Legal

Privacy Policy

What we collect, why we collect it, who else touches it, and how to make us delete it.

Effective August 11, 2026Last updated August 11, 2026

01The short version

In plain English

We collect what the product needs to work. We do not sell it, and we do not train models on your music.

We collect the details you give us at signup, the audio you upload so we can master it, and ordinary server logs. We use a small number of well-known providers to run the service. We do not sell personal information and we do not use your music to train machine-learning models.

02What we collect

WhatWhy
First and last nameto address you like a person in email and support
Email addressyour login, password resets, account notices
Passwordstored only as a salted hash by our auth provider - we never see it
Phone number (optional)account recovery if you lose access to your email
Role (optional)artist, producer, engineer and so on, to understand who the product is for
Where you are from (optional)the free-text answer to the signup question, kept on your profile. It is not used to target anything
Audio you uploadto produce your master; see how long we keep things, which is honest about the fact that we do not yet delete it automatically
Usage recordswhich masters you exported, in what format - to enforce the free tier and your credit balance
Server logsIP address, browser, pages, timestamps - security and abuse prevention
Payment detailshandled entirely by Stripe. Card numbers never reach our servers

The site does not run advertising trackers or third-party analytics profiling.

03Who else touches your data

In plain English

A short list of providers, each doing one job. We do not sell your data and there are no ad trackers.

ProviderWhat it does
Supabaseaccounts, database, file storage
Stripepayments - they hold the card details, and any receipt for a payment comes from them, not from us
Vercelhosting the website
Resenddelivers the two kinds of email we send - password resets and account notices. See Email we send you
Our own serverthe mastering engine that processes your audio
Google Fontsserves the typefaces used across the site. Loading a font sends your IP address to Google. No account data is involved and no cookie is set

These providers may process data in the United States. We do not share personal information with anyone else, except where the law requires it.

04Email we send you

In plain English

Only email the service owes you. No newsletter, no promotions, and no way for us to start sending them without telling you first.

We send you two kinds of message, and only these:

We do not send marketing email. No newsletter, no product announcements, no “we noticed you have not visited”. There is no box to untick at signup because there is no marketing list to join.

That is a deliberate constraint rather than a temporary state. US law requires every commercial email to carry the sender’s physical postal address, and The Mix Medic does not have or publish one. So it does not send commercial email at all. If that ever changes, a postal address will appear in the Contact section below and in the footer of any such message, alongside a working unsubscribe link.

Receipts do not come from us. If you get one for a payment, Stripe sent it.

05How long we keep things

06Your rights

In plain English

Email us and we will hand over a copy of your data, correct it, or delete it.

Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it. Email edoublemusic@icloud.com from your account address and we will action it within 30 days.

If you are in the EEA or UK (GDPR): you also have the right to restrict or object to processing, to data portability, and to complain to your local supervisory authority. Our lawful bases are performance of a contract (running the service), legitimate interests (security and abuse prevention), and consent where you gave it.

If you are in California (CCPA/CPRA): you have the right to know, delete, and correct, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA, and we have not in the preceding 12 months.

07Security

Traffic is encrypted in transit with TLS. Passwords are salted and hashed by our auth provider. Access to production systems is limited to the operator. Card details never touch our servers.

No system is perfectly secure. If we discover a breach affecting your personal information, we will notify affected users and any regulator the law requires, without undue delay.

08Children

The Mix Medic is not intended for children under 13 and we do not knowingly collect their information. If you believe a child has given us personal information, email us and we will delete it.

09Cookies and local storage

We use browser storage for the things the app cannot work without: keeping you signed in, your theme, whether you prefer the simple or advanced view, your last-used panel, which one-time hints and prompts you have already dismissed, and any presets you have saved. Saved presets live in your own browser, not on our servers, so clearing site data deletes them and we cannot get them back. There are no advertising cookies and no cross-site tracking.

10Changes to this policy

If we make a material change we will email account holders before it takes effect. The effective date at the top tells you which version is current.

11Contact

Questions, or a request about your data:

The Mix Medic · Eric Erickson
Email: edoublemusic@icloud.com

We are reachable by email and not by post. There is no mailing address to write to; the address above is the way in.