Privacy policy

This is a translation provided for convenience. This website is operated from Germany, and the German version is the legally binding one. Where the two differ, the German text prevails.

1. General information

This policy explains which personal data are processed when you visit this website, for what purpose this happens and on what legal basis. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the supplementary German provisions.

This website can be used without providing any personal data. No contact forms are offered, no tracking cookies are set and no social media plugins are embedded. No content whatsoever is loaded from third-party servers — neither fonts nor scripts, libraries or images. When you visit this page, your browser connects solely to this website's own server.

The only technically unavoidable processing is the logging of the page request by the web server. What is stored, for how long and for what purpose is set out in section 5. Three further items are stored locally in your browser without being transmitted: patches you save in the sound generator, the state you last worked on, and the display language you choose — details in section 6.

2. Controller

The controller responsible for data processing on this website is:

Thomas Wagner
Niederseidewitzer Weg 24
01257 Dresden
Email: info@moduloone.de

(The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.)

3. Contact by email

This website provides no contact form. If you use the email address given in section 2 and in the legal notice, the information transmitted is stored: the sender address, the content of the message and anything else you choose to share.

Purpose and legal basis:
The processing serves solely to deal with your enquiry and is carried out on the basis of Art. 6 (1) (f) GDPR. The legitimate interest lies in answering the enquiry.

Storage period:
The message is deleted once the matter has been dealt with conclusively and no statutory retention obligations stand in the way. You may object to further storage at any time (see section 11).

No disclosure to third parties takes place. The mail server runs on the same infrastructure as the website (see section 4).

4. Hosting

This website runs on a virtual server rented from netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. netcup provides the infrastructure only. The web server itself is operated and configured by the controller; the logging described in section 5 is therefore carried out by the controller and not by netcup.

Since netcup can technically access the host system and its backups, a data processing agreement pursuant to Art. 28 GDPR is in place with netcup. This contractually required agreement ensures that netcup processes personal data only on the instructions of the controller and in compliance with the GDPR.

The server is located within the European Union. No personal data are transferred to third countries.

5. Server log files

Each time a file on this website is requested, the web server automatically writes an entry to a log file. The following are recorded:

• the truncated IP address (see “Truncation of the IP address” below)
• the date and time of access
• the file requested, together with the HTTP method and protocol version used
• the HTTP status code of the response
• the volume of data transferred
• the previously visited page (referrer), where the browser transmits it
• browser type, browser version and operating system (from the user agent string)

Truncation of the IP address:
The IP address is truncated before it is written to the log file. For IPv4 addresses the last field is replaced by a zero (203.0.113.47 becomes 203.0.113.0). For IPv6 addresses only the first 48 of 128 bits are kept, that is the first three of eight blocks (2001:db8:85a3:8d3:1319:8a2e:370:7348 becomes 2001:db8:85a3::); as a rule this prefix identifies only the network range of a provider or a region, not an individual connection. Where it cannot be determined unambiguously, the IPv6 address is discarded entirely. The full IP address is never stored. As a rule, these data do not permit conclusions about individual persons.

Purpose and legal basis:
Logging is carried out on the basis of Art. 6 (1) (f) GDPR. The legitimate interest lies in the technically faultless and secure operation of the website, in detecting and fending off attacks and abusive access, and in a rough assessment of usage — such as the number of page views per day.

Storage period:
The log files are rotated automatically every week. Five older generations are kept and then deleted automatically. An individual entry is therefore stored for six weeks at most.

No combination, no disclosure:
The log data are not combined with other data sources and are not disclosed to third parties. Any evaluation is carried out solely in aggregated form.

6. Local storage in the browser

There are three places where this website stores something in your browser's local storage (localStorage). In each case this only happens once you do something yourself: save a patch, build something on the canvas, or switch the language.

Your own patches:
The sound generator allows you to save your own patches — that is, sound setups you have assembled yourself. What is stored is exclusively what you put there via the save button: the structure of the patch and the name you gave it. The patches of the library, by contrast, are not kept in browser storage but come with the website.

