Privacy Policy
How I handle your data
Last updated: November 6, 2026
The Short Version
I collect what I need to run the site, deliver what you buy, and keep plugin licenses working: mainly your email, your purchases, and a few details about the computer you activate a plugin on. The Vocal Analyzer and my plugins never upload your audio. I don't sell your data. Ad tags only run with your permission in the EU, UK, and Switzerland, and you can switch them off anywhere in the cookie settings.
Who I Am
This policy covers musicbymattie.com ("the Application") and my plugins. Music By Mattie and MBM Audio are run by Tasty Peach Media LLC, my company in Colorado, USA, which is responsible for your data. Music By Mattie provides music production tools, plugins, digital products, courses, and educational content for music producers. If you have questions about this policy, you can reach me at [email protected].
Google User Data
Music By Mattie offers "Sign in with Google" as an authentication option. This section specifically describes how this application collects, uses, stores, and shares data obtained through Google's APIs and authentication services.
What Google user data we collect
When you sign in with Google, we receive your email address and basic profile information (name and profile picture) from your Google account. We do not request access to your Google Drive, Gmail, contacts, calendar, or any other Google services.
How we use Google user data
Google user data is used solely to:
- Create and authenticate your account on musicbymattie.com
- Identify you when you sign in so you can access your purchases and tools
- Deliver products, downloads, licenses, and course access associated with your account
Google user data is not used for advertising, marketing, or any purpose unrelated to providing or improving the application's functionality.
How we store and protect Google user data
Your Google user data (email and profile information) is stored securely in our authentication database hosted by Supabase, which uses encryption at rest and in transit (TLS/SSL). Access to this data is restricted to authenticated API calls only. We do not store Google access tokens or refresh tokens beyond the authenticated session.
Sharing, transfer, and disclosure of Google user data
We share Google user data with the following third parties only as necessary to provide the application's functionality:
- Supabase - stores your account and authentication data
- Mailgun - sends account, purchase, and license emails to your address
- Dodo Payments - receives your email when you check out, to process your order
- MailerLite - receives your email address if you opt in to email communications or use gated tools
We do not sell, rent, lease, or trade Google user data to any third party. We do not transfer Google user data to third parties for advertising, data brokering, or any purpose unrelated to providing or improving this application.
Retention and deletion of Google user data
Google user data is retained for as long as your account is active. If you request account deletion by emailing [email protected], all Google user data associated with your account will be permanently deleted within 30 days. You may also revoke this application's access to your Google account at any time through your Google Account permissions page.
What I Collect
In addition to Google user data described above, I collect the following information:
Account Information
When you create an account via email/password, I collect your email address and an encrypted password hash. When using Google sign-in, see the "Google User Data" section above.
Email List
When you sign up for the newsletter, download a free resource or magic.METER, use gated tools like the Vocal Analyzer, start a plugin trial, or leave a review, your email is added to my mailing list (MailerLite) so I can deliver what you asked for and share relevant content. Every email has an unsubscribe link.
Purchase Information
Payments are processed by Dodo Payments, which acts as the merchant of record for your order (some earlier orders went through LemonSqueezy). I receive your name, email, country, what you bought, and what you paid, including tax. I never see or store your card or bank details.
Where You Came From
When you arrive from one of my links, videos, emails, or ads, a first-party cookie remembers the campaign details in the link (such as source and campaign name) for 30 days. If you buy or sign up, those details are saved with your order or signup so I know which videos and emails actually help people.
Plugin Licenses & Trials
When you activate a plugin or start a free trial, the plugin sends my server your email, a random ID created for your computer, your computer's name, its operating system, and the plugin version. The plugin then checks in from time to time to keep your license current. This lets me limit each license to its allowed number of computers and let you move it between them.
When you ask for an activation code by email, I log the request's IP address to stop abuse of the code emails.
My plugins never send your audio, and they don't track what you do inside them.
Reviews
When you leave a review, I collect your email (to confirm you own the product), your rating and review text, and anything optional you add, like an artist name, your microphone, or an audio clip. Approved reviews show on the site with your artist name, rating, text, and clip. Your email is never shown.
Audio Files (Vocal Analyzer)
Audio files you analyze with the Vocal Analyzer are processed entirely in your browser. Your audio is never uploaded to any server. If you're signed in, your scores can be saved to your account. I also log anonymous measurement results (scores and frequency curves, with no audio and nothing that identifies you) to improve the reference data. The only audio I ever receive is a clip you choose to attach to a review.
Contact Form & Creators Program
If you use the contact form, I receive your name, email, and message by email. If you join my creators program, I keep your email, your payout email, and the sales made through your links so I can pay your commission.
Device & Usage Data
Like every website, the site receives your IP address and basic browser details when you visit. Cloudflare uses them to deliver and protect the site, and to tell me which country you're in so the right cookie rules apply. My analytics count visits and clicks; see "Analytics & Advertising" below.
