Privacy Policy

Last updated: September 2026

1. Controller

This privacy policy applies to the websites tools.cbsound.de and sounds.cbsound.de. Where it refers to “this website”, both are meant. The controller responsible for data processing is:

Christian Bartrow
CB Sounddesign
Ansprengerstraße 1
80803 Munich
Germany
Phone: +49 172 3098762
Email: info@cbsound.de

2. Overview

tools.cbsound.de offers browser tools for audio and MIDI; sounds.cbsound.de presents our sound libraries. The tools run in your browser. Audio files, samples, presets and MIDI data you work with are processed on your device and are not transmitted to us. You do not need an account, and the tools work without consenting to any optional service.

Personal data is only processed in the following cases: when the website is delivered (server log files), when your privacy settings are stored, for optional usage statistics if you have consented, and when you contact us by email. No automated decision-making or profiling takes place.

Recipients: Personal data is only received by the service providers named in this policy, acting on our behalf: STRATO for hosting and email, and Umami for usage statistics, the latter only with your consent. Beyond that, we only pass on data where we are legally required to do so.

Storage period: Where no specific storage period is stated in the sections below, we only keep data for as long as it is needed for the respective purpose. It is then deleted unless statutory retention obligations apply, in which case processing is restricted until the retention period ends.

3. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Whenever a page is requested, the server automatically processes data sent by your browser: IP address, date and time of the request, requested address, amount of data transferred, status code, the previously visited page (referrer), and browser and operating system information.

This processing is necessary to deliver the website, keep it stable and secure, and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the technically sound and secure operation of the website. According to STRATO, log files are kept for a few days up to a maximum of 90 days, depending on security and operational needs, and then deleted.

STRATO processes this data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.

The connection to this website is encrypted using TLS, which you can recognise by “https://” in your browser’s address bar.

4. Storage in your browser

This section concerns the tools on tools.cbsound.de. Some tools store settings, presets and work in progress in your browser’s local storage (localStorage). So that the tools start faster and also work offline, a service worker additionally stores the tools’ program files in your browser’s cache. This data stays on your device and is not transmitted to us.

For the MIDI features, your browser asks for your permission before a tool first accesses your MIDI devices. MIDI data is exchanged only between the tool and your devices.

This storage is strictly necessary to provide the tools you have explicitly chosen to use (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). You can delete this data at any time in your browser settings, for example via “Clear site data”; saved presets and settings will be lost.

5. Privacy settings (Klaro)

We use the open-source software Klaro to manage your consent. It is loaded directly from our server, and no data is passed on to third parties. Your choices are stored in a cookie named “cb_consent” in your browser, so that we can respect and document your decision and do not have to ask again on every visit. The cookie is shared by tools.cbsound.de and sounds.cbsound.de, so your decision applies on both websites. It contains only your choices and is deleted after 365 days.

The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent) and Section 25(2) no. 2 TDDDG.

6. Usage statistics (Umami Cloud)

Only if you have consented in the privacy settings do we use the analytics service Umami Cloud provided by Umami Software, Inc., USA. Umami shows us which pages and tools are visited and how often, and which links to shops and between tools.cbsound.de and sounds.cbsound.de are clicked. The following data is processed: the page visited, the previously visited page (referrer), browser, operating system, device type, screen size, language setting and country. According to Umami, your IP address is only used to determine the country and is not stored. Umami does not set cookies and does not build cross-site profiles.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future using the “Change privacy settings” button on this page.

Umami processes the data on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place with Umami. Statistics data is stored on servers in the EU. As Umami Software, Inc. is based in the USA, access from the USA cannot be ruled out. Where personal data is transferred to the USA in this context, this is based on the European Commission’s Standard Contractual Clauses provided for in Umami’s data processing agreement. Statistics data is deleted after 6 months.

7. Contact by email or phone

If you email or call us, we process your contact details (email address or phone number), your name if provided, and the content of your enquiry in order to answer it. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is responding to your enquiry. We delete enquiries once they have been dealt with, unless statutory retention obligations apply. Emails are processed via our mailbox at STRATO GmbH, which acts on our behalf.

8. Links to other websites

This website contains links to other websites, for example decentsampler.com and online shops and marketplaces where our sound libraries are available. No data is sent to these websites when the links are merely displayed. Once you click a link, the privacy policy of that website applies. If you buy there, the respective shop or marketplace is responsible for processing your order and payment data.

9. Your rights

You have the right of access to your data processed by us (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, simply send an email to info@cbsound.de.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

11. Changes

We update this privacy policy when the website or the services used change. The version published here applies.