Privacy Notice
Effective November 2, 2026
This notice explains what personal information Headphones Inc. collects when you use GraphWorks, GraphWorks Access and GraphWorks EQ, why, who we share it with, how long we keep it, and the choices you have.
1. Who we are and what this notice covers
Headphones Inc., doing business as Headphones.com ("we", "us"), runs GraphWorks at graph.headphones.com and the GraphWorks Access subscription, including activating the GraphWorks EQ app on your computers. We decide how your personal information is used for them, so under EU and UK law we are its controller. Our address is 111 SW 5th Ave, Suite 3150, Portland, Oregon 97204, USA. For anything about your privacy, email info@headphones.com.
This notice covers GraphWorks only. Shopping on headphones.com, the Sonic+ membership program and our email newsletters are covered by the Headphones.com Privacy Policy. The rules for using GraphWorks are in the GraphWorks Terms of Service.
2. What we collect
We collect what you give us, what the Service records as you use it, and what our payment and membership partners tell us. We do not buy personal information, and we do not collect precise location.
| Information | What it includes | When we collect it |
|---|---|---|
| Account | Your email address, username and password (stored only as a secure hash), and whether you have confirmed your email | When you sign up or change your details |
| Sign-in records | Your IP address, your browser and device type, and when each sign-in expires | Each time you sign in |
| Subscription and payment | Your Stripe customer and subscription numbers if you pay by card, or your PayPal subscription number and PayPal account ID if you pay with PayPal; the status and dates of your subscription, the currency you paid in, the country of your card, and your country based on your IP address when you start checkout. We never see your full card number | When you buy, renew, cancel or withdraw |
| Renewal consent | Your account number and email address, which version of the renewal terms you agreed to, the US dollar price shown to you, your country, the time, and the checkout it led to | When you tick the renewal checkbox before paying |
| Sonic+ link | The email address you enter, your Headphones.com customer number, your membership tier and when we last checked it | When you link Sonic+, and when we re-check it, usually daily |
| Discord link | Your Discord user ID, whether you hold the YouTube Member role in our Discord server, and the access tokens Discord gives us when you link. Discord also tells us your Discord username and email address; we do not keep them | When you link Discord, and when we re-check your role |
| GraphWorks EQ computers | A device ID, the name of the computer, whether it runs Windows or macOS, the app version, and when it was activated and last checked in | When you activate a computer, and about once a week after that |
| Favorites | The specific measurements you mark as favorites. Favorites of whole headphones saved before November 2026 are kept, but no longer shown, until you delete your account | When you favorite a measurement |
| Public profile and ratings | If you turn on Public profile in Settings: your username, the date your account was created, the public measurements of public headphones and IEMs you favorite, and the sound-quality scores you enter or import for public items. Anyone can view these on your profile while it is public. Favorites for unlisted or private measurements or items, and ratings for unlisted or private items, are never shown on your profile. Your scores count towards each item's Community Rating, without your name, whether or not your profile is public. Imported CSV files are processed for the import and not retained | When you favorite a measurement or enter or import a rating; shown while your profile is public |
| Messages to us | What you write and your email address | When you email us |
| Site usage | The pages you visit and what you do there, such as opening a measurement, signing up, adding headphones to a comparison, exporting a graph or downloading GraphWorks EQ; the page that sent you; your browser, device type and approximate location (country, region and city); and a random ID in a cookie that tells your visits apart. Google Analytics collects this on graph.headphones.com. Vercel Web Analytics also counts page visits and actions on the site, without cookies, including our graphs shown on headphones.com | When you visit GraphWorks |
| Error reports | What went wrong, the address of the page with any codes or search text in it removed, and your browser and device type. Not your account, and our error-reporting service is set not to keep your IP address | When a page or an action on GraphWorks fails |
3. How we use it
We use your information to run GraphWorks for you and to meet our legal duties. We do not sell it, we do not share it for targeted advertising, and GraphWorks sends no marketing email. If you live in the EU, the EEA or the UK, the last column gives the legal basis for each use.
| Use | Information used | Legal basis (EU, EEA, UK) |
|---|---|---|
| Create and run your account, sign you in, and send emails you need, such as email confirmation and password reset | Account, sign-in records | Our contract with you |
| Take payment, renew, cancel, refund, and send purchase, cancellation and withdrawal emails | Subscription and payment, account | Our contract with you |
| Give you GraphWorks Access through Sonic+ or a YouTube channel membership, and check it is still active | Sonic+ link, Discord link | Our contract with you |
| Activate GraphWorks EQ on your computers and keep to the three-computer limit | GraphWorks EQ computers | Our contract with you |
| Keep proof that you agreed to automatic renewal, as US auto-renewal laws require | Renewal consent | Our legitimate interest in proving your agreement and answering disputes |
| Decide whether you can withdraw within 14 days | Your country at checkout, your card's country | Legal obligation |
| Keep financial records for accounting and tax | Subscription and payment | Our legitimate interest in keeping accurate financial records and meeting our tax duties |
| Keep GraphWorks secure, stop fraud and abuse, and enforce our terms | Sign-in records, account, subscription | Our legitimate interest in protecting the Service and its users |
| Show your profile, if you make it public, and each item's Community Rating | Account, favorites, ratings | Our contract with you |
| Understand how GraphWorks is used and how visitors find it, to improve it | Site usage | Our legitimate interest in improving the Service |
| Find and fix faults in GraphWorks | Error reports | Our legitimate interest in keeping the Service working |
| Answer your questions | Messages to us | Our legitimate interest in helping you, or our contract with you |
4. Who we share it with
We use other companies to run GraphWorks: payment processors, hosting and database providers, an email service, an analytics service, an error-reporting service, and the services that check Sonic+ and YouTube memberships. Each receives only what its job needs. Our payment processors and Discord also use what they receive under their own privacy policies, for example to prevent fraud.
