Privacy policy

What we collect

Without an account:

• A random ID. The first time you open LastTrack, your browser gets a random ID so the app can tell your edits apart from everyone else's. It isn't tied to your name.
• The nickname you pick when you join a song. Other people in that song see it.
• What you make: song titles and settings, tracks, notes, and earlier versions of each track, kept so edits can be undone and restored.
• Activity in a song, such as who added, edited, locked or deleted a track and when, and when each member was last there. Members of the song can see this.
• Plays of published songs, counted once per browser.

If you sign in (you need an account for battles and to publish to the gallery):

• Your email address and a display name. Our sign-in provider, Clerk, passes these to us. The display name comes from the name or username on the account you sign in with.
• A link between your account and the random ID your browser was already using, so songs you made before signing in stay yours.
• In battles: your entries, your votes and the credits you gave each entry, whether you've submitted and voted, and your placings and scores.
• Reports you send about a song or battle, including the reason you give.

Technical information:

• Your IP address, used briefly to slow down spam and abuse. We store only a scrambled (hashed) version, which caps how many songs can be made from one place in a day.
• Standard request logs kept by our hosting providers, which include IP addresses and browser details.

We use Google Analytics to see how LastTrack is used (more below). We don't show ads, and we don't ask for your location, contacts or microphone. Sound is made in your browser, and nothing you play is recorded.

How we use it

• To run LastTrack: save songs, keep everyone in a song in sync, and stop two people editing the same track at once.
• To run battles: collect entries and votes, work out scores and send battle emails.
• To keep LastTrack safe: limit spam and bots, and review reported content.
• To fix problems and make LastTrack work better.

We don't sell or rent your information, and we don't use it for advertising.

What other people can see

• Songs work by link. Anyone with a song's collaborator link can join and edit it, and anyone with its listen link can play it. Treat links like keys and share them only with people you want in the song. The owner can replace a link at any time, and the old one stops working.
• People in a song see its nicknames, tracks and activity.
• If you publish a song, anyone can find and play it in the gallery, and it shows your display name. Published songs are listed for search engines and show a preview when their link is shared.
• Public battles show players' display names, who has submitted and voted, and the final results with each entry's author. Entries stay anonymous while voting is open, and we never show who gave credits to whom.

Analytics

We use Google Analytics to understand how people use LastTrack: which pages are visited, how people find us (for example from a search engine or a link with a campaign tag), and general information about devices, browsers and rough location. It helps us decide what to fix and build, not to advertise to you.

Private song links never reach Google. Before anything is sent, we replace a song link's key with a placeholder and drop the rest of the address after the ?, except campaign tags. Public songs and battles are recorded with their full address.

Google Analytics sets cookies named _ga and _ga_ followed by our ID, to tell one visit from another. Google keeps this data for the retention period we choose, at most 14 months. You can opt out with Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout) or by blocking cookies for lasttrack.app.

Emails

We only email you about battles you're in: when a round is halfway through, one day before a deadline, when everyone else has submitted, and when results are in. Every email has an unsubscribe link that turns off the reminders. We still send the results of battles you've played in.

Cookies and storage on your device

Cookies:

• lt_anon keeps your random ID. It lasts up to a year.
• Clerk's cookies keep you signed in, if you have an account.
• Google Analytics' cookies (_ga and _ga_ followed by our ID) tell visits apart for our usage statistics. They last up to about two years.

Your browser also keeps some things on your device for LastTrack. They stay on your device:

• Owner links for songs you've made, so you can find them again.
• A copy of your random ID, so you can get back in if the cookie is lost.
• Edits that haven't reached our server yet, for example while you're offline.
• Your loop settings, which track versions you've seen, a battle you're setting up, and your light or dark theme.

Clearing your browser's data for lasttrack.app removes these. Before you do, keep your owner links or download a backup file, because the owner link is how you prove a song is yours.

Services we use

These companies handle information for us, only to provide their service:

• Vercel hosts the website.
• Google Cloud runs our servers and database in the United States and keeps backups.
• Clerk runs accounts and sign-in. If you sign in with Google, Apple or TikTok, that company's privacy policy also applies to the sign-in.
• Cloudflare Turnstile checks that a new song is being made by a person, not a bot. It receives your IP address and browser details when you make a song.
• Resend sends battle emails.
• Google Analytics measures how LastTrack is used. It receives the pages you visit, with private song links removed, and details about your device and browser.

We may also share information if the law requires it, to protect people's safety, or as part of a sale or merger of our business, in which case this policy continues to apply to it.

How long we keep it

• A song expires 90 days after it was last edited or opened with its owner link. We delete an expired song, with its tracks, history, members and activity, 30 days later. Download a backup or export a song to keep it.
• We keep the 50 most recent versions of each track. Deleted tracks are removed for good after 7 days.
• Accounts, random IDs, battles and votes are kept until you ask us to delete them.
• Backups and server logs are kept for a limited time, then replaced.

Your choices and rights

• You can edit or delete your own tracks at any time. Song owners can replace links, export songs and download backups.
• You can turn off battle reminders with the unsubscribe link in any battle email.
• To get a copy of your information, correct it, or delete your account and what's tied to it, email privacy@lasttrack.app. We'll reply within 30 days. If you never signed in, send the link to the song so we can find what's yours.

Depending on where you live, for example California, the EU or the UK, you may have legal rights to access, correct, delete or move your information, and to object to some uses of it. Email us to use them, and we won't treat you differently for doing so. In the EU and UK, we rely on providing the service you asked for, on our legitimate interest in keeping LastTrack safe and working, and on your consent where it's required. You can also complain to your local data protection authority.

Children

LastTrack is for people 13 and older. We don't knowingly collect information from children under 13. If you think a child under 13 has used LastTrack, email privacy@lasttrack.app and we'll delete their information. Teachers using LastTrack with a class should only invite students who are 13 or older.

Security

LastTrack uses encrypted connections, signs its cookies, and gives each song separate links for editing and listening. Backup files you download can be locked with a passphrase that never leaves your device. No system is perfectly secure, so keep your owner links private.

Where your information is stored

We're based in the United States and store information there. If you use LastTrack from another country, your information is transferred to and processed in the United States.

Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top. If a change is significant, we'll also say so in the app.

Contact

Flection LLC runs LastTrack. Email privacy questions and requests to privacy@lasttrack.app. To report abuse or a copyright problem, email report@lasttrack.app.