Last updated August 12, 2026

Privacy Policy

tunescout is designed to identify music in public video links without requiring an account. This notice explains the data processed when you use the service or choose to create an account.

Controller and contact

Simon Kosevski Koenigstrasse 8b, 13589 Berlin support@tune-scout.com

Account data

For email accounts, we process your email address, display name, a one-way password hash, account timestamps and session tokens stored as hashes. We never store your password itself. With Google sign-in, we process the name, verified email address and Google account identifier returned by Google; we do not receive your Google password.

Early-access lists

If you join the tunescout Separation early-access list, we store your email address and whether the request came from a signed-in account. We use it only to contact you about access to that feature, not for a general newsletter. You can ask us to remove the entry at any time.

Contact messages

When you use the contact form, we process your name, email address, subject and message in order to receive and respond to your request. The message is delivered through our email infrastructure and is not used for marketing.

Scan history and public results

Successful scans can be stored in a signed-in user’s private history. This includes the source key, video title, scan mode, timestamps and identified tracks. Public result pages are shared cache entries and are not labelled with an account identity. For the BPM finder, a verified artist, title, measured tempo, rhythm confidence and non-personal source key can be stored in the public tempo database. Audio used by song and BPM scans is handled only for the duration of the scan and is then deleted; scan results may remain in the shared result cache.

When you use the private Separation beta, your uploaded audio and generated stems are stored in account-specific temporary storage so you can preview and download the result. These files are automatically deleted after 24 hours. Job metadata such as the original filename, duration, status and credits used can remain in your private account record until you delete your account.

Service providers and external platforms

To provide a scan, we process the link you submit and retrieve media from the platform selected by you. Audio recognition is performed through the recognition service used by tunescout. Hosting and email infrastructure are operated through Hetzner. Google is involved when you choose Google sign-in and, where advertising is enabled, to deliver and measure Google AdSense advertising.

Analytics

We use self-hosted, cookie-free analytics. An IP address and browser user agent are transformed into a salted daily hash to estimate unique visitors. Raw IP addresses are not stored, and the daily hashes cannot be linked across days. We also retain page path, referrer host, bot classification and an offline-derived country code for operational statistics. If you voluntarily rate a recognition result as correct or incorrect, the response, scan mode and public result key are stored with the same daily hash to prevent duplicate ratings. When you select a streaming link, we count the selected service, scan mode, public result key and whether the click came from a signed-in session; we do not store an IP address, account identifier or visitor identifier with that click.

Cookies

Account features use a secure session cookie. A separate same-site security cookie protects forms from cross-site requests. These cookies are necessary for authentication and security. Where Google AdSense advertising is enabled, Google’s consent flow provides choices about advertising-related storage and personalised advertising for visitors where this is required. You can revisit those choices through the privacy options provided in that flow.

Purpose, retention and deletion

We process data to provide scans, maintain accounts and history, prevent abuse, secure the service and understand its technical use. You can permanently delete your account and its private history in Account Settings. Public, anonymous result pages remain available because they are not personal account data. Verification and password-reset tokens expire automatically.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing. You may also complain to the competent data-protection authority. Contact us at support@tune-scout.com.