Last updated: July 2026
This policy explains what personal data eMusic.Tools collects, why we collect it, who we share it with and the rights you have. We aim to collect as little as possible and to be honest about what leaves your device.
The controller responsible for your data is [COMPANY_LEGAL_NAME], [REGISTERED_ADDRESS]. For any privacy question or to exercise your rights, contact us at [CONTACT_EMAIL]. If the controller is established outside the EU/EEA, our EU representative under Art. 27 GDPR is [EU_REPRESENTATIVE].
If you create an account we store your email address, username and a securely hashed password (argon2id - we never store your password in plain text), plus email-verification and password-reset tokens and your login sessions. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR). Retention: for the life of your account and [ACCOUNT_RETENTION] after you delete it.
When you use Stem Separation (and related tools such as Karaoke Maker, Acapella Extractor and Drumless Tracks) the audio file you upload is sent to our processing backend, running at [STEM_BACKEND_LOCATION], together with your account identifier so the result can be returned to you. If you are signed in, your past jobs and the separated stems are stored so you can access them in your account history. We do not use your audio to train AI models. Legal basis: performance of our contract (Art. 6(1)(b)). Retention: uploaded audio and separated stems are kept for [AUDIO_RETENTION].
If you purchase a subscription, payments are handled by Stripe. We store a Stripe customer identifier and your subscription status; card details are processed by Stripe and never reach our servers. Legal basis: performance of our contract (Art. 6(1)(b)).
To understand how the site is used we use Google Analytics 4 (ID G-6R2WFNCKK0) and Google Tag Manager (GTM-NB2TLZ3V), Hotjar (ID 6629776, heatmaps and session recordings) and LogRocket (session replay that records interactions and may identify signed-in users by email, name and username). These tools may record page interactions and set cookies. If you are in the EEA, the UK or Switzerland we ask for your consent first, through Google's certified consent management platform, and none of these tools run until you agree. Legal basis: your consent (Art. 6(1)(a) GDPR / ePrivacy); you can change your answer at any time via the Privacy settings link in the footer, without affecting processing already carried out. Elsewhere, where local law does not require prior consent, they load with the page. Wherever you are, you can also use each provider's own opt-out (e.g. the Google Analytics Opt-out Add-on, hotjar.com/legal/compliance/opt-out).
We show Google AdSense ads on some pages. If you are in the EEA, the UK or Switzerland, Google's certified consent management platform asks whether you agree to the advertising purposes; if you agree, Google and its partners may set cookies or read device identifiers to select and measure personalised ads, and if you do not, ads are limited to non-personalised ads or are not shown at all. You can change your answer at any time via the Privacy settings link in the footer. Google explains how it uses data from sites that use its services at policies.google.com/technologies/partner-sites.
Some pages contain affiliate links to Amazon, marked as such next to the links themselves. We do not send Amazon any data about you. If you click one, Amazon receives the information any website receives from a visitor (such as your IP address and browser) and may set its own cookies in order to attribute a later purchase to us; that processing is governed by Amazon's own privacy notice. We earn a commission on qualifying purchases at no extra cost to you.
We use your browser's cookies and localStorage to remember preferences (such as language and theme) and to keep in-app data like recent tools and ear-training progress on your device. This on-device data stays in your browser until you clear it and is not, by itself, sent to us.
We share data only with service providers who process it on our behalf: the stem-separation backend, Google (Analytics, Tag Manager and AdSense), Hotjar, LogRocket, Stripe (payments), Resend (transactional email), Inngest (background jobs) and Amazon Web Services (storage of support-ticket attachments). Several of these are established in the United States, so using the service involves transfers of personal data outside the EU/EEA. Those transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. We do not sell your personal data.
Under the GDPR you have the right to access your data; to rectify inaccurate data; to erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting prior processing. To exercise any of these, contact [CONTACT_EMAIL]. You also have the right to lodge a complaint with a supervisory authority - the [SUPERVISORY_AUTHORITY] or the authority in your country of residence.
Passwords are hashed with argon2id and traffic is encrypted in transit (HTTPS). No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data.
eMusic.Tools is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy from time to time. Material changes will be reflected by the 'Last updated' date above; please review it periodically.
For any question about this policy or your data, email [CONTACT_EMAIL] or use the Contact page.