Privacy Policy

1What we collect

If you make mixtapes (creators)

You can start a tape before you have an account. Until you sign in, the tape is a draft linked to your browser, and signing in adds it to your account. Everything below applies to drafts too, except that a draft has no display name, and no email address except as described below.

• Your email address, used to sign you in with a one-time link and, unless you turn them off for a tape, to email you once when that tape is first played and once when it's finished.
• The display name you choose, which recipients see on your tapes.
• What you put on a tape: its title, dedication, cover style, the optional first name of who it's for, and the Apple Music playlist link you paste. From that link we read and store the playlist's song details from the Apple Music API (song title, artist, album, length, ISRC, artwork link, and Apple Music links).
• Voice recordings you make, with their length, format, and when they were made.
• If you start a tape before signing in: a cookie that links your browser to the draft, and a keyed hash of the IP address you started it from (not the address itself), which we use only to limit how many drafts can be started from one place and delete a day later. If you ask for a sign-in link from that browser, we keep that email address with the draft for up to an hour, so the draft comes with you if you open the link in another browser. If you move a draft to another browser yourself (for example, from an app's built-in browser to Safari), we make a one-time link for it; we store only a scrambled form of the code in that link, it isn't sent to us as part of a web address, and it stops working once it's used, when you make a new one, or when the draft expires.
• The private share links you create and when they were created or turned off.
• If you order a keepsake cassette: your J-card design (title, note, names, color and lettering, and any track titles you shortened), the cover photo if you add one (the photo and its crop), the US shipping address you enter at checkout, and a record of the payment (amounts and Stripe's payment ID). Stripe collects your card or other payment details; we never see or store them. Each cassette gets its own permanent link, printed on the J-card as a QR code. Anyone holding the cassette can scan it to play the tape's voice notes and see its songs (until the tape has been played, it opens your share link instead). We can turn a cassette's code off on request.
• If you add a message on the tape: the recording or file you upload, a copy we make for playback, and the copy we record onto the cassette, with its length and when you added it. We keep them in private storage with your order. We listen to it to record it onto your cassette, and anyone holding the cassette can play it from its QR code page, like the voice notes.
• If you pay to send a tape: a record of the payment (amounts, Stripe's payment ID, and any refund) and which tape it was for. We also record which tape used your free tape. Stripe collects your card or other payment details; we never see or store them.

If you receive a mixtape (recipients)

• You don't need an account, and we don't ask who you are to open or play a tape.
• If you choose to get texts, we collect your mobile number, the time you agreed, the IP address you agreed from, and which version of the text disclosure you saw. We also keep the texts scheduled for you and whether they were delivered. A cookie on your device links your browser to your opt-in so you can turn texts off from the page.
• When you press Start, we record that the tape was played (the time, nothing about who you are), and, if you get texts, when the last note was delivered. The creator sees whether their tape has been started and finished, and may get an email saying so with the first name they gave the tape. They never see your phone number or anything you send us.
• If you report a tape, we keep what you wrote.

Stored only on your device

• How far you are through a tape is kept in your browser's local storage. It isn't sent to us.
• If you move a draft to another browser, the tab you moved it from keeps that link until you close the tab.

Technical data

• Our hosting provider processes standard request data (such as IP address, browser type, and pages requested) to deliver and secure the site.
• We use cookies to sign creators in and keep them signed in, to keep a draft you started before signing in (for up to 7 days), to remember a recipient's text opt-in, to remember for up to 7 days that you reached our homepage from a tape's "Make one back" link (so we can count those sign-ups), and for Google Analytics (below).

Google Analytics

We use Google Analytics to understand, in aggregate, how people use our website, for example how many people visit, which pages they view, what kind of device and browser they use, roughly where they are (Google estimates this from your IP address), and which site sent them. It also tells us when someone signs up (and whether they came from a tape's "Make one back" link), creates or sends a tape, starts checkout, or completes a purchase (which product and its price). Google Analytics sets cookies on your device to count visits.

