Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Soundboard Online (soundboardonline.com) collects, uses, and protects your personal data. By using the service you agree to the practices described here.

1. Data Controller

Soundboard Online is operated as an independent project. For privacy-related questions, contact us at [email protected].

2. What Data We Collect

We collect the following categories of personal data:

  • Google account information — When you sign in with Google OAuth we receive your Google account ID, display name, email address, and profile photo URL.
  • Session data — We use server-side sessions via a session cookie to keep you signed in.
  • Uploaded audio files and icons — Audio clips and icon images you upload are stored on Cloudflare R2 and associated with your account.
  • Room data — Soundboard room names, member lists, and clip metadata you create.
  • Usage data — Cloudflare Web Analytics for aggregate traffic patterns (cookieless, no individual tracking).

3. How We Use Your Data

  • To authenticate you and maintain your session.
  • To display your profile name and photo to room members.
  • To store and serve the audio clips and rooms you create.
  • To operate, maintain, and improve the service.

We do not sell your personal data. We do not use your data for advertising.

4. Data Retention

  • Account data — Retained while your account is active. Deleted within 30 days of account deletion.
  • Session cookies — Expire after 30 days of inactivity.
  • Uploaded files — Retained until you delete the clip or your account.
  • Usage analytics — Aggregate data retained up to 6 months.

5. Third-Party Services

  • Google OAuth — Used for authentication.
  • Cloudflare R2 — Used for file storage.
  • Cloudflare Web Analytics — Privacy-friendly, cookieless analytics.

6. Cookies

We use a single HTTP-only session cookie to keep you signed in. No tracking or advertising cookies are set.

7. Your Rights

You may have rights to access, delete, correct, or export your data. Email [email protected] to exercise them. We respond within 30 days.

8. GDPR (European Users)

Our legal basis for processing is performance of a contract and legitimate interests. You have the right to lodge a complaint with your local data protection authority.

9. CCPA (California Users)

California residents may request to know, delete, or opt out of sale of personal information (we do not sell personal information). Contact us at [email protected].

10. Children's Privacy

This service is not directed to children under 13. Contact us to remove any data collected from a child under 13.

11. Changes to This Policy

We may update this policy. The "Last updated" date will reflect any changes.

12. Contact

Privacy questions: [email protected].