1. Who is responsible for your data

Two Minds is based in Switzerland, so this policy is governed primarily by the Swiss Federal Act on Data Protection (nFADP). If you're located in the European Union, we also honor the rights the GDPR grants you — the two frameworks overlap closely, and section 13 covers both. The data controller is:

TWO MINDS
1009 Pully
Contact: contact@twominds.tech

For any question about this policy, or to exercise your rights (section 13), write to us at that address.

2. At a glance

Full detail follows below — here's the essentials:

Legal bases. We rely on your consent for the newsletter, statistics cookies, push notifications and doorbell video calls (you can withdraw it at any time); on our legitimate interest for cookieless visit counting, visit logging on personalized demo links, and anti-spam and security measures; and on the steps needed to reply to your request for the contact form.

3. Contact form

If you use our contact form, we ask for your name, email address, and your message, so we can read and reply to your inquiry. We don't use this information for anything else, and we don't add you to any mailing list unless you separately choose to sign up for our newsletter. Your message is sent to us by email. To block spam, your IP address is kept for up to one hour to limit the number of messages sent from it.

4. Newsletter sign-up

Wherever you see a newsletter sign-up form on our sites — on the main site, or on a teaser/campaign page built around a specific release or event — providing your email address adds you to our mailing list.

That list is hosted and sent through Brevo (formerly Sendinblue), a French email-marketing platform, under a GDPR-compliant data processing agreement. Brevo is headquartered in Paris and primarily hosts EU customer data within the European Union; where any processing does involve a transfer outside the EU (see section 11), it relies on the EU-US Data Privacy Framework or on Standard Contractual Clauses.

Brevo may technically track whether you open and click the emails we send (standard behavior for an email-marketing tool). We treat this tracking like a cookie and only enable it if you've consented to it when signing up.

A cookie may remember that you've already signed up, so a sign-up form you see again doesn't ask you to retype your email. You can unsubscribe at any time via the link in every email we send, or by contacting us. As with the contact form, your IP address is kept for up to one hour to block automated sign-ups.

5. Teaser & campaign pages

From time to time we publish standalone teaser or campaign pages built around a specific release or event. Beyond the newsletter sign-up above, these pages may use a few extra cookies to:

• remember your preferred language;
• remember your progress through an interactive experience on that page (for example, a hidden easter egg);
• recognize that you've already signed up for the newsletter from that specific page.

None of these cookies are used to track you across other sites, and they're never combined with data from unrelated third parties.

6. Personalized demo links, business cards & QR codes

Two Minds shares personalized links — often via a QR code on a physical business card or in a press kit — giving access to an interactive presentation of our work. This feature, including how visits are measured, is custom-built and self-hosted on our own server — we don't hand this off to a third-party analytics platform like Google Analytics.

When you open one of these links:

• Technical cookies: a temporary session identifier (30 minutes), your preference to skip the animated intro on return (until you close your browser), and which profile to display (remembered for a year, so the link still opens the right presentation without its code).
• Visit logging: we record your IP address, general device/browser characteristics, and — via a third-party IP-geolocation service, ipinfo.io — an estimate of your city/region/country and internet provider. If the link was personalized (addressed to a named individual, e.g. a press contact), we may receive a notification including this information, so we know a link we sent was actually opened.
• Usage measurement: time spent on each section and on each track played is recorded, tied to a session identifier — not directly to your identity, unless the link was personally addressed to you.
• Links you open: when you open a link from the presentation (our Instagram, website, press kit, a streaming platform…), we note which one and when, tied to that same link.
• Pages of our main site (only if you accept every cookie): links from a personalized presentation to our main website carry its code. If you accept all cookies on our site (the "Count me in" button), we keep that code in a tm_demo_id cookie and note which of our pages you visit, so we know what caught your interest. If you choose "Just the essentials" — or never choose — the code is dropped and nothing is linked to you; withdrawing your consent later deletes the cookie.
• Push notifications (optional): if you allow it via your browser's own permission prompt, we can send you notifications directly to your device — for example when new music is released. Accepting stores a technical push subscription (an endpoint and encryption keys generated by your browser, not personal information by itself) linked either to the personalized link you opened or, for a generic visit, to a shared anonymous group with no individual identity. We also keep a record of when a notification was last sent to you, only so we don't send them too often. You can withdraw this permission at any time from your browser's site settings; an unsubscribed or invalid subscription is removed automatically the next time we try to use it.

This logging is used to gauge interest generated by an outreach effort or a release, and to let us know a personally-sent link was opened. It's never used for advertising and never resold.

The digital business card page and the online press kit download work on the same technical basis, with no form for you to fill in.