• Where it runs: on our homepage, sign-in, legal pages, and the creator app once you're signed in. It doesn't load while you build a tape before signing in. It never loads on the tape pages that people open from a shared link or a cassette's QR code, and recipients aren't tracked by it.
• What we never send to it: email addresses, names (yours, your display name, or a recipient's), phone numbers, tape titles or dedications, voice notes, share links, cassette QR links or their codes, or payment details and payment IDs. Page addresses are reported in general form, such as "a tape's edit page", without the tape's ID or anything after the "?".
• We don't use Google Analytics for advertising, and we've turned off its advertising features.

2How we use it

• To run 949 Mixtape: save tapes, play voice notes to the people you share them with, and show song links.
• To send the text notifications a recipient asked for, and to stop them when asked.
• To email creators when their tape is first played and when it's finished, unless they turn that off.
• To print and mail the keepsake cassettes you order. Your shipping address is used only for that order.
• To keep the service secure, prevent abuse, and review reported tapes.
• To meet legal obligations.

3Service providers

We use a small number of companies to operate the service. They process data on our behalf:

• Supabase: database, sign-in, and private file storage for voice notes.
• Vercel: website hosting.
• Twilio: delivering text messages, for recipients who opt in.
• Resend: delivering our emails to creators (sign-in links, and the emails when a tape is played and finished), and our own notices when a cassette order is paid (the order number, whether it has a tape message, and the amount, never your address or email).
• Stripe: payments for keepsake cassettes and for sending tapes. Stripe processes your payment details (and, for a cassette, the shipping address you enter at checkout) under its own privacy policy, and sends us the payment outcome (and the address).
• Google: Google Analytics, for aggregate website usage (see Google Analytics). Learn how Google uses information from sites that use its services.
• Apple: we use the Apple Music API to read the songs in the playlist link a creator pastes. We don't store the playlist owner's Apple Music name.

The playlist and song links open on Apple Music. When you follow one, you leave 949 Mixtape and Apple's privacy policy applies. Our tape pages ask your browser not to tell Apple which tape you came from.

4SMS privacy

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Your mobile number is used only to send the notifications you asked for about the tape you opted in on. Twilio processes it to deliver those messages. Creators never see recipients' phone numbers. Reply STOP to any message or use "Stop texts" on the tape page to opt out, and reply HELP for help.

5How long we keep it

• Tapes, songs, and voice notes stay until the creator deletes them or asks us to delete their account.
• A draft that was never added to an account is deleted automatically 7 days after it was started, with its songs and voice notes. Editing it doesn't extend that.
• Deleting a voice note or a tape removes the recording from our storage.
• Recipient phone numbers and consent IP addresses are erased automatically 30 days after the text session ends. We keep the time of consent and the disclosure version as a record.
• Shipping addresses are erased automatically 90 days after the order is printed, cancelled, or refunded. Stripe keeps its own payment records as the law requires. The J-card design, cover photo and tape message of a sent order stay with the order record. An unsent J-card, its photo and its tape message are deleted with the tape, and removing a tape message deletes the recording.
• Reports are kept as long as needed to review them.
• Deleted data may remain in our providers' backups for a limited time before it is overwritten.

6Your choices and deletion

• Creators can delete songs, voice notes, and whole tapes in the app, and can turn off share links. A draft started before signing in can be deleted the same way, from the browser it's in.
• To delete your creator account, or to ask for a copy or correction of your data, contact us at help@949mixtape.com.
• To opt out of Google Analytics, install Google's opt-out browser add-on, use a browser or extension that blocks trackers, or block or clear cookies for this site. Tapes, texts, and the creator app keep working either way.
• Recipients can stop texts at any time. To have your number deleted sooner, contact us at help@949mixtape.com with the number.

7Security

Voice notes are kept in private storage and played through links that expire. Share links are long random strings. Access to account data is limited to our servers. No system is perfectly secure, so we can't guarantee that data will never be accessed without permission.

8Children

949 Mixtape isn't directed to children under 13, and we don't knowingly collect their information.

9Changes and contact

We'll update this page when our practices change and revise the effective date above. Questions: contact Adult Supervision LLC at help@949mixtape.com.