Privacy policy

The short version

• Your tracks stay on your device. Sonata analyses, mixes and exports your audio inside your browser. We never receive your audio files, track names or mixes.
• If you make an account, we hold your email address and a password (which we cannot read).
• We count, anonymously, how far visitors get with the tool (opened, tracks added, played, exported) and use standard website visitor statistics.
• We use PostHog for product analytics, session replays with every piece of text and every input hidden, and error reports. None of it carries your audio, file names, track titles or artists.
• We do not sell your information, show ads, or build advertising profiles.
• If you pay for a plan, our payment provider (Stripe) takes the card details. We keep the plan and the payment identifiers, not your card number. Your tracks still stay on your device.
• You can ask us to delete your account and your data at any time.

Who we are

Sonata (sonatamix.com) is operated by Citruscan Pty Ltd (ABN 33 698 868 870) (“Sonata”, “we”, “us”), in New South Wales, Australia. For privacy questions, write to sonatamix@citruscan.com. We are the “controller” of the personal information described here for the purposes of the GDPR and UK GDPR.

What we collect and why

1. Your audio, mixes and pictures: not collected. When you add tracks, Sonata reads them in your browser to find the tempo and key, order them, blend them and export the result. The files, their names and tags, the analysis and your mixes are saved only in your browser’s own storage (IndexedDB) on your device, so your sets are still there when you come back. They are never sent to us or to anyone else. This also means we cannot see, recover or back them up: if you clear your browser data or use another device, they are gone, so keep your exported files.

2. Your account (only if you make one). Your email address, your password, whether you have confirmed your email, when the account was made and which plan it is on(free, unless you have bought Pro or a Weekend Pass). Your password is kept by our sign-in provider as a one-way hash, and we cannot see it. Your browser also keeps a sign-in session so you stay logged in. Our sign-in provider may record technical details of sign-in requests (such as your IP address and the time) for security and to run the service. We use this to create and run your account, to send you sign-in codes and to keep accounts secure.

3. Emails. We email you one-time codes to confirm your address or reset your password, and reply if you write to us. These come from no-reply@sonatamix.com, sent through an email delivery service we use for this. We do not send marketing email. If that ever changes, we will ask you first where the law requires it, and every such email will have an unsubscribe option.

4. Anonymous usage counts. When you use sonatamix.com, the page sends a small record to our database each time one of four things happens: Sonata is opened, tracks are added (with how many), the set is played (once per visit), or a mix is exported (with its format, WAV or MP3). Each record also has the time and a random code generated in your browser (a “device code”) so we can tell a returning visitor from a new one. The records do not include your name, email, account, files, track titles or audio, and the code is not connected to an account. We use them to understand whether the tool works for people and to improve it. If your browser sends a Global Privacy Control or Do Not Track signal, we still count the event but without the device code. You can switch counting off in your browser by opening sonatamix.com/?nocount once, which also stops the visitor statistics below.

5. Website visitor statistics. We use Vercel Web Analytics, which Vercel describes as working without cookies. It records page views and general information such as the page visited, referring site, browser, operating system, device type and approximate country, so we can see how many people visit.

5a. Product analytics, session replay and error reports (PostHog). We use PostHog (servers in the United States) to understand how Sonata is used and to fix what breaks. It records page views, the referring site and campaign tags, browser, device type and approximate location (from your IP address), which buttons are pressed (not the words on them), and a short list of steps with counts and settings only: for example that tracks were added (how many, and their formats such as MP3 or WAV), that a mix was ready, played or exported (the format, the number of tracks and the set’s length in broad bands, and whether it was saved to a USB stick, as a zip, or the SoundCloud steps were pressed, never the stick’s or the mix’s name), that the plans were viewed or a plan was chosen, and that an account was created. It also records how many files were chosen (never which), whether the file picker was dismissed, and the kind of device and window size you use (phone, tablet or computer), with a plain label for visits that look automated. It also records session replays: a reconstruction of how the page changed as you used it, with every piece of text on the page (track names included) and everything typed into a form hidden before it leaves your browser, and with pictures you chose and file pickers left out. Replays never contain sound. When something goes wrong, an error report is sent: the error message and where in our code it happened, with anything that looks like a file name removed. PostHog keeps a random visitor code in your browser’s local storage (no cookies). If you are signed in, events are linked to your account’s random id, never your email address. Your audio, file names, track titles, artists and set pictures are never sent. Opening sonatamix.com/?nocount once, or a browser that sends Do Not Track, switches PostHog off.

6. Hosting and fonts. Our website is hosted by Vercel, which, like any host, receives your IP address and technical request details when your browser loads the site, and keeps server logs. Our typefaces (Sora and Fraunces) are served from our own site, so loading them sends nothing to a font service or any other third party.

7. When you write to us. We keep your message and email address so we can reply and keep a record.

8. Payment, if you choose a paid plan. Paid plans are optional. If you buy one, you enter your card on our payment provider’s page (Stripe). We do not receive or store your card number. We send Stripe your email address and account id so the payment is tied to your account, and Stripe tells our server when a payment succeeds, fails, or a subscription changes. We store, against your account, the plan, its status, Stripe’s customer and subscription identifiers, when access runs until, each payment’s amount and date, and, if you arrived through a creator’s referral link, that creator’s code, so the creator can be credited. Your audio, track names and mixes are not part of any of this: they stay on your device, the same as on the free plan.

