Privacy
Plain version: we collect what we need to run a critique community, we don't sell it, and you can take it with you or delete it whenever you like.
Last updated September 2026. This is a template for the operator to review with counsel before launch.
What we collect
Account details (email, handle, display name, optional bio and DAW), the audio you upload and the streams and analysis we make from it, your critiques, ratings, replies and follows, your credit and reputation history, and listening progress on tracks you critique (so we can verify you listened).
Basic technical data (IP address for rate limiting and fraud prevention, device type, approximate country from your IP). If you buy something, Stripe handles your payment details; we never see your card number.
What we don't do
We don't sell or rent personal data. We don't use third-party tracking pixels. Sponsor ads are matched using only what you tell us about your tracks (lane, stage, what you asked critics about), never cross-site tracking.
Google ads only load for free accounts with your consent where that's required, and never when your browser sends Global Privacy Control.
Blind listening
For the first 72 hours (120 for Pro), critics don't see who made a track or how many listens or critiques it has. Our servers enforce this, so it can't be bypassed from the browser.
AI
We use Anthropic's Claude to score critique substance, suggest improvements to the critic before they publish, summarise consensus, and help sort reports. AI never writes or posts critiques. Critique text sent for these features isn't used to train models under our API terms.
Your rights
You can download everything we hold about you from Settings (a JSON export) and delete your account at any time. Deleting your account takes down your tracks, signs you out everywhere and anonymises your profile; critiques you wrote stay on other artists' tracks as “Deleted user”, because they're part of those artists' feedback history.
If you're in the EEA, UK or California you also have rights to access, correct, restrict and object to processing. Contact privacy@ratemymix.app.
Processors
Supabase (database and authentication), Cloudflare R2 (audio storage), Vercel (hosting), Inngest (background jobs), Stripe (payments), Resend (email), Anthropic (AI features), PostHog and Sentry (product analytics and error monitoring, where enabled).