Privacy Notice
Last updated: 6 April 2026
This notice explains how the ObraVera Audio Watermark Verifier at verify.obravera.com handles personal data. ObraVera is committed to data minimisation — we collect only what is needed to operate the verification service.
Data controller
ObraVera
Brady Ian Ridgway, micro-entrepreneur
SIREN 984 746 644
9 Grand Rue des Rosiers, Malves en Minervois, France
Contact: privacy@obravera.com
What we process
| Data | Purpose | Retention |
|---|---|---|
| Audio recording | Sent to server for watermark analysis | Deleted immediately after analysis (not stored). The sole exception is diagnostic retention, which is off unless you have explicitly agreed to it — see Diagnostic retention. |
| Access token | Authenticates your session with the verifier | Until revoked |
| Verification log | Records that a verification was performed (token, payload detected, timestamp) | 90 days |
| Reference fingerprint (creators only) | When a creator registers a watermarked work from the desktop app, the app computes a compact acoustic "landmark" description of that work (the positions of spectral peaks) and sends only that description — never the audio. It lets the verifier recognise which registered work a recording is of when the watermark cannot be recovered. | Until the creator asks for it to be removed. It cannot be turned back into audio. Removing it does not affect the registration or the watermark. |
| Server access logs | Security monitoring (IP address, URL, timestamp, user-agent) | 90 days |
Registered creators
If you are a registered creator with a watermark payload, the verifier database also stores your name, email address, username, and a hash of your API key. This data is provided when you register through the ObraVera desktop application and is used to link detected watermarks to your creator profile.
Lawful basis
- Audio analysis and verification: contract performance (Art. 6(1)(b) GDPR) — this is the service you are using
- Server access logs: legitimate interest (Art. 6(1)(f) GDPR) — security and abuse prevention
Diagnostic retention (opt-in)
Watermark verification depends on your device's microphone, your surroundings and your browser. When it fails, we normally have no way to tell whether the recording captured the right audio at all — which makes some problems very hard to fix.
If you agree to it, we can keep the recordings from your failed verification attempts so we can investigate. This is:
- Off unless you ask for it. It is enabled per tester, only with your agreement, and you can ask us to turn it off at any time.
- Failed attempts only. Successful verifications are never kept.
- Time limited. Retained recordings are deleted automatically after 30 days.
- Not linked to your full access token. Only the first few characters are recorded, so we can group your captures without storing a credential alongside them.
Retained recordings are covered by the same deletion right as everything else on this page: ask us and they are removed.
What we do not do
- We do not store audio recordings — they are deleted immediately after analysis. The sole exception is diagnostic retention, which is off by default and enabled only for testers who have explicitly agreed.
- We do not store creators' audio. A reference fingerprint is a list of spectral-peak positions, not a recording, and cannot be resynthesised into one.
- We do not use tracking cookies or analytics
- We do not sell personal data
- We do not run advertising
- We do not share data with third parties, except our hosting provider (Hetzner Online GmbH, Germany) under a signed Data Processing Agreement
Cookies
This service does not set any cookies.
Hosting
Data is hosted by Hetzner Online GmbH in Falkenstein, Germany (EU). No personal data is transferred outside the European Economic Area. A Data Processing Agreement is in place with Hetzner.
Your rights
Under the GDPR, you have the right to access, correct, or delete your personal data, and to object to processing based on legitimate interest. To exercise these rights, contact privacy@obravera.com. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority (e.g. CNIL in France, BfDI in Germany, or the ICO in the UK).
Changes
If we change how this service handles personal data, we will update this notice and the "Last updated" date above.
← Back to Verifier