What we do not do

• We do not sell your personal information, or share it for advertising.
• We do not run ads, and we do not use advertising or cross-site tracking tools.
• We do not set cookies ourselves (see below).
• We do not use your audio, or anything about it, for any purpose: we never receive it.
• We do not make decisions about you by automated means that have legal or similarly significant effects.

Cookies and browser storage

Sonata does not set cookies. It does use your browser’s local storage and IndexedDB on your device:

sonata (IndexedDB)

Your tracks, mixes, analysis, set pictures and volume, kept on your device only. An account that signs in on a shared browser can get its own separate database there.

sonata.auth

Your sign-in session, if you are logged in, so you stay logged in.

sonata.owner

Which account owns the mixes kept in this browser, so people sharing a computer do not see each other’s mixes.

sonata.device

The random device code used for the anonymous usage counts above.

sonata.nocount

Remembers that you asked for counting to be switched off.

ph_…_posthog

PostHog’s random visitor code and the current visit, for the product analytics, session replays and error reports above.

You can remove all of this at any time by clearing the site’s data in your browser settings (this also deletes your saved mixes from your device). Our service providers may use their own technical storage or logs, which are covered by their own policies.

Our legal bases (EU and UK)

If the GDPR or UK GDPR applies to you, we rely on:

• Contract: to create and run your account, send you codes you ask for, and provide a plan you have paid for.
• Legitimate interests: to run, secure and improve Sonata, understand how it is used (usage counts and visitor statistics), and prevent abuse. You can object (see “Your rights”), and you can switch counting off as described above.
• Legal obligation and legal claims: where we must keep or disclose information by law, or to establish or defend a legal claim.

Who we share information with

We use a small number of service providers who handle information for us.

• Supabase: our database and sign-in service. It holds account details, the plan record and the anonymous usage counts.
• Stripe: payments, if you buy a plan. It holds the card details and the customer record. We hold the identifiers it gives us.
• Vercel: website hosting and Web Analytics. Our payment endpoints run there, and they receive your sign-in token and the plan you chose, not your audio.
• PostHog: product analytics, session replays (text and inputs hidden) and error reports, in the United States. It never receives your audio, file names or track details.
• An email delivery service: sends the sign-in codes.

We may also disclose information if the law requires it, to protect people’s safety or our rights, or to a buyer if the business is sold (we would tell you and the same protections would continue).

Overseas transfers

Our providers run servers in various countries, which may include the United States and other places outside Australia, the UK and the EU. So your information may be handled outside your country. Where the law requires it, we rely on the safeguards our providers offer for these transfers, such as standard contractual clauses, and we take reasonable steps to make sure overseas providers handle personal information in line with the Australian Privacy Principles.

How long we keep things, and deleting your data

• Account details: until you ask us to delete the account, or we close it.
• Anonymous usage counts: we keep them for as long as they are useful for understanding how Sonata is used, then delete or combine them into totals. They are not linked to your account. If you give us your device code (the sonata.device value in your browser’s local storage), we will delete the records that carry it.
• PostHog analytics, replays and error reports: events are kept under PostHog’s retention for our plan, and session replays for 30 days.
• Emails you send us: as long as needed to deal with your request and keep a reasonable record.
• Payment records: the plan, status and payment identifiers, for as long as the account is open and for as long as tax and accounting law requires us to keep a record of a payment. Card numbers stay with Stripe, under its own policy.
• Mixes and tracks on your device: you control these. Delete them in Sonata, or clear the site’s data in your browser.

To delete your account and the data we hold about you, email sonatamix@citruscan.com from the address on the account. We will respond within a reasonable time, and in any case within 30 days. Deleting your account does not remove mixes saved in your browser: those are on your device, and you can remove them as above. We may keep information we are legally required to keep.

Security

The site is served over HTTPS. Passwords are stored by our sign-in provider as hashes, not in readable form. The usage counts table is write-only for the website: the public site can add records but cannot read them back. Your audio never leaves your device, which removes the biggest risk. No online service is perfectly secure, though, so please use a strong, unique password. If we learn of a data breach that is likely to cause you serious harm, we will notify you and the regulator where the law requires it.

Your rights

Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, to the extent they apply to us. You can ask to access or correct the personal information we hold about you. If you have a concern, contact us first. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

EU and UK. You can ask us to access, correct, delete or restrict the use of your personal information, to give you a copy of it in a portable format, and you can object to uses based on legitimate interests. You can complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

California and other US states. We do not sell personal information or share it for cross-context behavioural advertising. Whether or not a state privacy law applies to us, you can ask us what we hold about you or to delete it, and we will not treat you worse for asking.

To use any of these rights, email sonatamix@citruscan.com. We may need to confirm it is you first.

Children

Sonata is not for children under 13, and we do not knowingly collect personal information from them. You must be at least 13 to make an account, or older if the law where you live sets a higher age to use online services without a parent’s consent (for example, up to 16 in some EU countries). If you think a child has made an account, email us and we will delete it.

Changes to this policy

We may update this policy as Sonata changes, for example if we add features or providers. The date at the top shows when it last changed. If a change is significant, we will give notice on the site or by email to account holders before it takes effect.

Contact

Citruscan Pty Ltd (ABN 33 698 868 870), New South Wales, Australia. Email: sonatamix@citruscan.com. See also our Terms of service.