Privacy policy
Last updated: 2026-11-04
Osci Zero has no user accounts, no sign-up forms, no newsletter and no ads. We do not sell data and do not build profiles of visitors. This page lists everything we do process.
Who is responsible
The data controller is Piotr Kowalski, who runs oscizero.com. Contact for anything about your data: [email protected].
1. Delivering the website
Like every website, ours receives your IP address, browser type (user agent) and the address of the page or file you ask for. Our providers process this data to deliver pages and files and to protect the site from abuse:
- Cloudflare, Inc.: network, cache, security and file storage (Cloudflare R2, files.oscizero.com);
- Railway Corporation: application hosting.
Legal basis: our legitimate interest in running a working and secure website (Art. 6(1)(f) GDPR). The providers act on our behalf and keep technical logs according to their own retention rules.
2. Download counter
To show how many times a wavetable was downloaded, and to count each visitor at most once per day, we store a one-way hash of your IP address combined with the date and a secret key. We never store the IP address itself, and the hash cannot be turned back into it. Hashes are deleted after 2 days; only the total count per file is kept. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
3. Google Analytics (only with your consent)
If you click Accept in the cookie banner, we use Google Analytics 4 by Google Ireland Limited to count visits
and see which pages and wavetables are popular. Google Analytics then sets the cookies _ga and
_ga_<ID> (stored for up to 2 years) and collects data such as pages viewed, approximate location
(country or city, no precise location), device and browser type, and how you arrived on the site. IP addresses are not
logged or stored by Google Analytics 4. Data in Google Analytics is kept for at most 14 months.
Google may process this data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. More: Google's privacy policy.
If you click Reject or do nothing, no analytics cookies are set. The Google script is still loaded and may send Google anonymous signals without cookies or identifiers (Google Consent Mode), which only give rough, modelled counts.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with (also at the bottom of every page). Withdrawing does not affect processing that happened before.
4. Storage in your browser
Some settings are saved only in your own browser and are never sent to us:
| Key | Type | Purpose |
|---|---|---|
consent | localStorage | your choice in the cookie banner |
wt-note, wt-play-mode, wt-patch | localStorage | preview player settings: note, playback mode and sound |
oz-mix | sessionStorage | a wavetable made in Mix, passed to the preset editor; deleted when you close the tab |
These are needed for features you use, so they do not require consent. You can delete them at any time in your browser settings.
Your rights
Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Write to [email protected]. Because we do not know who you are and store no IP addresses, in most cases we will have no data we can link to you. You can also lodge a complaint with the data protection authority in your EU country.
Changes
If we change what we process, we will update this page and the date at the top.