Box Of Rules Waveform Analyser
Privacy

What happens to your audio and your data

Short version: your audio is processed, then deleted. The numbers and charts it produced stay in your account until you delete them. I am James H. Gordy, I run Box Of Rules, and this page describes exactly what this site does, nothing more.

Your audio

  • Uploaded files are stored privately while the run is queued and processing.
  • The moment a run finishes, succeeds or fails, the audio files are deleted from the server. I never listen to them, and there is no copy to listen to afterwards.
  • What is kept: the extracted feature data (numbers), the generated chart images, the original file names, and file sizes. Delete a run and those go too.

Your account

  • Stored: your name, email address, password hash, token ledger and run history.
  • Your email is used to confirm the account, reset passwords, and nothing else unless you separately opt into the Box Of Rules newsletter over on the main site.
  • Deleting your account removes your runs, stored charts and personal details. The token ledger rows go with it.

Cookies and tracking

  • This site sets a session cookie and a CSRF token because signed-in sites need them.
  • Google Analytics 4 measures which pages get used, and only if you accept the consent banner. Decline it and the analytics cookie is never set. Consent Mode keeps everything denied by default, IPs are anonymised, and I never send names, emails or audio data to it.
  • No advertising trackers and no fingerprinting.

The free analysis page

  • The one-free-run limit works on your IP address, but the address itself is never stored: only a keyed hash of it, which cannot be reversed back to the IP.
  • Free runs are different from account runs on one point, and you agree to it with a checkbox before uploading: the audio file and its analysis results are kept, and I use them to improve the analyser. No upload happens without that box ticked.
  • Kept files are stored by content fingerprint, so the same file is only ever stored once, and nothing links it to you personally beyond the hashed IP above.
  • Free result links stop working after 24 hours. The retention above is separate from the link: the link dying does not delete the data.
  • Account runs keep the original promise: audio deleted the moment the run finishes.

Questions

Ask me directly on the support page. I read everything.