Privacy Notice

Who controls your data

Fredrik Bernström is the data controller for personal data processed through Hushwall. Contact us at fbernstrom540@outlook.com with any privacy question or request.

What we collect and why

• Account data (optional) — if you choose to create an account, your email address and an encrypted password hash, so you can sign in across devices. Listening does not require an account.
• No payment data — the service is free. We do not process payments, and no card or billing details are ever collected or stored by us.
• Voluntary Swish gifts — if you choose to send a gift by Swish, that transfer happens entirely in your own bank app. We only see what Swish shows the recipient (your name, amount and any message), and we use it solely to say thank you or return the money if you ask.
• Usage data — basic, aggregated information about how the player is used, to keep the audio engine working well. There is no listening limit to enforce.
• Technical data — standard server and error logs generated when you use the site.

We do not record audio, use your microphone, or build advertising profiles.

Legal bases

If you create an account, we process that data to provide the account you asked for. We process usage and technical data on the basis of our legitimate interest in running a secure and reliable free service, and any other data with your consent, which you may withdraw at any time.

Who we share data with

• Supabase — our database and authentication provider, which stores account data on our behalf.
• Lovable — our application hosting provider.

We do not sell personal data. We disclose data to authorities only where legally required.

Retention and deletion

Account data is kept while your account is open. Deleting your account from the account page removes your account and its data. Records of received gifts are retained where tax or accounting law requires.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to complain to your local data protection authority. Email us and we will respond within 30 days.

Cookies and local storage

We use only what the service needs: a sign-in session token if you have an account, and a small browser entry remembering your player preferences. No advertising or third-party tracking cookies are set by us.