Working state:
So that your work is not lost when you close or reload the page, the sound generator automatically saves the setup on the canvas as soon as you add or change something there or load a patch. Only this one state is kept: the structure of the patch, the time of the last change, and which entry of the library or of your own patches is currently selected. Every further change replaces it. On your next visit you are offered to restore it. If you clear the canvas or choose “Discard” on that offer, it is removed. Merely visiting the page stores nothing.

Display language:
This website is offered in German and English. If you switch using the “DE” and “EN” buttons at the top, the language you chose is stored so that it is still in place on your next visit. What is stored is only the code “de” or “en”.

As long as you do not switch, nothing is stored for this purpose. Which language appears on a first visit is decided by the language preference set in your browser — the same information your browser transmits with every page request anyway. It is only read, not stored and not transmitted. If neither of the two languages is among them, the English version is shown.

For all three items the following applies:

• The data remain on your device. They are at no point transmitted to this website's server or to third parties; the controller has no access to them.
• No identifier is set that would allow you to be recognised across visits. No evaluation of usage behaviour takes place.
• You can remove the data yourself at any time: your own patches via the delete function under “My patches”, the working state via “Discard” or by clearing the canvas, and all three via your browser settings (“clear site data”).

Legal classification:
Storing information on terminal equipment falls under § 25 TDDDG (German Telecommunications Digital Services Data Protection Act), irrespective of whether it involves cookies or, as here, local storage. Consent is nevertheless not required for any of the three items, because the storage is strictly necessary under § 25 (2) no. 2 TDDDG in order to provide a service expressly requested by the user: it takes place only when a patch is actively saved, work is done on the canvas or the language is actively switched, and covers only those items. The working state serves solely to let your work on a patch survive closing the page. For the same reason, this website needs no consent banner.

Your own patches can additionally be downloaded as a file and read back in. This too runs entirely in the browser; the file is not transmitted.

Beyond this, this website stores nothing in the browser.

7. Audio recording and export

The generator can record the sound it produces and offer it as a file for download.

No access to the microphone takes place. What is recorded is exclusively the signal the application itself generates. This website never requests permissions for microphone, camera or other devices; the programming interfaces required for that are not used anywhere in the source code.

The recording is created in the browser and is not transmitted to this website's server.

8. SSL/TLS encryption

For security reasons this website uses TLS encryption. You can recognise this by the browser's address bar beginning with “https://” and by the padlock symbol. With encryption active, the data your browser transmits to this website's server cannot be read by third parties.

9. Your rights as a data subject

You have the following rights vis-à-vis the controller:

• Access to the data stored about you, their origin, recipients and the purpose of the processing (Art. 15 GDPR)
• Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• Erasure of the stored data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability, that is, release in a commonly used, machine-readable format (Art. 20 GDPR)
• Objection to the processing (Art. 21 GDPR, see section 11)

To exercise these rights, and for any further questions about data protection, a message to the address given in section 2 is sufficient. Information is provided free of charge.

A practical note: because the log data are stored only in truncated form as described in section 5, individual entries cannot be attributed to any person. A request for access, erasure or objection therefore cannot be acted upon for those data unless additional information enabling identification is provided (Art. 11 (2) GDPR). Personal data other than those described in sections 3 and 5 are not collected via this website; the locally stored items named in section 6 do not leave your device and are not accessible to the controller.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is that of the federal state in which the controller is established:

Die Sächsische Datenschutz- und Transparenzbeauftragte
Postfach 11 01 32
01330 Dresden, Germany
Telephone: +49 351 85471-101
Email: post@sdtb.sachsen.de

A complaint to the supervisory authority of your habitual residence or place of work is equally possible.

11. Right to object under Art. 21 GDPR

Where data processing is carried out on the basis of Art. 6 (1) (f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation. On this website this concerns the processing described in sections 3 and 5.

If you object, the personal data concerned will no longer be processed, unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Last updated: 5 October 2026