Privacy Policy

Scope and responsibility

SonikTrax is self-service software for connecting to a music server. SonikTrax does not host music for app users. This policy describes the software's data handling and the contact form on this website. Your configured server's operator controls the data stored on that server. If you use someone else's server, ask that operator about their privacy practices, enabled integrations and retention rules.

Information on your server

Depending on the features you use, your server stores account information such as username, email address, password hash and optional authentication or connected-account settings. It also stores music metadata, playlists, favorites, requests, playback history, queue, position and preferences needed to provide and synchronize those features.

Server logs and security records can include IP addresses, request information, device or session details and diagnostics. The server operator uses these records to maintain the service, investigate problems and prevent abuse. Administrators can access information needed to operate their server.

Information on your device

The web, iOS, tvOS and Android clients store information needed to connect and play music, including the server address, session or authentication tokens, preferences, library metadata and cached artwork. Native clients use platform storage for credentials and caches; the web client uses cookies and browser storage for its session and preferences. Clearing local caches or uninstalling an app does not delete information held by the server.

Connections and optional services

Clients communicate with the server you configure. Artwork, metadata searches, downloads and connected-account features can also contact external services when enabled by you or the server operator. These may include SoundCloud, Deezer, Spotify, MusicBrainz, Discogs and other configured providers. Requests can disclose search terms, music metadata and network information to the relevant provider. Connected-account credentials or tokens are stored by the server when needed for that integration.

Optional AI metadata features send the information needed for the requested task to the configured AI provider. Voice and car integrations use Apple, Google or other platform services under those providers' privacy terms. Review the services enabled on your server before using them.

The web application supports optional PostHog analytics controlled by the server operator. It is disabled by default in the application's settings; when enabled and configured, usage and device information may be sent to PostHog. These public policy and contact pages do not load analytics or advertising scripts. SonikTrax does not sell personal information through the software.

Sharing and security

Information you choose to share through public playlists or sharing links may become accessible to other people. Only share content and information you have permission to share.

Use HTTPS for server connections. Native authentication uses platform credential storage, and the server stores password hashes rather than plaintext account passwords. Security also depends on your server configuration, updates, access controls and the services you enable. No system can guarantee absolute security.

Contact requests

The contact form collects your email address, optional name, selected topic and message. It stores them in this website's server database for authorized administrators to handle your request. It also uses a short-lived, keyed network identifier for abuse prevention; request and security logs may separately contain network information. Your contact details are not made public. Do not include passwords, access tokens, payment information or other secrets in a message.

Retention, access and deletion

Your server operator determines how long account data, listening information, logs and backups are kept. Contact messages are retained for handling requests and maintaining a record of their resolution. Ask the relevant operator about access, correction, export or deletion of your information and any applicable retention obligations.

Use the Account & Data Deletion page and contact form to request assistance. We may need to verify your identity before acting. Independent server data cannot be removed by SonikTrax on the operator's behalf. Backups may retain copies until they expire under the operator's backup policy; legal or security obligations may require some records to be retained. Closing an inbox request is not an account-deletion operation.

Children and content

SonikTrax is not directed to children. The software does not currently enforce age-based music restrictions. Server operators are responsible for appropriate access and content controls and for meeting laws that apply to children's information. Contact the relevant operator if you believe a child's information should be removed.

Updates and contact

Changes to this policy will appear on this page with an updated date. For questions about this website or the software, use the contact form. For information held on an independently operated music server, contact that server's operator.