On the media kit page (kit.twominds.tech), we keep a short log of each download: the date and time, which kit was opened (the general one or the one prepared for you), whether it was a phone or a computer, and the website you came from, if any. No IP address, no cookie and no device identifier are stored.

7. The Lab: free tools & ear training

The Lab (lab.twominds.tech) is a set of free audio tools and ear-training exercises. They run entirely in your browser:

• Your files, microphone and browser tabs are analysed on your device. Nothing is recorded, uploaded or stored on our server. Your browser asks for permission before using the microphone or capturing a tab.
• Music links: when you paste a Spotify, Deezer, Apple Music, YouTube or SoundCloud link, our server looks it up with that service to find the matching 30-second official preview. Your browser then downloads that preview directly from the service (Spotify, Deezer or Apple), which receives your IP address. We don't keep the links you paste.
• Settings and offline app: your preferences (folded panels, tuner reference…) are stored in your browser only. If you install the Lab as an app, its files are cached on your device so it works offline.

Visits to the Lab are counted like the rest of the site (see the cookie section).

Screen. When a phone or computer connects to a screen with its code, the two devices talk to each other directly. To set up that link, and as a relay when a direct link isn't possible, our server briefly passes on what you send (the video picked, names and photos shown, messages, tempo) and deletes each message once it is delivered (at the latest after two minutes). The room behind a code keeps only the type of device connected (for example "iPhone") and is deleted two days after the screen was last used. To find a direct route between your devices, your browser contacts Google's STUN servers, which see your IP address. Videos you save for offline use stay in your browser. If you turn on Listen or Auto BPM, the screen's computer uses its microphone to measure the level and the tempo of the music on the spot: nothing is recorded or sent. If you film with a phone (or the screen's computer camera), the video goes straight from your device to the screen, only after your browser's permission prompt; it never passes through or is stored on our server.

Timetable live links. When you choose to share a line-up as a live link, what it shows (event name, date, DJ names and times, and the photos you added) is stored on our server so the link works. Nothing else is attached to it, and it is deleted after four months without changes, or straight away when you turn the link off.

8. Studio doorbell

A QR code at our studio door opens a doorbell page. When you ring, we receive a notification with the name you choose to enter (optional) and the time; this ring history is kept on our server. If you start a video call, your camera and microphone are only used after your browser's permission prompt, and the call is relayed by our real-time video provider (LiveKit) without being recorded.

9. Cookies

Here is the full list of cookies our sites can set. "Technical" cookies are necessary for the site to work and don't require your consent; statistics cookies are only set if you accept them in the cookie pop-up (you can change your choice at any time via the "Cookies" link at the bottom of every page). Personalized demo links don't show the pop-up and never set statistics cookies.

Without your consent, Matomo still counts visits, but without any cookie and with anonymized IP addresses, so you can't be recognized from one visit to the next. Videos open from YouTube's privacy-enhanced domain (youtube-nocookie.com), only when you press play.

You can delete or block cookies at any time from your browser settings. Blocking technical cookies may stop some features (like skipping straight to the experience without seeing the intro again) from working correctly.

10. Who your data is shared with

We never sell your data. It may be processed by the following providers, strictly on Two Minds's behalf:

11. Transfers outside the EU

Most of our providers (Brevo, our host) process data within the European Union. Some technical tools (Google fonts, libraries served by US-based CDNs, YouTube when you play a video, Apple Music previews in the Lab) can involve your IP address reaching the United States; these providers rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission.

12. Retention

13. Your rights

Under the Swiss Federal Act on Data Protection (nFADP) — and, if you're located in the European Union, the GDPR — you have the following rights over your personal data:

• Right of access: know what data we hold about you.
• Right of rectification: correct inaccurate data.
• Right to erasure: request deletion of your data.
• Right to object: object to a processing activity, in particular the newsletter (via the unsubscribe link in every email, or by contacting us).
• Right to portability: receive your data in a reusable format.
• Right to restriction: request that a processing activity be temporarily suspended.

To exercise any of these rights, write to contact@twominds.tech. We respond within one month at most. You also have the right to lodge a complaint with the FDPIC (the Swiss Federal Data Protection and Information Commissioner), or with your own country's data protection authority if you're located in the EU, if you believe your rights aren't being respected.

14. Security

We take reasonable measures to protect your data (encrypted HTTPS connections, restricted access to admin tools, password-protected management interfaces). No system is infallible, and we can't guarantee absolute security, but we commit to informing you promptly in the event of an incident affecting your data, in line with our legal obligations.

15. Changes to this policy

This policy may evolve, in particular if we change tools or providers, or add new features like a store. The last-updated date is shown at the top of this page. In the event of a significant change, we'll let you know visibly on our sites.

16. Contact us

For any question about this policy or your personal data: contact@twominds.tech