School Sounds Privacy and Data Handling Statement

      Quick Summary:
      School Sounds is a client-side web application. All audio recording, editing and mixing happens locally in your web browser, and you have complete control over where your sounds are saved. Audio captured from your microphone is processed on your device and is never sent to our servers. To access the full toolset, you must sign in with a Google or Microsoft account so we can verify your authorised access. We do not store your recordings on our servers, but we do process your email address to verify access, as described below.
    

1. Data Controller Information

Application Name: School Sounds

Purpose: A web-based audio editor for simple, accessible recording, editing and mixing of sound in schools.

Data Controller: Shuistyle

Contact: hello@schoolsounds.net

Last Updated: 20 July 2026

2. What Data We Collect and Process

2.1 Data You Create

Data Type	What It Includes	Where It's Stored	Legal Basis (GDPR)
Your Sounds	Audio tracks you record, import, edit or mix, exported as WAV files	Your web browser's memory, your device, or your chosen cloud storage	Consent / Legitimate Interest
Microphone Audio	Live audio captured while recording	Processed locally in your browser only; never transmitted to our servers	Consent
Track Metadata	Track names, file name, duration, timestamps	Held in your browser during your session and in files you save	Consent / Legitimate Interest

2.2 Authentication Data (Required to Access the Toolset)

Data Type	What It Includes	Why We Process It	Legal Basis (GDPR)
Email Address	The email of the Google or Microsoft account you sign in with	To verify that your account is authorised to use School Sounds	Legitimate Interest (access control)
Sign-in Token	A short-lived token issued by Google or Microsoft	To confirm your identity at sign-in; not stored long term	Legitimate Interest

Important: We store a one-way cryptographic hash of your email address (not the address in plain text) in our access register, together with your school's domain, to check whether you are permitted to use the app. We do not build advertising or marketing profiles.

3. How We Use Your Data

3.1 Client-Side Editing; Server-Side Access Verification

Recording, editing, mixing and exporting all take place inside your browser on your device. The only server interaction is an access check: when you sign in, your verified email is checked against our register of authorised users and school domains. Nothing about your audio content leaves your device unless you choose to save it to cloud storage.

3.2 Specific Uses

Verifying that you are authorised to use School Sounds.
Providing the recording, editing and export features you request.
Saving to, and opening from, your chosen cloud storage when you ask us to.
Keeping the service secure (for example, rate-limiting to prevent abuse).

4. Where Your Data Is Stored

4.1 Browser Memory

While you work, your tracks and edits live in your browser's memory. They are cleared when you close the page unless you have saved them.

4.2 Device Downloads

When you export a sound, the WAV file is saved to your device using your browser's normal download or file-picker mechanism. We never see these files.

4.3 Cloud Storage (Google Drive / OneDrive)

If you choose to save to or open from Google Drive or OneDrive, your sounds are stored in a folder named MySounds in your own account. This is governed by Google's or Microsoft's privacy terms. We only access the files you explicitly save or open, and only while you are signed in.

5. Data Retention

Your sounds: retained only where you choose to save them (your device or your cloud account). We hold no copies.
Access register: the hashed email / domain entry that authorises you is retained while your access is active and removed when access is withdrawn.
Sign-in tokens: transient; not retained after your session.

6. Data Sharing and Third Parties

6.1 No Server-Side Data Sharing

We do not sell, rent or share your personal data. We do not transmit your audio to any third party.

6.2 Third-Party Services (When You Choose to Use Them)

Google — sign-in and optional Google Drive storage.
Microsoft — sign-in and optional OneDrive storage.
Google Firebase / Cloud — hosts the access-verification service and our register of authorised users.

6.3 No Analytics or Tracking

School Sounds does not use analytics, advertising or cross-site tracking technologies.

7. Your Rights Under UK GDPR

You have the right to access, rectify, erase, restrict and object to the processing of your personal data, and the right to data portability. Because we hold only a hashed access-register entry, most requests relate to removing your authorisation. To exercise any right, contact us at hello@schoolsounds.net.

8. Data Security Measures

8.1 Technical Security

All connections use HTTPS encryption.
Email addresses are stored only as one-way SHA-256 hashes in the access register.
Server functions require attestation (App Check) and enforce rate limits.
The access database is not readable or writable by clients — only by our secured server functions.

8.2 Data Minimisation

We collect the minimum needed to verify access. We do not request or retain your recordings.

9. Cookies and Similar Technologies

9.1 Strictly Necessary Storage

We use only local storage strictly necessary to keep you signed in and to remember basic preferences. No advertising or tracking cookies are used.

9.2 Third-Party Cookies

Signing in with Google or Microsoft, or using their cloud storage, may set cookies governed by those providers' own policies.

10. Children's Privacy

10.1 Protection for Young Users

School Sounds is designed for classroom use. It contains no advertising, no tracking, and no social features. Audio never leaves the child's device unless a teacher or pupil deliberately saves it. Sign-in is intended to be performed with a school-provided account under staff supervision.

10.2 Parental and School Guidance

Schools act as the data controller for their pupils' use of accounts they provide. We encourage schools to supervise sign-in and cloud-saving.

11. International Data Transfers

Audio processing is entirely client-side and does not cross borders. The access-verification service is hosted in the europe-west1 region. Where you use Google or Microsoft services, transfers are governed by those providers' safeguards.

12. Changes to This Statement

We may update this statement from time to time. Material changes will be reflected by an updated "Last Updated" date at the top of this page. Continued use after changes constitutes acceptance.

13. Your Consent

By signing in to and using School Sounds, you consent to the processing described here. You may withdraw consent at any time by ceasing to use the app and asking us to remove your access-register entry.

Questions or Concerns?

If you have any questions about this Privacy Statement or how your data is handled, please contact us at hello@schoolsounds.net.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Last Updated: 20 July 2026 | Terms of Service