Privacy policy

Inspiro - digital spirograph, inspiro.treesonance.com

Effective from 2 August 2026

In short: Inspiro runs entirely in your browser. There are no accounts and no sign-in, it collects no statistics, uses no cookies, ads or tracking scripts, and nothing you create in it is sent anywhere. Microphone audio is processed only while it is playing and never leaves your device. The only personal data arising in connection with the app are web server logs and any e-mail correspondence if you write to us. The details are below.

1. Data controller

The controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) is:

Miroslav Bátěk: a self-employed natural person
Company ID (IČO): 70601348
Registered address: Bratrušovská 2725/2, 787 01 Šumperk, Czech Republic
E-mail: support@treesonance.com

The controller has not appointed a data protection officer, as none of the conditions in Article 37(1) GDPR is met (this is not a public authority, the core activity is neither large-scale regular and systematic monitoring of data subjects nor large-scale processing of special categories of data).

2. What the app does not do

No user accounts, registration or sign-in.
No cookies, no analytics, no visitor measurement, no advertising systems.
No embedded third-party content - no fonts, maps, videos or social buttons, so using it opens no connection to any other service.
No server component it could send data to. All computation happens in the browser.
No automated decision-making or profiling within the meaning of Article 22 GDPR.

3. What data is processed, for what purpose and on what legal basis

Data	Purpose	Legal basis	Retention
Server logs: IP address, date and time of the request, page address, browser type and version (User-Agent header)	Delivering the page, keeping the service available, security and protection against attacks and abuse	Article 6(1)(f) GDPR - the controller's legitimate interest in running the service securely and reliably	For as long as the hosting provider keeps them under its own policies; the controller makes no copies of them and builds no profiles from them
E-mail address and message content, if you write to the contact address	Answering a question, suggestion or bug report and any follow-up communication	Article 6(1)(f) GDPR - legitimate interest in replying to a message you sent us yourself	No longer than 3 years from the last message on the matter, after which the correspondence is deleted

The controller collects no other personal data. The app asks for no name, e-mail or any other detail, and works in full without them.

Providing data is not mandatory

You are under no legal or contractual obligation to provide any data, and not providing it has no consequences. The IP address is technically necessary for the server to deliver the page at all - without it no internet connection can be established.

4. Sound: microphone, system audio, files

Inspiro can draw from sound. For that you have to explicitly grant the browser access to your microphone, or pick a tab or window to share, or choose an audio file from your device.

The sound is analysed live and solely in the browser's memory - it is measured for loudness in the bass, mid and treble bands, which drive the shape of the curve.
The sound is never recorded, stored or transmitted and never leaves your device. The controller has no access to it and does not process it. Once you stop the connection or close the page, nothing of it remains.
You can withdraw the permission at any time in your browser's settings for this address.
A chosen audio file is read straight from your device and is not copied anywhere.

5. Data stored in your browser

The app keeps four items in your browser's local storage so that it remembers your settings between visits:

inspiro-jazyk - the chosen interface language.
inspiro-presety - up to ten saved presets, that is numbers describing a drawing setup (radii, colours, pen width and so on).
inspiro-panely - which panels in the control column you keep expanded.
inspiro-odemknuto - a note that the 3D spaces are unlocked for you. It holds nothing but the digit one; it says nothing about a payment or about you, and nothing is queried anywhere.

These are not cookies, they contain no personal data and they are not sent to any server - they stay in the browser on your device and the controller has no access to them. This is technical storage strictly necessary to provide the service you yourself requested, so under Section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications, it requires no consent. You can remove it by clearing site data in your browser settings; presets can also be removed in the app with the Delete button.

If you install the app as a PWA, its own files are stored in the browser as well so that it works offline. Those are application files, not your data.

6. The images you create

Drawings are made and stay on your device. Exporting to PNG or SVG is an ordinary file download - nothing is sent anywhere in the process. The “pattern code” is just a short piece of text you can copy yourself; the app does not transmit it.

7. Recipients and processors

The controller does not pass personal data to third parties for their own purposes, does not sell it and does not share it for advertising. Only the following processors are involved, without which the service cannot run:

Cloudflare, Inc. (USA) and its European entities - site hosting (Cloudflare Pages), DNS and traffic protection. Processes the server logs described in section 3.
Proton AG (Switzerland) - operation of the support@treesonance.com mailbox. Processes the content of e-mail correspondence described in section 3.

8. Transfers outside the European Union

Cloudflare operates a global network, so data is transferred to countries outside the EU, including the United States. Such transfers are covered by the European Commission's standard contractual clauses incorporated into Cloudflare's Data Processing Addendum; the details are described in the Cloudflare privacy policy.

Switzerland, where Proton AG is established, is a country for which the European Commission has issued an adequacy decision under Article 45 GDPR, so transfers to Switzerland require no additional safeguards.

9. Your rights

In relation to the processing of your personal data you have the following rights:

Right of access (Art. 15) - to have it confirmed whether we process your data and to obtain a copy of it.
Right to rectification (Art. 16) - to have inaccurate data corrected.
Right to erasure (Art. 17) - to have data deleted once the reason for processing has passed.
Right to restriction of processing (Art. 18).
Right to object (Art. 21) - against processing based on legitimate interest. Since both purposes in section 3 rest precisely on legitimate interest, you may object to either; we will then stop processing the data unless we demonstrate compelling legitimate grounds.
Right to data portability (Art. 20) - applies to processing based on consent or on a contract. No such processing takes place here, so this right will not apply in practice; it is listed for completeness.

You can exercise these rights by writing to support@treesonance.com. We will handle the request without undue delay and at the latest within one month of receiving it; in complex cases this period may be extended by two further months, of which you will be informed. Handling the request is free of charge.

Because the app stores nothing under your name, we cannot identify you from an IP address alone. Where you cannot be identified under Article 11(2) GDPR, we may be unable to act on a request for access, rectification or erasure - in that case we will explain why.

10. Right to lodge a complaint

If you believe that our processing of your personal data infringes the GDPR, you may lodge a complaint with the data protection supervisory authority in the country of your habitual residence, place of work or the place of the alleged infringement.

11. Children

The app is suitable for any age. It requires no registration and no data, so it collects nothing from children - just as it collects nothing from anyone else. Article 8 GDPR on information society services offered to a child does not apply here, because the processing is not based on consent.

12. Changes to this policy

If any of this changes, we will update this page and move the effective date at the top. Previous versions can be traced in the app's source history.