Short version: the app runs in your browser and your API keys stay there. We count visits with analytics. We have no accounts and no upload storage.
The App
SoundCraft runs in your browser with WebAssembly and plays through your browser’s audio. The web build has no file access and no microphone access: it plays its built-in demo song or an empty session, and nothing you do in it is sent to us or stored by it. The Site has no upload endpoint and no storage for audio or sessions.
AI Assistant
When you use the AI assistant, your browser sends your question, the earlier turns of the conversation and a fixed description of SoundCraft (its menus, shortcuts and plugins) directly to the provider you selected (OpenAI, Google, OpenRouter, or the custom endpoint you entered), authenticated with your API key. These requests do not pass through our servers. The provider’s privacy policy applies to that data.
Your API key is stored in your browser: in sessionStorage (cleared when the tab closes) by default, or in localStorage if you tick “Remember my key on this device”. “Forget all keys” in the panel deletes it. Conversations are kept only in the open page and are gone when you close or reload it.
Data Stored in Your Browser
The page remembers whether the AI panel was open, and the panel stores your chosen provider, model and whether answers should be about the browser version or the desktop app. None of it is sent to us.
Analytics
We may use Umami, which does not use cookies, and Google Analytics, which does set cookies, to count page views and a few anonymous events such as opening the AI panel, asking a question (provider name and success or error only), switching between the demo song and an empty session, or the app failing to start. Events never include your questions, answers or keys. Google’s use of this data is described in its privacy policy.
Hosting
The Site is served by Cloudflare, which processes standard request data such as IP addresses to deliver pages and protect against abuse.
If you email us, we receive your address and message and use them only to reply.
Changes
We will post any changes to this policy on this page with a new effective date.