Privacy Policy

Last updated: 2026 · in accordance with the GDPR

This policy explains what personal data we process when you use Pulse (“the Service”), why, and what rights you have. We keep data collection to the minimum needed to run the Service.

1. Controller

Voodoo Beats
Schleswiger Damm 129, 20457 Hamburg, Germany
vdinstrumentals@gmail.com

2. Your media stays on your device

Audio files, images and logos you load into the visualizer are processed locally in your browser. They are used to generate the preview and the rendered video on your own device and are not uploaded to or stored on our servers. The finished video is created in your browser and downloaded directly by you.

3. Account & authentication

Sign-in and account management are handled by our processor Clerk. When you create an account, Clerk processes data such as your email address, a password or third-party login identifier, and session/usage metadata (e.g. IP address, device and timestamps) to keep you securely signed in. Legal basis: Art. 6 (1)(b) GDPR (performance of the contract) and Art. 6 (1)(f) GDPR (secure operation).

4. Payments

Subscriptions and payments are processed by Stripe. When you subscribe, Stripe collects the payment data you enter (e.g. card details, name, billing country) directly; we do not receive or store full payment card numbers. We receive a customer and subscription identifier and the subscription status in order to unlock and manage Premium access. Legal basis: Art. 6 (1)(b) GDPR.

5. Hosting & server logs

The Service is hosted by Vercel. When you access the site, the infrastructure automatically processes technical access data (e.g. IP address, browser type, requested URL, timestamp) as is technically necessary to deliver the site and to ensure stability and security. Legal basis: Art. 6 (1)(f) GDPR.

6. Cookies

We use only cookies and comparable storage that are strictly necessary for the Service to function — in particular session cookies set by Clerk to keep you signed in. We do not use advertising or cross-site tracking cookies. Strictly necessary cookies do not require consent (§ 25 (2) TDDDG).

7. Processors & transfers to third countries

We use the processors named above (Clerk, Stripe, Vercel) under data processing agreements pursuant to Art. 28 GDPR. Some of them may process data on servers located outside the EU, including in the USA. Where this happens, transfers are safeguarded by appropriate mechanisms such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

8. Retention

We keep account and subscription data for as long as your account exists and as required to fulfil the contract. Billing records are retained for the statutory periods (generally up to 10 years under German tax and commercial law). When you delete your account, related personal data is deleted or anonymised unless we are legally required to retain it.

9. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17) and restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time with effect for the future (Art. 7 (3))

To exercise any of these rights, contact us at the address above.

10. Right to complain

You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).