Last updated 2 September 2026
Your music never reaches us. Scanning and mastering run inside your browser or app, on your own device, and your audio file is never uploaded.
For the purposes of the GDPR, the data controller is:
PolishMyTrack
Sweden
support@polishmytrack.com
Not your audio. The site is a static page with no upload endpoint — there is no server that could receive a file. You can confirm this in your browser's Network tab while mastering a track. It also means we cannot recover your work for you, because we never had it.
No advertising or cross-site tracking. The website does not create an analytics cookie or identifiers that track you across visits. Saved presets, preferred view, licence status and strictly necessary sign-in state may be stored on your device so the features you request continue to work. Clearing site data removes that local state. Large web releases also use this browser's private local file storage for temporary masters and ZIP preparation. These audio files stay on your device. Starting another release removes its temporary files. Reloading or closing the tab abandons the session; the next release cleans up abandoned files where the browser supports session locks.
Premium account. You can try the iOS app, buy Premium through the App Store and restore your App Store purchase without a PolishMyTrack account. Connecting an account for web access is optional. If you sign in for Premium, we store your normalized e-mail address, a random internal account ID, login-code attempts and hashed session tokens in our Cloudflare database. Login codes expire after 10 minutes and sessions after 90 days. We use this information only to sign you in and connect the same Premium access on the website and iOS. Passwords, audio, filenames and mastering settings are never stored in the account. You can delete it directly from the account screen on the website or in the iOS app, or ask us to delete it at any time.
Three free iOS tracks. The app keeps a local count and up to three file fingerprints to recognize tracks you have already mastered for free. These fingerprints stay on your device and are never sent to us or RevenueCat. No account or payment details are needed to try the app.
Optional iOS usage totals. After a native mastering pass succeeds, the iOS app may send us a random identifier, whether it was a first master or remaster, the track's duration rounded to whole seconds, the platform, and a random event ID that prevents retries being counted twice. This lets us answer how many anonymous iOS installations use the service, how many tracks are mastered and how many audio minutes are processed. We do not send or store the audio, filename, artist, title, musical measurements, IP address, browser, country, referrer or advertising ID for this purpose. It happens only after you allow anonymous usage totals in the app's privacy choice. Event IDs are deleted after 30 days; the anonymous installation and daily aggregate counters are retained while the service operates so lifetime totals remain accurate. They are never sold or used for advertising.
Cookie-free website analytics. We count fixed steps such as visit, file selected, scan completed, master completed, Premium viewed, checkout started and purchase completed. We also reduce the traffic source to one coarse label such as direct, Google, ChatGPT or YouTube. Our database stores only the day, fixed event/source labels and aggregate counts. It receives no event, installation, session or account ID and no raw URL, query string or referrer. Cloudflare Web Analytics measures page use, paths, referrers, performance and Core Web Vitals and may report aggregate country, device, browser and operating-system information. Cloudflare states that its beacon uses no cookie, browser storage or fingerprint and discards the request IP at its nearest data centre. Neither system receives audio, filenames or mastering measurements.
These providers are US-based and may process data outside the EEA under standard contractual clauses. We require them to handle personal data with the same or equivalent protection described in this policy and applicable law. If you e-mail us, we keep your message for as long as it takes to help you and for our records afterwards.
We process the cookie-free, aggregate website measurement for our legitimate interests in understanding whether the service works and where it needs improvement. The iOS app sends its separate anonymous usage totals only with your consent. We otherwise process data to perform a contract (handling your purchase and keeping a paid licence unlocked), for our legitimate interests (keeping the site secure and answering your mail), and to meet legal obligations (tax and accounting records). Purchase records are kept for the period Swedish accounting law requires; support e-mail for up to 24 months. Expired login challenges and sessions are retained only as long as needed for security and login operation, then deleted.
You have the right to access, correct, erase, restrict, object to and port your personal data. Write to support@polishmytrack.com and we will reply within a month. Your account e-mail or support code lets us find the account; anonymous mastering totals cannot be connected back to it because the two identifiers are deliberately separate.
You can also complain to the Swedish data protection authority, IMY (imy.se).
The service is not directed at children under 13. If this policy changes materially we will update the date above.