Privacy policy
Last updated:
Mix-a-Mash is made by Mixamash, Inc. This policy covers this website (mixamash.com), Mix-a-Mash accounts and the Mix-a-Mash app. The app shows the same facts in Settings, under What leaves your computer.
The short version
- We collect only what we need to run Mix-a-Mash.
- We don't sell your information or use it for advertising.
- We don't store your IP address.
- Audio we analyze is deleted when the analysis ends. Nothing is trained on your music.
- You can delete your account on the account page or in the app, and ask us to delete anything else at [email protected].
The website
Waitlist. If you join the waitlist, we store your email address, when you signed up and which page you signed up from. We use it only to tell you about Mix-a-Mash.
Browsing. We run no analytics or advertising scripts and set no cookies of our own. Cloudflare hosts the site and stores the waitlist. Like any web host, it handles request data such as IP addresses to serve and protect the site.
Signing in. The sign-in form on the account page uses Cloudflare Turnstile to check that a person is asking for a code. Turnstile sends Cloudflare information about your browser and device. Once you're signed in, the website keeps your sign-in in your browser's storage, and signing out removes it.
Accounts
You don't need an account to use Mix-a-Mash. If you make one, you sign in with your email address and a 6-digit code that we email you through Amazon Simple Email Service. For an account we keep:
- your email address and an account ID;
- which devices are signed in (we store a scrambled form of each sign-in, not the sign-in itself);
- the random install IDs of the apps you've signed in with.
Sign-in codes are stored scrambled and deleted about an hour after we send them.
Deleting your account. Delete it on the account page or in the app's Settings. That deletes your email address, your sign-in records, your linked install IDs and the app logs tied to your account. We keep a record that the account ID existed, with nothing that identifies you. Backups of the account database are deleted within 8 days.
The app
Your music. When you scan a folder, the app sends each song's acoustic fingerprint to us to see if we already know it. Songs we know never leave your computer. A song we don't know is uploaded for analysis, along with its vocals and instrumental if they were separated on your computer. The audio is deleted when the analysis ends. We keep the fingerprint and the timing and structure data, so the same song isn't uploaded twice. There's no way to download your songs from us.
Update check. While it's open, the app asks us whether there's a newer version. The request carries the app version, the kind of operating system, a random install ID made on your computer, and whether the install is one of our test machines. We use the ID to count installs. Deleting the app's data folder resets it.
Logs during the alpha. About every 5 minutes, alpha builds send us what's new in the app's technical logs: errors, timings, connections, crash files, a summary of playback health, and which songs played and were mixed (as song IDs, with thumbs-up and thumbs-down counts). Log lines can include file names, song titles, artists and the local network addresses of devices in your party. Each upload carries the app version, the kind of operating system, the install ID and, if you're signed in, your account ID. This is always on in the alpha and will be off by default in the beta. We delete these logs after 60 days.
Diagnostics and feedback. Nothing is sent until you tap. Send to developers sends the app's logs, crash files and playback health data, and we delete them after 60 days. Send feedback sends what you typed and the app version, and we keep notes for the alpha unless you ask us to delete yours.
Logs, diagnostics and feedback never contain audio or lyrics.
Parties. Phones and tablets that join a party on your Wi-Fi talk to your computer directly, not through us.
Phone app. During the alpha, the phone app is installed through Google Play or Apple TestFlight. To invite you, we give Google or Apple the email address you use there.
IP addresses
Our servers see your IP address when you connect, but we don't store it. Cloudflare carries traffic to our servers and handles IP addresses under its own privacy policy.
Who handles your information
- Cloudflare: hosts the website and the waitlist, carries traffic to our servers, and runs Turnstile.
- Amazon Web Services: runs our servers, song analysis, logs, backups and sign-in emails.
- Google or Apple: only if you install the alpha phone app through them.
How long we keep it
- Waitlist emails: until we've contacted you about the launch, or until you ask us to remove yours.
- Account details: until you delete the account.
- Sign-in codes: about an hour.
- App logs and diagnostic bundles: 60 days.
- Feedback notes: for the alpha, or until you ask us to delete yours.
- Song fingerprints and analysis data: kept.
Children
Mix-a-Mash isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, email us and we'll delete it.
Changes
If what we collect changes, we'll update this page and the date at the top.
Contact
Questions, or requests to see or delete your information: [email protected].