics cookies.

• The music player remembers your volume and autoplay settings in your browser’s local storage. These stay on your device and are never sent to us. You can clear them at any time through your browser settings.
• While you write a message on the contact form, an unsent draft is kept in your browser tab so it isn’t lost if the page reloads. It is cleared when you send it or close the tab.
• A strictly necessary session cookie is used only on password-protected administration pages, which visitors do not use.

Because these are strictly necessary or stored only on your device for your own convenience, no consent banner is required.

How long we keep it

Visit records are automatically deleted after 120 days. Contact form messages are kept only as long as needed to deal with your enquiry, and are deleted automatically after 12 months at most.

Who we share it with

We do not sell, rent or trade your information, and we do not “share” it for cross-context behavioural advertising. We use a small number of service providers to run the site, such as a hosting provider, a content delivery and security service that delivers pages quickly and protects against attacks and spam, and an email delivery service that passes contact form messages to us. They process information only on our behalf and under confidentiality and data protection terms. We may also disclose information if the law requires it, or to protect the site and its users from fraud or abuse.

International transfers

We are based in Australia, and our service providers may process information in other countries. Where information about people in the EU, UK or Switzerland is transferred outside those regions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

How we protect it

We use reasonable technical and organisational measures to protect the information we hold, including encrypted connections, restricted access and automatic deletion. No method of transmission or storage is completely secure, but we work to protect your information and will act promptly if a problem arises.

Your rights

Depending on where you live, you may have the right to:

• access the information we hold about you and receive a copy;
• correct it if it is wrong;
• delete it;
• object to or restrict how we use it;
• receive it in a portable format;
• not be treated differently for exercising these rights.

To make a request, use our contact form. Because we don’t know visitors’ names, please include the approximate date and time of your visit and your IP address so we can find the right records. We will respond within one month (or sooner where the law requires) and won’t charge a fee unless a request is clearly unfounded or excessive.

Where you live

• European Union, EEA and Switzerland (GDPR / FADP): all the rights above apply. You can also complain to your local data protection authority.
• United Kingdom (UK GDPR): all the rights above apply. You can complain to the Information Commissioner’s Office (ico.org.uk).
• Australia (Privacy Act 1988 and the Australian Privacy Principles): you can ask to access or correct your information. If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
• New Zealand (Privacy Act 2020): you can ask to access or correct your information and complain to the Privacy Commissioner (privacy.org.nz).
• Canada (PIPEDA and provincial laws): you can ask to access or correct your information and complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
• California and other US states with privacy laws (such as the CCPA/CPRA): you have the right to know, access, correct and delete your personal information and to not be discriminated against. In the past 12 months we have collected identifiers (IP address), internet activity (pages viewed, referrer, browser) and approximate geolocation, for the purposes above. We have not sold or shared personal information and do not use or disclose sensitive personal information. We treat Global Privacy Control signals as an opt-out, although there is nothing to opt out of.
• Brazil (LGPD) and elsewhere: you have equivalent rights under your local law, and we will honour them.

Children

This site is not directed at children under 16 and we do not knowingly collect information about them. If you believe a child has sent us personal information, contact us and we will delete it.

Changes

As Sonodia grows (for example, if we open artist accounts), we will update this notice before collecting anything new and change the date at the top.

Contact

Questions or requests: contact form