Data controller: Optimum Paweł Kowalski, ul. Pozytywistów 4/4, 20-639 Lublin, Poland
Tax ID (NIP): 712-031-17-46
Contact: support@countin.band
| Data | Purpose | Where it lives | How long |
|---|---|---|---|
| The audio file you upload | To separate it into stems | Our backend server and the GPU provider that performs the separation | On the backend until the separation finishes and for a short time after; the provider keeps it only for the duration of the job |
| The separated stems | To play them in your browser and to serve the same song again without re-separating it | Cloud file storage, at an address derived from the file's content hash, not from you | Up to 30 days after they were created |
| A mix you send to CountIn | To hand the file over to countin.band, which runs on another domain | Our backend | 24 hours, then deleted |
| A hash of your IP address and browser type | To count separations per person for the daily limit | Backend memory, never on disk | 24 hours |
| Visit statistics: the page, where the visit came from (the referrer), how long the page was in view, the browser language, and whether a file was uploaded or played. Each page view gets a random identifier that is not stored in your browser. To tell one visit from the next, a one-way hash of your IP address and browser type is kept for 30 minutes. | To know how many people use the Service and what they do here | The backend of countin.band, run by the same operator, on our hosting provider | Individual visit records 45 days; daily totals without any per-visit detail are kept longer |
| Server logs (IP address, request, time) | To keep the Service running and to stop abuse | Our hosting providers | Per those providers' short retention, typically days |
Legal basis: performance of the Service you asked for (Art. 6(1)(b) GDPR) for the files and the hand-off; our legitimate interest in running a fair, secure service and in knowing how it is used (Art. 6(1)(f)) for the daily limit, the visit statistics and the logs.
Your library (songs, stems, exported mixes and your mixer settings) is stored in your browser's own storage (IndexedDB and localStorage) on your device. It never leaves your device unless you upload a new file, export a mix, or send one to CountIn. Clearing site data removes it; Safari on iPhone may remove it after a period of not using the site. We cannot see it and cannot restore it.
By default StemPlayer sets no cookies. Visits are counted by our own measurement described in section 1, which uses no cookies and stores no identifier in your browser. The browser storage described above is used only to make the app work (remembering your library, whether you prefer the simple or the full mixer, and your answer to the banner below). Fonts are loaded from Google Fonts, which sees your IP address when the font file is requested.
Session recordings, only if you accept. A banner asks whether StemPlayer may use Microsoft Clarity. If you click Decline, or ignore the banner, Clarity is never loaded. If you click Accept, Clarity records anonymous sessions: where you click, scroll and how you move through the page, so we can see where people get stuck. It does not record your audio. Text typed into form fields is masked, but file names of your songs can appear in a recording. Clarity sets two cookies on stemplayer.app: _clck (one year) and _clsk (one day). Microsoft keeps recordings for 30 days, and a sample of recordings and heatmaps for up to nine months. Our legal basis is your consent, which you can withdraw at any time by clearing site data for stemplayer.app, after which the banner asks again.
We use service providers who process data only on our instructions and under data processing agreements:
We will tell you the name of any provider on request at support@countin.band. Transfers outside the European Economic Area rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses; you can ask us for details of the safeguards. We do not sell data and do not share it for advertising.
Under the GDPR you can ask for access to, correction or deletion of personal data we hold, object to processing based on legitimate interest, and complain to a supervisory authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych). Since we have no account and cannot tie a stored stem to a person, a deletion request should include the file or its name and the approximate date of upload. Write to support@countin.band.
The Service is not directed at children under 16, and we do not knowingly process their data.
We may update this policy; the current version and its effective date are always at this address.