Privacy policy

Last updated 23 October 2026

1. Who is responsible

The controller of your personal data is Ivan Ryzhko, Kraków, Poland. Contact: hi@tracklog.studio.

2. The app

Everything you enter into tracklog (tracks, statuses, metadata, notes) is stored in a file on your computer. The app does not send it to us or to anyone else.

The app connects to the internet only for these things:

• Activating a license key, once per computer. It sends the key, an identifier of the computer, the computer’s name and its operating system, so that the number of computers in your plan can be counted and so you can see which computers use your key. Removing a key from a computer sends the same.
• Checking for new versions. It sends the app version and operating system, and nothing about your catalogue. The first check after installing also says that it is the first one. Nothing else is added. We count these checks to see how many copies of each version are running. The count keeps no IP address. The same check finds the version your license includes, when your updates have ended and the app installs it for you. The same check downloads a list of refunded and revoked keys. tracklog compares it with your key on your computer. Your key is not sent.
• Usage data, only if you agree. The app asks once. If you agree, once a day it sends your tracklog version and system, the size of your catalogue in ranges, how many platforms and lists you have, how many days you used tracklog this week, which parts of tracklog you opened, the steps of the first setup, the kind of key (never the key itself), which day of your trial it is, and errors when a spreadsheet doesn’t import. It comes with a random number that isn’t linked to your name, email or license key. Your tracks, tags and notes are never sent. You can switch it off, see what is sent and get a new number in Settings → About. We keep usage data for 3 months.

The app keeps a technical log on your computer. It stays there unless you choose to send it to us with Copy diagnostics in Settings → About.

3. This website

The site is hosted by Cloudflare. Like any web server, Cloudflare processes your IP address and basic request details to deliver pages and protect the site from attacks.

We count visits to the site ourselves. For each page view, download, signup and click on one of our short links, each time the signup form is opened or started, and how far down the home page you scrolled, we keep the page, your country and city, the site that sent you, the labels in the link, your system, browser and language. A page view counts when the page opens in your browser: the page tells our server it was shown.

We don’t keep your IP address, and we set no cookies. Instead, a visitor number is made from your address and browser. It changes every day. It tells us how many people came in a day, not who they are.

The browser demo asks one question: how you keep track of your tracks now. We count the answer, and whether you imported your own file or the sample. The demo also notes in your browser the day you first opened it. When you download tracklog, the download page sends only how long ago that was: the same day, 1 to 3 days, 4 to 14 days, or longer. On the home page, we count which button you clicked.

We keep these counts for 3 months. Server logs, used to fix problems, are kept for a few days. The site has no advertising.

4. The mailing list

If you leave your email on the site, we store it with the answers you give in the form: your computer type, whether you want to test early, and optionally your name, catalogue size and where you send your music. We also store which site or link brought you to us. We use this only to email you about tracklog and to choose beta testers.

You can also leave your email in a form inside one of our ads on Instagram or Facebook. Then Meta sends the address to us, and it goes to the same list. What Meta itself does with it is covered by Meta’s privacy policy.

The list is managed with Kit (formerly ConvertKit, United States). Every email has an unsubscribe link, and you can also ask us to delete your address.

5. Buying a license

Payments are handled by Paddle.com, our Merchant of Record. Paddle collects your payment details and billing information under its own privacy notice. We never see your card details.

From Paddle we receive your name, email, country and order details. We use them to issue your license key, restore it if you lose it, and answer support questions. Our server issues the key right after payment, shows it on the confirmation page and emails it to you through Cloudflare.

We keep a register of issued keys: name, email, plan, order number, the site or link that brought you to the order page, refunds, and the computers each key is activated on (identifier, name and system). It is stored on our server at Cloudflare for as long as the license exists. Order records are kept for as long as tax law requires.

6. Email support

Mail to hi@tracklog.studio is delivered to a mailbox hosted by Apple (iCloud with a custom domain). We keep support emails as long as needed to help you, and files you send (for example a spreadsheet for import) are deleted once the work is done.

If you report a problem through the form linked from the app, the answers go to Tally (Belgium), together with whatever you paste or attach — and with your tracklog version, your operating system and a short status report from the app. That report has no track names and never your license key; the app shows it to you before you send it. We keep reports while the problem is open and for as long as we need them to fix it.

7. Legal basis

• Mailing list: your consent, which you can withdraw at any time.
• Usage data from the app: your consent, which you can withdraw in Settings → About at any time.
• License, activation and support: performing our contract with you.
• Order records: legal obligations such as tax rules.
• Website security: our legitimate interest in keeping the site available.
• Visit and download counts: our legitimate interest in knowing how people find the site and use the app.

8. Transfers outside the EU

Kit, Cloudflare, Apple, Tally, Paddle and Meta may process data outside the European Economic Area, including in the United States. They do so under the safeguards required by EU law, such as Standard Contractual Clauses.

9. Your rights

You can ask to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive a copy. Write to hi@tracklog.studio; we reply within 30 days. You can also complain to the Polish data protection authority (UODO) or the authority in your country.

10. Changes

If this policy changes, we will update this page and the date at the top.