What we know about you

Draft, 2026-09-14. Short because there is not much.

This website

• An account is an email address, a password hash, the name you typed, and when you logged in. Failed logins are counted for 15 minutes per email to slow down guessing.
• Your keys, activations (device name you chose, platform, version, first two octets of the IP address, last seen), and orders.
• No analytics scripts, no third-party fonts, no CDN. Everything on this site is served from this site.

The player, server, bridge and apps

• Licence checks send the key, a device fingerprint (a hash), the device name you chose, platform and version. Nothing about your music.
• Opt-in lookups (AcoustID, MusicBrainz, Wikipedia, LRCLIB, Cover Art Archive, Open-Meteo) go straight from your machine to those services under their policies, only while the switch is on.
• AI playlists use the key you provide, sent to the provider you chose, with at most 2,500 album lines from your library and your request. The key never leaves your machine except to that provider.
• The Relay, when it exists, will see who is connected and how much data flows, and cannot read the data.

Your rights

Export or delete your account by writing to us from the account's email. Deleting the account cancels its keys.