privacy policy
effective 26 october 2026
We built this site to collect as little as possible. Here is everything.
who we are
The controller of this website is Unitar LLC, publishing as HOLY SMOKES. Address and contact are in the imprint. Email: hello@holysmokeslabs.com.
your audio and files
Files you open in the studio or in the visual tools are played and processed by your own browser. They are never uploaded, stored or seen by us. Exports are created on your device and saved straight to it.
no accounts, cookies or analytics
There are no user accounts, no cookies, no advertising and no analytics or tracking scripts. Because nothing tracks you, there is no cookie banner.
browser storage
Your browser's local storage keeps your menu preferences (menu sounds, TV effects, motion), your studio settings (plugin knobs, chain order) and your visual-tool settings so they are there next time. Session storage remembers that you already saw the start screen. This data stays on your device, is needed to provide what you asked for, and is removed when you clear your site data.
hosting and server logs
The site is hosted by Vercel Inc. (USA). Like any web server it processes your IP address and request details (page, time, browser) to deliver the site and keep it secure. Our legal basis is our legitimate interest in running a secure website (GDPR art. 6(1)(f)). Vercel keeps these logs for a short period and we do not use them to identify you. Because Vercel is in the USA, data may be transferred there under the EU-US Data Privacy Framework or standard contractual clauses.
downloads
Most downloads come from our own host. TORTUGA is served from GitHub Releases (GitHub, Inc., USA), which sees your IP address and request details when you download, under its own privacy statement.
visual tools
Depthwave and ImagineFX run in your browser and never upload your files. On first use, Depthwave downloads its depth-estimation model from Hugging Face (Hugging Face, Inc., USA), which sees your IP address like any download. Later visits use your browser's cache. All scripts, fonts and other code are served from our own host.
If you email us, we use your address and message only to answer you (legal basis: your request, art. 6(1)(b) or (f)) and delete the conversation when it is no longer needed, normally within 12 months.
your rights
Under the GDPR and UK GDPR you can ask us for access, correction, deletion, restriction or portability of personal data about you, and object to processing based on legitimate interest. You can lodge a complaint with your local data-protection authority. Under the CCPA/CPRA California residents have similar rights; we do not sell or share personal information. Since we hold nothing beyond emails you send us and the provider logs described above, write to hello@holysmokeslabs.com for any request.
children
The site is not directed at children under 13 and we do not knowingly collect their data.
changes
If this policy changes, the new version and its date will appear on this page.