Privacy Policy

How Sonic Wave Studio collects, uses, and protects your personal data.

Last updated: 14 June 2026

Who we are

Sonic Wave Studio (sonicwavestudio.com) is the personal music portfolio of Antoine Vlieghe, an independent musician based in Paris, France ("we", "us", "the Site"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.

For the purposes of the EU General Data Protection Regulation (GDPR) and the French Data Protection Act, the data controller is Antoine Vlieghe. You can reach us using the details in the "Contact" section below.

Information we collect

We only collect what we need to run the Site. Depending on how you use it, this may include:

  • Account information — if you create an account: your email address, an optional username, and a securely hashed version of your password. We never store your password in plain text.
  • Contact messages — if you use the contact form: your name, email address, and the content of your message.
  • Course progress — if you are a signed-in member: which course sections you have marked as completed.
  • Purchases — if you buy a downloadable guitar tab: your email address and a payment reference from our payment provider. We never see or store your full card details.
  • Usage analytics — only if you consent to analytics cookies: anonymised page-view data such as the page visited, your language preference, a random session identifier, and the referring site. This data is automatically deleted after 7 days.
  • Technical data — standard information your browser sends with each request, used only to deliver and secure the Site.

How we use your information

  • To create and manage your account and keep you signed in.
  • To send essential service emails (email verification, password resets, and replies to your contact messages).
  • To remember your preferences, such as your language and theme.
  • To track your progress through course content.
  • To process and deliver paid downloads.
  • To understand, in aggregate, how the Site is used so we can improve it.
  • To keep the Site secure and prevent abuse.

Cookies and similar technologies

  • Essential cookies — a single, secure, HTTP-only session cookie that keeps you signed in. The Site cannot function without it, so it does not require consent.
  • Analytics — optional and off by default. We only collect anonymised analytics if you accept them in the cookie banner; your choice is stored locally in your browser.
  • We do not use advertising cookies or third-party tracking for marketing.

TikTok integration

Sonic Wave Studio integrates with TikTok through TikTok's official Content Posting API so that the Site owner can publish his own music content (such as videos and their captions) to his own TikTok account directly from the Site.

  • This integration is used by the Site owner only. It is not a "log in with TikTok" feature: visitors are never asked for, and never provide, any TikTok credentials or personal data through the Site.
  • When content is published, the video, caption, and related metadata are sent to TikTok and become subject to TikTok’s own Privacy Policy and Terms of Service.
  • We request only the minimum TikTok permissions needed to publish content, and we use the resulting access tokens solely for that purpose. We do not sell or share TikTok data, and we do not use it for advertising or profiling.

Content published to TikTok is also governed by TikTok's own policies:

Who we share data with

We do not sell your personal data. We share it only with the service providers that make the Site work, and only as needed:

  • Cloudflare — hosting, content delivery, and our database.
  • Resend — sending transactional emails (verification, password resets, contact replies).
  • Stripe — processing payments for paid downloads (when payments are enabled). Stripe handles your card data directly under its own privacy policy.
  • TikTok — only when the Site owner publishes his own content, as described above.

These providers act as our processors and may store data outside the European Union. Where that happens, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

How long we keep your data

  • Account data — until you delete your account.
  • Contact messages — until they are resolved and archived.
  • Analytics — automatically deleted after 7 days.
  • Purchase records — retained as long as required for accounting and legal obligations.
  • Verification and password-reset tokens — automatically expire, typically within 24 hours.

Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data — you can delete your account at any time from your profile, which removes your personal information.
  • Restrict or object to certain processing.
  • Withdraw your consent to analytics at any time.
  • Receive a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).

Security

We protect your data with industry-standard measures: passwords are hashed, the Site is served exclusively over HTTPS, and sessions use signed, HTTP-only cookies. No system is perfectly secure, but we work to keep your data safe.

Children

The Site is not directed at children under 15, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page. Significant changes will be communicated where appropriate.

Contact

For any question about this Privacy Policy or your personal data, contact us at: