Your music stays yours.

Your audio

Every track you load into the decks or the converter is decoded and processed entirely inside your browser. Nothing is uploaded, streamed, fingerprinted or logged. Rendered files are written straight to your device. We could not look at your music if we wanted to — there is no server in the audio path.

Payments

Paid plans are handled by Stripe. Your card details go to Stripe directly and never touch our servers. After a purchase we store the minimum needed to honour your licence: the email address you gave at checkout, what you bought, and whether the subscription is still active.

We keep it for six years after the tax year the sale falls in, because HMRC requires sales records to be kept that long. That is worth saying plainly rather than burying: if you ask us to delete your data, the licence and your email address go, and the amount, date and any tax on the sale stay until that period is up, because keeping them is a legal obligation rather than a choice. After it, they go too.

Analytics

The site may use Cloudflare Web Analytics, which is cookieless and does not profile you across sites — it counts page views without identifying who viewed them.

The apps also report a short list of things people do, so we know which parts are worth improving: that an app was opened, that a track was loaded and from where (a file, the demo, your crate), that something played, that a spatial control was used, that a recording started or finished and roughly how long it ran, the make and model of any MIDI controller you plug in, and a heartbeat every two minutes so we can tell a five-minute visit from an hour-long one.

Never included: the name, title, artist, length or contents of anything you load. The list above is exhaustive and it is enforced in code, not by policy.

While you are signed out

None of it is stored on your device. No cookie, no local storage, no fingerprint. Each visit gets a random number that exists only in the page's memory and is gone when you close the tab, so two visits cannot be joined up — not by us, and not by anyone who obtained the data. We keep no IP address and no browser string; the country an event came from is supplied by Cloudflare. That is why there is no consent banner: nothing is kept on your machine for us to ask about.

If you switch on sync

Two switches on your account page, both off until you turn them on. The first keeps your theme — a preset name and some colours, which say nothing about you or your music.

The second keeps your crate, and it is worth being exact about what that means:track titles, artists, lengths, and the BPM and key Azimuth worked out. That is information about your files rather than the files themselves. No audio and no artwork is ever sent, by anybody, under any setting — the code that builds those records cannot include them. Sign in on another machine and you see the list; the audio is still only wherever you put it.

Turning a switch off deletes what was stored for it, rather than pausing. The copy on your own machine is the original and is never touched by any of this.

Email you have asked for

If you tick the box on your account page, your address is used to tell you when something ships. That one runs on consent, so it is off unless you turn it on, one click to turn back off, and we record the date you turned it on because consent has to be demonstrable. It is never shared and never sold.

Receipts, sign-in links and notices about your own subscription are not on that switch. They are how the thing you paid for works, and the receipt is a legal obligation, so they go out either way.

If you have an account

An account is your email address and nothing else. We store the address, the date you created it, the date you last used it, and a row for each browser you are signed in on — the date, and a shortened version of the browser's own description of itself, so the list on your account page is readable. Sign-in links are stored as one-way hashes, never as the link itself.

Signing in does not attach your studio activity to you. The usage measurement described above stays anonymous whether you are signed in or not; the part of the app that reports it has no idea who you are, by design. An account exists to hold what you buy and, in future, what you ask us to keep for you. It is not a profile.

You need one only for things that cannot work without a server remembering something. Every instrument on this site runs without one and always will.

Sessions end after 90 days of not being used, and you can end them all yourself from your account page. Ask and the whole account goes, along with every session and every sign-in link.

If your browser sends Global Privacy Control or Do Not Track, none of this is collected at all.

What your browser does store

The apps keep your own settings on your device, because that is the only place they would be any use: your MIDI mappings, hot cues, theme, the tracks in your crate, saved sessions. It is held in your browser's local storage and IndexedDB, it is yours, and it is never sent anywhere. Clearing your browsing data for this site removes all of it.

There is one cookie, and only if you sign in. It holds a random token and nothing else — no name, no address, nothing readable. It is what keeps you signed in, which is the whole of its job, and it is why no banner asks you about it: a cookie doing only what you just asked for is exempt. Signing out deletes it.

What we never do

• Sell, share or trade any data with advertisers or data brokers.
• Run third-party ad or tracking scripts.
• Require an account to use anything that runs in the browser.

Who holds this, and who else sees it

Ben Harvey, trading as Azimuth, is the data controller. Contact: [email protected].

Two companies process data on our behalf, both under their standard data processing terms: Stripe, which handles payments and holds your card details so we never do, andCloudflare, which serves the site, hosts the database the licence and account records sit in, and delivers the sign-in emails. Both are US companies and both transfer data outside the UK under the safeguards their processing terms provide. Nobody else receives any of it.

The lawful basis for holding purchase records is that we need them to give you the thing you paid for and to meet our tax obligations. Nothing here relies on consent, which is why there is nothing to withdraw and no banner asking for it.

Your rights

Under UK GDPR you can ask for a copy of the data we hold about you, ask for it to be corrected, ask for it to be deleted, ask us to restrict what we do with it, or ask for it in a portable form. Email[email protected] from the address you bought with, and you will get an answer within one month. It is free.

Two of those you can do yourself, immediately, without asking: youraccount page will download everything held about you as a file, and will delete the account outright. Both are the same operations that would be run by hand in response to an email, so nothing is gained by waiting for a reply.

Deleting is refused in one case: while a subscription is still being billed. Deleting here would not stop Stripe charging you, and afterwards nothing on this side would connect you to the charge. Cancel first, then delete. Email if you want it done anyway and a human will sort it out.

On deletion specifically: your email address and licence are removed and the licence stops working, which is the part you would expect. The sale record stays for the tax period described above. Stripe holds its own copy of your payment details under its own policy, so a complete erasure means asking them too — tell us and we will start that with them at the same time.

If you think we have got any of this wrong, you can complain to the Information Commissioner's Office at ico.org.uk, or call them on 0303 123 1113. We would rather you told us first, but you do not have to.