soundstack.

Privacy policy

Effective October 17, 2026

This policy explains how SoundStack handles information when you use the site, studio, and account features.

Information we process

  • Account information: your email address, account identifier, authentication records, and the terms version and acceptance time submitted when you sign up. Authentication credentials are managed by Supabase Auth.
  • Audio and stack information: files you upload, microphone takes you record, track names, icons, levels, timing, notes, and sharing settings.
  • Technical information: service providers process request details such as IP address, browser information, timestamps, and error or security logs to deliver and protect the service. We also use hashed network identifiers and short-lived request counters to enforce abuse and download limits.

Local storage and microphone access

The studio saves stacks and audio in IndexedDB on your device and remembers your active stack in browser storage. Account authentication uses cookies. Local audio is uploaded to our storage when you choose Save stack or Share stack. The homepage demo is generated in your browser.

Recording requires your browser’s microphone permission. The studio records only when you start a take and stops microphone capture when the take ends or the studio closes. Recordings are stored with the local stack and uploaded if you save or share it. Other people who use the same browser profile may be able to access local stacks; logging out does not erase them.

How information is used

We use information to authenticate accounts, save and retrieve stacks, process audio features, deliver account emails, provide the sharing links you enable, and investigate failures or abuse. We do not sell personal information or use your audio to train AI models. SoundStack does not currently include advertising or third-party marketing analytics.

Service providers

SoundStack uses Vercel for website hosting, Supabase for authentication, database and audio storage, and Resend for account email delivery. These providers process information needed to perform those functions. The Supabase project is hosted in the United States; other infrastructure and support processing may take place in other countries.

Information may also be disclosed when required by law or reasonably necessary to address fraud, protect rights and safety, or respond to a security incident.

What happens when you share

Stacks saved to an account are private unless you enable a sharing link. Anyone with that link can access the stack’s title, notes, track information, and audio, adjust a listening mix, and export audio. The shared response does not include your account email.

Turning off sharing prevents new requests through the shared player. Audio that has already been loaded, downloaded, or recorded cannot be recalled. Avoid putting personal or confidential information in a stack you share.

Retention and your choices

Local stacks remain in your browser until you clear the site’s storage or the browser removes them. Clearing browser data can permanently remove local recordings. Account stacks remain in cloud storage while retained in your account. Deleting a track locally takes effect in your cloud stack after you save the stack again.

You can edit stack information, turn off sharing, export audio, clear local site storage, and revoke microphone permission in your browser. Account settings let you request an email change, reset your password, and permanently delete your account. Account deletion removes cloud stacks and stored audio, revokes sessions, and clears stacks stored in the browser where you delete the account. Other devices can retain local copies until their site storage is cleared. Depending on applicable law, you may also have rights to request access, correction, deletion, or a copy of personal information. Requests may require verification of account ownership. Some records may need to be retained for legal or security purposes, and backup copies can persist until they expire.

Security

We use encrypted HTTPS connections, authenticated account access, owner-based database permissions, and private audio storage with time-limited listening URLs. No system can guarantee absolute security. Keep your login details and sharing links secure, and retain your own copies of important audio.

Age requirement

SoundStack is intended for people 18 and older. Do not create an account or submit personal information if you are under 18.

Policy changes

We will update the effective date when this policy changes. Material changes will be communicated through the service or an account email before they take effect when required.

Contact and privacy requests

For privacy questions or requests to access, correct, export, or delete your personal information or account, email support@soundstack.studio. Send account-related requests from the email address associated with your account. We may need to verify your identity before acting on a request.