Analytics & Advertising
Cookieless analytics (always on)
I use Umami, which I host on my own server, Plausible, and PostHog to count page views, clicks, and events like signups and purchases, and to see how people move through the site and where they click on a page. None of them uses cookies here, and I use them to see what's working on the site, not to identify you. PostHog tells visits apart with an anonymous ID it works out on its own servers.
Session analytics (only with your consent)
Microsoft Clarity and PostHog show me how pages are used, including clicks, scrolling, and session recordings. Clarity only loads, and PostHog only records, if you allow analytics cookies. PostHog recordings hide what you type and any email addresses on the page, and I don't record account, sign-in, license, or download pages.
Advertising tags
The Meta Pixel and the Google Ads tag measure how my ads perform and let me show ads to people who have visited the site. In the EU, EEA, UK, and Switzerland they only load after you allow marketing cookies. Everywhere else they're on by default, and you can turn them off at any time in the cookie settings in the footer.
When you buy something and these tags are allowed, I send them the order value, currency, and an order ID, not your name or email, so ad results are counted correctly.
Embedded content
Pages with YouTube videos load the player from YouTube (Google), which may set its own cookies when the video loads or plays. Some fonts are loaded from Google Fonts, so your browser contacts Google to download them.
How I Use Your Data
- Deliver products, downloads, licenses, and course access you've purchased or requested
- Activate plugins, run free trials, and keep licenses working on your computers
- Send email updates, tutorials, and relevant content (you can unsubscribe anytime)
- Provide account access and manage your purchases
- Show reviews and reply to them
- Improve the website, tools, and products based on how they're used
- Measure which videos, emails, and ads bring people to the site
- Prevent fraud and abuse, and keep the site secure
- Keep the records that tax and accounting rules require
I don't sell your personal data, and I never use data from Google sign-in for advertising.
Legal Bases (EU, EEA & UK)
If you're in the EU, EEA, or UK, I rely on these legal bases:
- Contract - to run your account, deliver what you buy, and keep your licenses and trials working
- Consent - for the newsletter and for analytics and marketing cookies (you can withdraw it at any time)
- Legitimate interests - for site security, abuse prevention, cookieless analytics, and knowing which content brings people here
- Legal obligation - for tax and accounting records
Third-Party Services
I use the following services to run this site and my plugins. Each has its own privacy policy:
Personal data is only shared with these services as needed for what they do for me. Most of them store data in the United States, so if you're outside the US your data is transferred there. Where the law requires it, I rely on the transfer safeguards these providers offer.
Cookies
This site uses cookies and similar browser storage in the following categories:
Necessary
Sign-in sessions, your cookie choices, and settings the site needs to work, like tool progress saved in your browser. These cannot be disabled.
Campaign
One first-party cookie (utm_data, 30 days) that remembers which of my links brought you here. It's only read by my own site.
Analytics (opt-in)
Microsoft Clarity and PostHog session recordings, for understanding how the site is used. Only used with your explicit consent.
Marketing (opt-in in the EU, EEA, UK & Switzerland)
The Meta Pixel and the Google Ads tag, for measuring ads. In the EU, EEA, UK, and Switzerland they only load with your explicit consent. Elsewhere they load by default until you decline them in the cookie settings.
Umami and Plausible don't use cookies, so they run without asking.
Your Rights
You have the right to:
- Access the personal data I hold about you
- Request correction or deletion of your data
- Unsubscribe from email communications at any time (every email has an unsubscribe link)
- Withdraw cookie consent, or turn off marketing cookies, through the cookie settings in the footer
- Object to how I use your data, or ask me to limit it
- Request a copy of your data in a portable format
- Complain to your local data protection authority if you're in the EU, EEA, or UK
To exercise any of these rights, email me at [email protected].
Data Retention
I keep your account data for as long as your account is active. License and trial records are kept for as long as the license exists, so your plugins keep working. Purchase records are kept for as long as tax and accounting rules require, even if you delete your account. Email subscriber data is kept until you unsubscribe, and reviews until you ask me to remove them. Analytics data is aggregated. If you request account deletion, I'll remove your personal data within 30 days, except for records I'm legally required to keep.
Security
Data is sent over encrypted connections, and access to the database is limited to me and the services listed above. No system is perfectly secure, but if a breach affects your data, I'll let you know as the law requires.
Children's Privacy
This site is not directed at children under 13. I do not knowingly collect personal information from children. If you believe a child has provided me with personal data, please contact me and I will delete it.
Changes to This Policy
I may update this policy from time to time. If I make significant changes, I'll note it here with a new "last updated" date. Continued use of the site after changes means you accept the updated policy.
Questions?
If anything here is unclear or you have concerns about your data, just reach out.
[email protected]