NoiseWeave · Privacy

Your sound.
Your choice.

Updated October 13, 2026. NoiseWeave is provided by Terence Paul Stupple trading as Hypermediacy, an Australian sole trader. ABN 11 087 071 186. In this policy, “we” and “us” mean Hypermediacy.

The short version

You do not need an account. The app generates sound on your device, and listening does not require an internet connection. Your listening settings and named favourites are stored locally and may be included in your device backup.

Your app data

The app generates sound locally. It does not record microphone audio or require a NoiseWeave account. Your sound settings, named favourites and introduction preferences stay on your device. The app shares a local copy of favourites and listening state with its widget through an Apple app group. Favourite names and recipes can be available to Apple system features such as widgets and Shortcuts. Your device settings control backups and those system features.

If you choose to share a sound, its name and recipe are included in the exported file or sharing card. The recipient and service you choose can receive and retain that content under their own policies. Avoid putting private information in a name you plan to share. NoiseWeave does not upload your library to a Hypermediacy account or cloud-sync service.

Apple purchases

When purchases become available, Apple handles App Store payment and billing information. NoiseWeave uses Apple’s on-device transaction verification to determine whether an unlock is available and to restore eligible purchases. We do not receive your payment-card details and the app does not send its transaction history to a Hypermediacy server. Apple may provide developers with sales and financial reports. Apple’s handling of App Store, diagnostics and backup information is described in Apple’s privacy policy.

Your chosen website region is saved in this browser until you clear site storage. It controls regional suggestions and is not sent with launch signups.

This website and its sound preview

The preview generates sound in your browser. It does not use your microphone or upload audio. The selected colour can be included in links between our sound pages; we only store it with a launch signup if you separately choose to share signup context. With analytics consent, the selected colour is also included in preview-start events. Fonts and images are served from this site. Advertising trackers are not enabled.

Google Analytics is optional. If you choose “Allow analytics”, Google Tag Manager loads Google Analytics to measure page visits, scrolling, preview starts, received launch-notification requests and App Store link clicks when those links are available. Google receives browser and device information, approximate location and cookie identifiers. We do not send signup email addresses, audio, form contents or named favourites to Google. Page query strings and referring links are stripped, except recognised campaign source and medium values. A received request is not a verified subscriber. A session-storage flag prevents repeat lead events in the same browser tab session and is cleared when analytics is declined. These reports are separate from the optional context stored with your launch signup.

Before you allow analytics, no Google measurement tag loads. Your choice is stored on this device for 180 days. Analytics cookies expire after up to 180 days; Google Analytics retains event-level and user-level data for two months, while aggregated reports may last longer. Use “Analytics choices” in the footer to change your decision. Declining removes this site's Google Analytics cookies and stops future Google measurement; it does not remove reports already collected. Advertising personalisation and Google signals are disabled. Google may process data outside Australia under its privacy policy.

Cloudflare Web Analytics also measures aggregate visits and website performance without analytics cookies or persistent visitor identifiers. Its automatic measurement excludes EU visitors. It does not log query strings. This service is separate from the optional Google Analytics choice and from Cloudflare's hosting and security processing.

Cloudflare hosts this website and processes network information such as your IP address and request details to deliver and protect the website. This is separate from any optional development-app usage reports. See Cloudflare’s privacy policy. Cloudflare controls its platform security processing and associated retention; we do not describe visiting the website as anonymous. Our signup Worker does not log submitted email addresses or request bodies, and its invocation logging is disabled.

Launch notification signup

Hypermediacy stores the email address you submit, the server-recorded signup time, your consent choices, and the wording and privacy-notice version shown at signup. We use your express consent to keep the address for one NoiseWeave launch announcement. This does not subscribe you to a regular newsletter or other products.

Only if you tick the separate optional box, we also store your signup page, selected sound colour, a recognised referral or campaign source and medium, approximate country supplied by Cloudflare and primary browser language. This helps us understand which sounds, channels and languages interest people. These details are linked to your email, so they are personal information, not anonymous statistics. You can sign up without sharing them.

We do not store your IP address, full browser details, precise location, full referring URLs, arbitrary campaign text, advertising identifiers or browsing history in the signup database. The form temporarily processes a daily digest derived from your network address for short-lived rate limiting. It also uses a hidden spam field. These protections do not create a tracking cookie.

