Privacy

The short version

• No analytics, no advertising, no third-party trackers, no data brokers.
• We do not train models on your recordings.
• We do not sell or share your personal data, and never have.
• One cookie, and it only exists to keep you signed in.

What we collect

If you join the waitlist

Your email address, which of the two forms you used, and the time you submitted it. Nothing else. Signing up twice with the same address does not create a second record.

If you have an account

Your email address, a display name taken from the part of your email before the @, a hash of your password (never the password itself), and the timestamps on the record. To keep you signed in we store a session, and each session record holds your IP address and browser user-agent string. If you sign in with Google instead, we store the identifiers and tokens that provider gives us so the connection keeps working.

If you use the Service

The audio files you upload, and what we derive from them: a waveform summary, duration, tempo, musical key, the file name, type and size, and any title or artist you enter. We also store the bridges made for you and the settings that produced them.

Automatically, because the site is hosted

Our host, Cloudflare, processes the ordinary technical information every web request carries — IP address, user agent, the page requested, timing — for delivery, security and abuse prevention. We do not build profiles from it.

What is stored in your browser

A session cookie, set only once you sign in, and only to keep you signed in. It is strictly necessary, and there is no advertising or analytics cookie on this site.

We also use your browser’s local storage for two preferences that never leave your device: whether you chose the light or dark theme, and — if you have opened the hidden tuning panel — the settings you dialled into the background animation.

Why we are allowed to hold it

Where the UK and EU GDPR apply, our lawful bases are: performance of a contract for your account, your uploads and your bridges; consent for the waitlist, which you may withdraw at any time by asking us to delete you; and legitimate interests for keeping the service secure and working, balanced against the fact that we collect as little as we can to do it.

Who else sees it

We do not sell your data and we do not share it for anyone else’s marketing. It reaches only the providers we need to run the service:

• Cloudflare — hosting, the database, file storage and email routing. Your uploads and account records live here.
• Google — mail sent to our address is routed to a Google mailbox, so if you email us, Google handles that message.
• A compute provider for generating bridges, when that is connected. It receives what it needs to produce a bridge and does not keep it.

We would also disclose data if the law genuinely required it, and we would tell you unless we were forbidden to.

Where it goes

Our infrastructure is global and your data may be processed outside your own country, including in the United States. Where we move personal data out of the UK or EEA we rely on the appropriate safeguards our providers offer, including standard contractual clauses.

How long we keep it

• Uploads and bridges — until you delete them, or thirty days after you close your account.
• Account records — while your account is open, then deleted within thirty days.
• Sessions — until they expire or you sign out.
• Waitlist — until you ask to come off it, or until we launch and tell you.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to or restrict what we do with it, and ask for it in a portable form. If you are in the UK or EEA you may complain to your data protection authority; in the UK that is the ICO. If you are in California you may ask what we have collected and ask us to delete it, and we will not treat you differently for asking — note again that we do not sell or share personal data.

Write to legal@seamengine.com and we will deal with it within thirty days.

Children

The Service is not for under-16s and we do not knowingly collect their data. If you think a child has given us something, tell us and we will remove it.

Security

Traffic is encrypted in transit. Passwords are hashed, never stored in readable form. Access to production data is limited to those who need it. No service can promise perfect security, and we will not pretend otherwise — if a breach ever affected you we would tell you and the relevant regulator as the law requires.

Changes

If this policy changes materially we will say so before it takes effect, and the date at the top of this page will change.

Contact

Privacy and data requests: legal@seamengine.com
Anything else: hello@seamengine.com