Working draft. It must be reviewed by a lawyer before launch. Last updated: October 28, 2026. This is a translation of the Spanish original, which prevails if the two differ.
Who is responsible
StemStage is a service operated by Boris Alvarez, from Chile. For any privacy matter (accessing, correcting or deleting your data), write to us from the support page, under the topic "My account, my plan or my data".
What data we process, why and for how long
| Data | Why | How long |
|---|---|---|
| Google account: name, email, profile picture and Google identifier | To create your account and show you who you are. We never see your Google password. | As long as you have the account |
| Account sign-up: IP address (IPv6 by block), an identifier saved in your browser and a browser fingerprint (a summary of traits such as browser, screen and time zone) | To prevent abuse, for example creating many free accounts from the same device or network. They are not used for advertising or to profile you. | 90 days from sign-up |
| Usage: date and plan of each song you upload, and the last time you opened each project | To apply the monthly song limit, the project cap and the expiry of the free plan | As long as you have the account |
| The song you upload (the audio file) | To process it (separate the tracks, build notation and lyrics) | Deleted when processing finishes |
| Results: separated tracks, notation, tablature and lyrics | So you can practice with them in your library | Until you delete them or close your account. On the free plan, a project not opened for 90 days is locked (not deleted) and reactivated when you move to Pro |
| Track cache: a copy of the separated tracks with an acoustic fingerprint of the song, without your personal data | To reuse the work when another person uploads the same song | 90 days without use; you can ask for its removal |
| Pro plan waitlist (if you sign up on the home page): email, page language and IP block | To let you know when the Pro plan is available. Not used for anything else or shared | Until the plan launches or 12 months, whichever comes first; you can ask us to delete it earlier |
| Support messages: name, email, text, IP (by block) and date | To handle your request | Up to 12 months after it is resolved |
Cookies and browser storage
- Session (
ats_session): keeps you signed in, up to 30 days. Required to work. - Device (
ats_deviceand its copy in local storage): identifies your browser for abuse control, up to 2 years. - Language (
ats_lang): remembers the language you chose, up to 1 year. - Interface preferences (zoom, columns, widths and similar): stored only in your browser.
- We do not use advertising or analytics cookies.
Who we share data with
- Google: sign-in. Google receives the fact that you accessed StemStage with your account.
- Cloudflare: traffic goes through its network (protection, speed) and we use its anti-bot check (Turnstile) when creating some accounts. Cloudflare sees the requests that reach the site.
- AcoustID / MusicBrainz (song recognition): if your file has no artist, we send an acoustic fingerprint (a numeric signature of the sound, not the audio) and the length to find out which song it is. We send none of your personal data.
- LRCLIB (lyrics service): to look up lyrics we send only the artist and title of the song, taken from the metadata or the file name. We never send the audio.
- Payments: when paid plans exist, billing will be handled by an external provider (Paddle or Lemon Squeezy). We do not store card data.
- Audio processing is done on StemStage's own servers. We do not sell your data or use it for advertising.
Your rights
You can ask us to access your data, correct it, delete it (your account and your projects) or object to a processing. We delete the account and its projects within 30 days of your request. You can also delete any project yourself from your library.
Security
The connection is encrypted (HTTPS), the session uses a signed cookie that the browser does not hand to scripts, and each person can only access their own projects. No system is perfect: if an incident affecting your data occurs, we will let you know.
Minors
StemStage is not intended for children under 16.
Changes to this policy
If we change something important, we will publish it here with the new update date.