Our analytics service is Google Analytics. We have turned off its advertising features, so GraphWorks does not use it for advertising. Google explains how it uses information from sites that use its services at policies.google.com/technologies/partner-sites.
We may also share information when the law requires it, to protect our rights or someone's safety, with our professional advisers, or with a buyer if Headphones Inc. or GraphWorks is sold or merged. Anything you give those companies directly, such as your card details on Stripe's checkout page or your PayPal login, is covered by their own privacy policies.
5. How long we keep it
We keep your information while your account is open, and delete most of it when you delete your account. A few records we must keep longer.
| Information | How long |
|---|---|
| Account, favorites, item ratings, GraphWorks EQ computers, subscription records in GraphWorks | Until you delete your account |
| Sonic+ and Discord links | Until you remove the link in Settings or delete your account |
| Sign-in records | Up to 30 days after the sign-in expires, or until you delete your account if that is sooner |
| Renewal consent | 3 years after your subscription ends, or 3 years after you started a checkout you did not complete, even if you delete your account sooner; then deleted |
| Payment records at Stripe (your Stripe customer record, invoices and payments) | 7 years, for accounting and tax |
| Payment records at PayPal (your PayPal subscription and its payments) | 7 years, for accounting and tax |
| Request logs at Vercel | Up to 30 days |
| Site usage in Google Analytics | 14 months, then kept only as totals |
| Site usage counts in Vercel Web Analytics | Kept only as totals that do not identify you |
| Error reports at Sentry | Up to 90 days |
| Messages to us | As long as we need to answer you and keep a record of it |
Deleting your account. You can delete your account in Settings. If a subscription can still charge you, cancel it first. Deleting your account removes your account, sign-in records, Sonic+ and Discord links, favorites, item ratings, GraphWorks EQ computers and subscription records from GraphWorks, and GraphWorks EQ stops working on your computers at their next licence check, within 7 days. We keep your renewal consent records and your payment records at Stripe and PayPal for the periods above.
6. Cookies and browser storage
GraphWorks uses cookies to keep you signed in, and Google Analytics cookies to count visits to graph.headphones.com. It sets no advertising cookies. If you are in the EU, the EEA, the UK or Switzerland, or your browser sends a Global Privacy Control signal, Google Analytics sets no cookies and counts your visit without them. Our graphs shown on headphones.com set no cookies.
| Name | What it does | How long |
|---|---|---|
| __Secure-better-auth.session_token | Keeps you signed in | Until you close your browser, or 7 days if you tick Remember me, renewed as you use GraphWorks |
| __Secure-better-auth.dont_remember | Remembers that you did not tick Remember me | Until you close your browser |
| __Secure-better-auth.state | Protects the link to Discord while you connect it | 10 minutes |
| _ga | Google Analytics: a random ID that tells your visits apart | 2 years, renewed each time you visit |
| _ga_ followed by a code | Google Analytics: keeps track of your current visit | 2 years, renewed each time you visit |
You can stop Google Analytics on every site with Google's opt-out browser add-on, or block its cookies in your browser settings.
Your browser also stores a few settings for you, such as light or dark mode and your frequency band choice, and, while you activate GraphWorks EQ, a temporary record of that activation that clears when you close the tab. Stripe and PayPal set their own cookies on their own payment pages.
7. Your rights
You can see and correct your account details in Settings, and delete your account there at any time. For anything else, email info@headphones.com from the address on your account. We answer within 30 days and may ask you to confirm it is you. We will not treat you differently for using these rights.
Everyone can ask us for a copy of the personal information we hold about them, ask us to correct or delete it, and ask what we do with it.
California residents can also ask what categories of personal information we collected about them in the last 12 months, where it came from, why we collected it and who we gave it to. Section 2 lists the categories: identifiers, commercial information (your subscription), internet activity (sign-in records, site usage and error reports) and approximate location (your country, and for site usage your region and city). We do not sell personal information or share it for cross-context behavioral advertising, and we use your password only to sign you in. You can use an authorized agent; we will ask the agent for your signed permission.
If you live in the EU, the EEA or the UK, you can also ask us to restrict how we use your information, to send it to you or another company in a common format, and you can object to uses based on our legitimate interests. You can complain to the data protection authority where you live, or in the UK to the Information Commissioner's Office, though we would like the chance to help first.
8. Transfers, security, children and changes
Where your information goes. We are based in the United States, and we and the companies we use keep and process your information there. Where the law requires, our contracts with those companies protect information that comes from the EU, the EEA or the UK, for example with the European Commission's standard contractual clauses.
Security. Every connection to GraphWorks is encrypted, passwords are stored only as secure hashes, your card details go to Stripe or PayPal and never reach us, and access to our database is limited to the people and systems that need it. No system is perfectly secure, so please use a strong password that you do not use anywhere else.
Children. GraphWorks is for people who are at least 18, or the age of majority where they live if that is higher, as our Terms of Service say. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.
Changes. If we change this notice, we post the new version here with its date. If a change matters to how we use your information, we will also tell you by email or in GraphWorks before it takes effect.
Contact. Email info@headphones.com, or write to Headphones Inc., 111 SW 5th Ave, Suite 3150, Portland, Oregon 97204, USA.