Signups are stored in a private Cloudflare D1 database for Hypermediacy. Access is limited to authorised administrators; there is no public list or lookup. Cloudflare may process data internationally. We do not sell signup details or share them with advertising platforms. No email delivery provider is connected yet, no confirmation email is sent, and we have not verified ownership of submitted addresses.

Launch signup records expire 12 months after collection and are removed by daily cleanup, or earlier when you request removal. Cloudflare database recovery history may retain earlier states for up to another 30 days. Any requested deletions must be reapplied before restored data is used. We will not extend consent to new marketing purposes without asking.

To withdraw consent, delete your signup or its optional context, correct your address, request a copy, or raise a privacy concern, email hello@noiseweave.app from the submitted address. We may need to verify a request before disclosing or changing personal information. Withdrawal does not affect processing already carried out. The launch email will include an unsubscribe option; sending remains disabled until that is ready.

Signup and analytics choices

The signup form works without Google Analytics. If you separately allow website analytics, a successful request can send a lead event without your email or form contents, as described above. Signing up for an email does not agree to analytics, and declining analytics does not prevent signup. Cloudflare may apply essential security measures. Zaraz and advertising pixels are not enabled.

Optional development-app usage and diagnostics

Usage sharing is off by default. In development builds with a configured reporting service, you can choose to share it in the sound panel under Controls → Privacy. The current release configuration has no reporting endpoint. Listening works whether or not you agree to share.

If you agree in a supported build, the app creates a random installation identifier and sends:

• Playback durations, approximate foreground and background duration, session dates and start times.
• Observed start delay, playback ending and error categories.
• Whether mixing, shaping or favourites were used.
• App build, OS major version, and whether the device is a phone or tablet.

These reports are linked to that installation. They are pseudonymous, not anonymous. Hypermediacy uses them to understand reliability, feature use and repeat listening.

What is not collected by the app reporting service

The app does not send microphone audio, names of favourites, precise location, advertising identifiers or recordings of gestures. Settings and favourite recipes are not uploaded to the reporting service. We do not sell usage reports, use them for advertising, or link them across other companies’ apps.

Development-report processing and retention

When development reporting is enabled, Cloudflare processes network requests and stores optional app reports for Hypermediacy. The app analytics database does not store IP addresses. Cloudflare may independently process network and security information. Application request-body and invocation logging are disabled for the development reporting service.

Pending app reports stay on your device for up to seven days, with a maximum of 200 reports. Server reports expire after 90 days. Cloudflare database recovery history may retain earlier states for up to another 30 days. Deletion requests must be reapplied before recovered data is served.

Your choices and deletion

For a build with usage sharing, open the sound panel, choose Controls → Privacy, then choose Stop sharing or Delete shared data. Either action discards pending reports and requests deletion of this installation’s server reports. Deletion retries when a connection is available.

A minimal identifier and credential hash remain for up to 90 days to reject delayed uploads; recovery copies expire on their own schedule. Wait for deletion to complete before uninstalling: removing the app removes its ability to authenticate the request. Re-enabling sharing creates a new identifier and does not upload earlier listening.

There is no account to delete. Named favourites can be removed within the app. Device backups are managed through your device and backup provider.

Support and privacy requests

If you email us, we receive your email address, message and any attachments you choose to send. We use them to answer you, resolve the issue and keep a record of the request. Our support mailbox uses Apple iCloud Mail. Do not include passwords, payment-card details or private recordings.

We keep correspondence while it is needed to deal with your request and any related dispute or legal record-keeping obligation, then delete it when it is no longer needed. You may ask for access, correction or deletion by emailing hello@noiseweave.app. We may verify your identity and explain any information we must retain and why.

Providers and international processing

We use Cloudflare for website hosting, security, aggregate website analytics and signup storage, Google for optional website analytics, and Apple iCloud Mail for support correspondence. These providers may process information outside Australia. We use their services under applicable data-protection terms and require providers processing information on our behalf to protect it to at least the standard described in this policy. We do not sell personal information or give signup or usage data to advertising platforms. We may disclose information where required by law or to address a security incident.

Privacy concerns

Contact us first so we can investigate and respond. Depending on where you live and the laws that apply, you may also have rights to restrict processing, object, receive a copy of your information, or complain to a privacy regulator. Australian privacy information and complaint guidance is available from the Office of the Australian Information Commissioner.

Questions and policy changes

Contact hello@noiseweave.app for privacy questions, or visit the support page. We will update this notice when the app’s data handling changes and show the revision date above.