Home

Privacy Policy

Last updated: July 2026

This policy explains what personal data eMusic.Tools collects, why we collect it, who we share it with and the rights you have. We aim to collect as little as possible and to be honest about what leaves your device.

1. Who we are (data controller)

The controller responsible for your data is [COMPANY_LEGAL_NAME], [REGISTERED_ADDRESS]. For any privacy question or to exercise your rights, contact us at [CONTACT_EMAIL]. If the controller is established outside the EU/EEA, our EU representative under Art. 27 GDPR is [EU_REPRESENTATIVE].

2. Account data

If you create an account we store your email address, username and a securely hashed password (argon2id - we never store your password in plain text), plus email-verification and password-reset tokens and your login sessions. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR). Retention: for the life of your account and [ACCOUNT_RETENTION] after you delete it.

3. Audio you upload (stem separation & audio editor)

When you use Stem Separation (and related tools such as Karaoke Maker, Acapella Extractor and Drumless Tracks) the audio file you upload is sent to our processing backend, running at [STEM_BACKEND_LOCATION], together with your account identifier so the result can be returned to you. If you are signed in, your past jobs and the separated stems are stored so you can access them in your account history. We do not use your audio to train AI models. Legal basis: performance of our contract (Art. 6(1)(b)). Retention: uploaded audio and separated stems are kept for [AUDIO_RETENTION].

4. Payments

If you purchase a subscription, payments are handled by Stripe. We store a Stripe customer identifier and your subscription status; card details are processed by Stripe and never reach our servers. Legal basis: performance of our contract (Art. 6(1)(b)).

5. Analytics, session replay and product improvement

To understand how the site is used we use Google Analytics 4 (ID G-6R2WFNCKK0) and Google Tag Manager (GTM-NB2TLZ3V), Hotjar (ID 6629776, heatmaps and session recordings) and LogRocket (session replay that records interactions and may identify signed-in users by email, name and username). These tools may record page interactions and set cookies. We load them only after you accept cookies in the banner - if you reject, or before you choose, they do not run. Legal basis: your consent (Art. 6(1)(a) GDPR / ePrivacy). You can withdraw consent at any time via the Cookie Settings link in the footer, and you can also use each provider's own opt-out (e.g. Google Analytics Opt-out Add-on, hotjar.com/legal/compliance/opt-out).

6. On-device storage

We use your browser's cookies and localStorage to remember preferences (such as language and theme) and to keep in-app data like recent tools and ear-training progress on your device. This on-device data stays in your browser until you clear it and is not, by itself, sent to us.

7. Who we share data with (processors) and international transfers

We share data only with service providers who process it on our behalf: the stem-separation backend, Google (Analytics & Tag Manager), Hotjar, LogRocket, Stripe (payments), Resend (transactional email), Inngest (background jobs) and Amazon Web Services (storage of support-ticket attachments). Several of these are established in the United States, so using the service involves transfers of personal data outside the EU/EEA. Those transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. We do not sell your personal data.

8. Your rights

Under the GDPR you have the right to access your data; to rectify inaccurate data; to erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting prior processing. To exercise any of these, contact [CONTACT_EMAIL]. You also have the right to lodge a complaint with a supervisory authority - the [SUPERVISORY_AUTHORITY] or the authority in your country of residence.

9. Security

Passwords are hashed with argon2id and traffic is encrypted in transit (HTTPS). No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data.

10. Children

eMusic.Tools is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the 'Last updated' date above; please review it periodically.

12. Contact

For any question about this policy or your data, email [CONTACT_EMAIL] or use the Contact page.