Privacy Policy

Last updated: July 2026

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address - for account login and communication
• Name (optional) - for personalization
• Password - stored securely as a hash (we never see your actual password)
• Google account info (if you sign up via Google) - email and name from your Google profile
• IP address - for security and usage tracking

Connected Services

When you connect a music platform (Spotify, Tidal, or Apple Music), we receive and store:

• Access tokens - temporary keys that let us access your music library on your behalf
• Refresh tokens - to maintain your connection without repeated logins
• User IDs and email addresses - to identify your accounts on these platforms

We do NOT have access to your platform passwords. Authentication happens directly through each platform's secure login pages.

GDPR Data Uploads

If you upload a Spotify data export (GDPR request data), we store:

• Playlist names and track data from the export
• Liked songs, albums, and followed artists from the export
• Upload metadata (timestamp, file size)

This data is used solely to perform transfers to your connected platforms. You can request deletion of uploaded GDPR data at any time.

Sync Data

When you sync your music library, we store:

• Playlist names and IDs
• Sync history (what was synced, how many tracks, success/failure status)
• Track matching information and ISRC codes (to improve sync accuracy)
• Cross-platform playlist mappings

Queue Data

If you use the Spotify Access plan, we store queue-related data including your position, activation times, and session windows to manage Spotify API access slots.

Analytics

We use Google Analytics to understand how people use our service. This collects:

• Pages visited
• Time spent on site
• Browser and device type
• General location (country/city level)

2. How We Use Your Information

Data	Purpose
Email	Account authentication, transactional emails (welcome, onboarding, sync notifications), support
Platform tokens	Reading your playlists, creating playlists, adding tracks
Sync history	Showing your history, improving matching accuracy
IP address	Security, preventing abuse, enforcing usage limits
Analytics	Improving the service, understanding user needs

3. Information Sharing

We do NOT sell your personal information.

We share data only with:

• Music platforms (Spotify, Tidal, Apple Music) - to perform music library syncing (via their official APIs)
• LemonSqueezy - payment processing for paid plans
• Google Analytics - anonymous usage statistics
• Law enforcement - only if legally required

4. Data Security

We take security seriously:

• All connections use HTTPS encryption
• Passwords are hashed using bcrypt (one-way encryption)
• OAuth tokens are encrypted at rest
• We use secure, httponly cookie-based session management
• Rate limiting protects against brute-force attacks

However, no system is 100% secure. Use a strong, unique password for your account.

5. Data Retention

We keep your data as long as your account is active. Sync history is retained to provide you with usage statistics and improve our service.

If you delete your account, we will remove your personal data within 30 days, except where we're legally required to retain it.

6. Your Rights

You have the right to:

• Access - request a copy of your data
• Correct - update inaccurate information
• Delete - request deletion of your account and data
• Disconnect - revoke any connected platform's access at any time

To exercise these rights, contact us at support@tunarc.com.

7. Disconnecting Services

You can disconnect any platform at any time:

• From Tunarc: Go to Dashboard and click "Disconnect"
• From Spotify: Go to Spotify Account → Apps → Remove Tunarc
• From Tidal: Go to Tidal Settings → Connected Apps → Revoke
• From Apple Music: Go to Apple ID Settings → Apps Using Apple ID → Remove Tunarc

8. Cookies

We use cookies for:

• Essential cookies - keeping you logged in (session cookie, 7-day or 30-day expiry)
• Preference cookies - remembering your UI preferences (e.g., dismissed banners)
• Analytics cookies - Google Analytics (can be blocked with browser settings)

9. Email Preferences

We send two kinds of email, and you control one of them:

• Transactional email - account and purchase messages we must send for the service to work: password resets, purchase receipts, and Spotify Access slot activation. These are not marketing and cannot be turned off while you have an account.
• Product email - occasional help getting your first sync finished, or a heads-up that a sync failed. Every one of these carries an unsubscribe link, and your mail client's built-in "unsubscribe" button works too (we support one-click unsubscribe).

Unsubscribing takes effect immediately and permanently for all product email. We never sell, rent, or share your email address. If you'd like to opt out without waiting for the next email, contact support@tunarc.com and we'll do it for you.

10. Push Notifications

You may optionally subscribe to browser push notifications to receive sync completion alerts and service updates. You can unsubscribe at any time through your browser settings. We store your push subscription endpoint securely and do not share it with third parties.

11. Children's Privacy

Tunarc is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us.

12. International Users

Tunarc is operated from Israel. By using our service, you consent to the transfer of your data to Israel. We comply with applicable data protection laws.

13. Changes to This Policy

We may update this policy from time to time. We'll notify you of significant changes via email or website notice.

14. Contact Us

Questions or concerns about your privacy? Contact us:

Email: support@tunarc.com
Service: Tunarc

← Back to Home Accessibility statement