Privacy Policy
Last Updated: July 2026
Introduction
Welcome to TrackTag. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.
Information We Collect
Personal Information
- •Account Information: Email address, name, and password
- •Profile Data: Avatar images and user preferences
- •Usage Data: AI analysis history, saved sessions, and track metadata
Automatically Collected Information
- •Device Information: Browser type, operating system, and device identifiers
- •Log Data: IP address, access times, and pages viewed
- •Cookies: We use cookies to maintain your session and improve your experience
How We Use Your Information
We use your information to:
- •Provide and maintain our service
- •Process your AI analysis requests
- •Save your sessions and preferences
- •Communicate with you about service updates
- •Improve our service and user experience
- •Comply with legal obligations
Data Storage and Security
- •Your data is stored securely using industry-standard encryption
- •We use Supabase for secure data storage, and Clerk to manage sign-in and your account credentials
- •All payments are processed securely by Stripe. Card details are entered on Stripe's own checkout and never touch our servers, so we never see or store your full card number
- •We implement appropriate security measures to protect against unauthorized access
Your Audio Files
Your music is the most sensitive thing you trust us with, so this is spelled out in full.
- •Audio is only sent when you analyze. When you start an analysis, the audio for that track is transmitted to Google's Gemini API so it can be listened to and described. Nothing else you do in TrackTag uploads audio.
- •We do not keep your audio. The file is processed and discarded. What we store on your account is the resulting metadata (BPM, key, genres, tags, description and the other analysis fields), the file name, and technical details such as duration and format. We never train any model on your music.
- •My Library scanning is local. When you connect a folder in the browser or in the desktop app, the scan happens entirely on your computer. We read file names, sizes and folder structure to build your index, and that index is stored on your own device. Connecting a folder never uploads its contents. Audio leaves your machine only for tracks you explicitly choose to analyze.
- •Analysis history is yours. Results are isolated per account, exportable at any time, and permanently erased when you delete your account.
API Keys and Your Own Provider Key
- •Unlimited-BYOK. If you connect your own Google Gemini API key, it is used solely to run your own analyses. Google bills that key directly and their privacy terms apply to the traffic it carries. You can disconnect it at any time.
- •TrackTag API keys. Keys you create for the API, the MCP server or Zapier are stored hashed, shown in full only once at creation, and can be revoked instantly. We log the calls made with them (time, endpoint, credits, outcome) so you can audit your own usage.
- •Integrations. If you connect TrackTag to Zapier or to an AI assistant through our MCP server, the metadata you route there is handled by that service under its own privacy policy.
Things You Post Publicly
Posts and votes on the feature request board are visible to other users. Your request title and description are public; your email address is not. Ask us and we will remove anything you have posted.
Data Sharing
We do not sell your personal information. We may share data with:
- •Service Providers: Supabase (database and file storage), Stripe (payments), Clerk (sign-in and accounts), Google Gemini (audio analysis), OpenAI (text generation for names, tags and descriptions), Resend (email) and PostHog (product analytics)
- •Legal Requirements: When required by law or to protect our rights
Your Rights
You have the right to:
- •Access your personal data
- •Correct inaccurate data
- •Delete your account and data
- •Export your data
- •Opt-out of marketing communications
Data Retention
- •We retain your data while your account is active
- •You can delete your account at any time
- •Some data may be retained for legal or backup purposes
Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect data from children.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or through the service.
Contact Us
If you have questions about this privacy policy, please contact us at:
Email: support@tracktag.me
© 2026 TrackTag. All rights reserved.