This Privacy Policy describes how zombies21 ("AuraSync X", "we", "our", or "us") processes information when you access or use the AuraSync web application — including its 3-D Music Visualizer and MP4 Video Player (the "Service"). It applies to all users worldwide, with specific disclosures required under the laws of Canada, the United States, the European Union/EEA, the United Kingdom, and other applicable jurisdictions.
We built AuraSync X as a fully client-side experience. All media rendering and playback occur locally in your browser. We do not collect, store, or share any personally identifiable information ("Personal Data").
| Principle | What It Means for You |
|---|---|
| Data Minimisation | We avoid collecting data unless it is strictly necessary to provide or secure the Service. |
| Purpose Limitation | Any data we do process is used only for the purpose stated in this Policy. |
| User Control | Settings (e.g., visualiser preferences) are stored only in your browser's localStorage; you can delete them at any time. |
| Security by Design | All processing takes place locally; no media files leave your device, eliminating server-side breach risk. |
We intentionally do not gather:
When a fatal JavaScript error occurs, the Application may send a one-line crash hash (a non-reversible SHA-256 digest) to our GitHub issue tracker. This contains no Personal Data.
If you choose to stream content hosted on third-party platforms (e.g., a public radio station's HLS URL), your interaction is governed by that provider's privacy policy. AuraSync X merely passes the stream URL to the HTML5 player.
AuraSync X is not directed to children under 13 years. We do not knowingly collect Personal Data from anyone. If you believe a child has provided data via our crash-report opt-in, contact us for immediate deletion.
| Region | Compliance Approach |
|---|---|
| Canada (PIPEDA) | No "personal information" collected; no breach notification obligations triggered. |
| United States (CCPA/CPRA) | We do not collect "personal information" or engage in "selling/sharing". |
| EU / UK (GDPR) | Processing crash hashes via legitimate interest; no cross-border profiling. |
| Global (LGPD, etc.) | Because no Personal Data is collected, most transfer impact assessments do not arise. |
Since we hold no Personal Data, there is nothing to produce or delete. However, you may request confirmation that we maintain no server-side data, or disable diagnostic reporting.
| Crash hashes: | 30 Days |
| Preferences: | Until Cleared |
We may update this Privacy Policy. If changes materially affect your rights, we will post a prominent notice at least 30 days before they take effect.
You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada, your provincial privacy regulator, or (for EU/UK residents) your supervisory authority.