Your data
under control.

This policy explains the data needed for your account, security, processing, and the TrackGroove library.

1. Data we process

We process your name, email, securely derived password, session, subscription status, preferences, search references, and processing and security logs. Uploaded files and outputs are private and protected by your account; public catalog references do not publish your name, files, or user ID.

2. Sources and payments

Music and availability queries may be sent to external sources. When configured, payments are processed by the provider; we do not receive card data in the application code. The current method does not request a client connection or Spotify tokens.

3. Security and retention

We use secure cookies, CSRF/origin protection, access controls, and user isolation. Files are temporary, subject to the operator's retention limits. Administrative, security, and financial logs are accessible only to authorized people; the operator may access data for operations and support.

Free benefit and device identification

We collect WhatsApp, a persistent identifier in local storage and cookies (including a signed HttpOnly cookie), and technical browser, screen, system, time zone and network signals. We use hashed signals and the network prefix to prevent abuse of the free trial, not for advertising. IP alone never blocks the benefit. Identification is probabilistic and can be wrong, especially on shared devices; contact support for review. Cookies last up to two years; the identifier in local storage persists until removed. Server records follow account security and retention policies.

4. Your controls

Update your name and password in your account, and manage library favorites and notes. For access, correction, or other requests about your data, contact the person designated by the operator.