Privacy Policy
Last updated: November 4, 2026
This explains what Sndbox collects, why, and the choices you have. In short: we collect what's needed to run an account and a music service, we don't sell your data, and we use Google Analytics on the website to understand how it is used. We don't use advertising SDKs.
What we collect
| Data | Why |
|---|---|
| Username, display name, and a salted hash of your password (never the password itself) | Your account and sign-in. |
| Bio and artist name, if you add them | Shown on your profile. |
| Music, cover art and descriptions you upload (artists) | To stream them to listeners. |
| Plays, likes, playlists, follows and blocks | Your library, recommendations on Home, play counts for artists, and keeping blocked users away from you. |
| How long you listened to each song, and where you stopped | So artists can see how their songs perform (for example how many people finish a song). Artists only ever see totals, never who listened. |
| What you're listening to right now | Shown to people who follow you ("friends listening"). It expires a few minutes after you stop. |
| Room activity and chat messages | Live rooms and live broadcasts. Recent chat is held in memory while a room or broadcast is open and is not kept after it closes. In a broadcast, chat is visible to everyone in it, and listeners are only counted: other listeners can't see who is listening. |
| Audio you send in a studio session, and recordings made in one | Studio sessions stream your audio live and directly between your device and the host's. In a live broadcast the host's mixed audio passes through our servers on its way to the listeners; it is not stored unless the host records it. Recordings made during a take (yours, and the host's mix) are stored on our servers so you and the host can download them. They stay until you or the host delete them. |
| If you aren't signed in and play a free preview: a random visitor ID kept in a cookie, a salted one-way hash of your IP address (not the address itself), and which song you previewed and when | To give each visitor one free 30 second preview and stop it being repeated, and so your preview is linked to your account if you sign up. Previews are not counted as plays or listens, so they never appear in artists' stats. The visitor ID cookie is needed for this and is not used for advertising. Records for visitors who never create an account are deleted after 90 days. |
| Reports you send and reports about you | Moderation. |
| Appeals, and an email address if you choose to give one | To review your appeal and email you the decision. |
| Website usage data: pages viewed, approximate location (from your IP address), browser and device type, and how you arrived | Google Analytics (see Tracking below), to understand how the website is used and improve it. |
| Technical logs (IP address, device type, errors) | Security and keeping the service running. Kept by our hosting provider for a limited time. |
We don't ask for your real name, phone number, contacts, precise location, photos or microphone, and the apps don't request those permissions. On Android the app asks to show notifications so the music controls can appear on your lock screen.
Who can see what
Your display name, and your artist name and releases if you're an artist, are visible to other people. The people in a studio session can hear what you send into it, and the host can download recordings of it. Your plays, likes, listening history and playlists are visible only to you (a playlist is visible to you and the people you invite to collaborate). Chat in a room is visible to the people in that room.
Who we share data with
We don't sell your data or share it for advertising. We use Microsoft Azure to host the service (servers, database, file storage and email sending), and Google to measure website usage (Google Analytics), and they process data for us under their terms. We may disclose data if the law requires it or to protect people from serious harm.
Tracking
The Sndbox website uses Google Analytics, which sets cookies or similar identifiers in your browser and sends Google information about your visit (pages viewed, approximate location, browser and device). We use it only to understand and improve the website, not for advertising. If you are in the European Economic Area, the UK or Switzerland, it stays off until you accept it in the banner on your first visit, and you can change your mind any time with Cookie settings. Elsewhere it runs by default. You can also block it with your browser's privacy settings, a tracking-protection extension, or Google's opt-out add-on. The iOS and Android apps contain no analytics or advertising SDKs, and Sndbox doesn't track you across other companies' apps and websites.
How long we keep it
We keep your data while your account exists. When you delete your account, your profile, playlists, likes, follows, blocks and everything you uploaded are removed straight away. Reports you filed stay on file without your name attached. A short note of any moderation action (for example, that an account was suspended) may be kept to protect the service. Automatic backups expire on their own schedule.
Your choices
- Delete your account in the app (You → Delete account) or on the website (Profile).
- Edit your display name and bio in your profile.
- Block and report people or content from inside the app.
- Ask for a copy of your data, or a correction, by emailing us. We'll verify it's you first.
Depending on where you live (for example the EU, UK or California) you may have additional rights, such as access, correction, deletion and objection. Email us and we'll help.
Children
Sndbox isn't for children under 13. If you believe a child has made an account, tell us and we'll delete it.
Security
Connections are encrypted (HTTPS/WSS), passwords are stored as salted hashes, and uploaded files aren't public: they're served through short-lived links. No system is perfectly secure, so please use a strong, unique password.
Changes
If we change this policy in a way that matters, we'll update the date above and tell you in the app.
Contact
Privacy questions and requests: appeals@sndbox.fm.