Privacy Policy

1. Who We Are

SoundForge ("we", "us", "our") is a DJ set planning tool operated by Morrissey Labs Ltd, a company registered in England and Wales.

For the purposes of UK GDPR, Morrissey Labs Ltd is the data controller for personal data processed through soundforge.io.

Registered office: To be confirmed upon Companies House registration. Written data requests may be sent to hello@soundforge.io in the meantime.

2. Data We Collect

We do not collect sensitive personal data (health, financial, biometric, etc.).

3. How We Use Your Data

We use personal data only for the following purposes:

• Service delivery — to provide the set-building tool and any features included in your plan
• Communication — to respond to support or contact form submissions
• Billing — to manage your subscription via Lemon Squeezy
• Newsletter — to send updates you have explicitly opted into
• Security — to detect and prevent fraud or abuse

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Our legal basis for processing is:

• Contract — for providing paid services
• Legitimate interests — for security and service improvement
• Consent — for newsletters (which you may withdraw at any time)

4. Local Storage & Browser Data

SoundForge stores the following data directly in your browser using localStorage and sessionStorage. This data never leaves your device and is not accessible to us:

• sf-theme — your dark/light mode preference
• soundforge_history — your previously generated sets
• sf-profile — your display name and preferences
• sf_homepage_examples — cached demo tracklist for faster page loads
• sf_site_flags — feature states (e.g. whether you've dismissed a notice)

You can clear this data at any time by clearing your browser's local storage or site data.

We do not currently use third-party tracking cookies or advertising cookies. If this changes, this policy will be updated and a consent mechanism will be provided before any tracking begins.

5. Third-Party Services

SoundForge uses the following third-party services that may process your data:

We use Beatport and Spotify solely to surface track information and purchase links. We do not share your personal data with either platform.

6. Data Retention

• Contact form messages — retained for up to 12 months, then deleted
• Newsletter subscriptions — retained until you unsubscribe
• Subscription records — retained for 7 years as required by UK tax law
• Browser / local data — stored on your device until you clear it
• Server logs — retained for up to 30 days for security purposes

7. Your Rights Under UK GDPR

You have the following rights in relation to any personal data we hold about you:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent (e.g. unsubscribe from newsletter) at any time

To exercise any of these rights, email hello@soundforge.io with the subject line "Data Request". We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption on all pages via SSL/TLS
• Cloudflare DDoS and security protection
• Access to any stored personal data is limited to authorised personnel only

No method of transmission over the internet is 100% secure. In the event of a data breach that is likely to affect your rights, we will notify you and the ICO as required by UK GDPR.

9. Children

SoundForge is not directed at anyone under the age of 16. We do not knowingly collect personal data from children or minors under 16. If you believe someone under 16 has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of SoundForge after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

For any privacy-related questions, data requests, or complaints: