Last updated September 23, 2026

Privacy Policy

tunescout is designed to identify music in public video links without requiring an account. This notice explains the data processed when you use the service or choose to create an account.

Controller and contact

Simon Kosevski Koenigstrasse 8b, 13589 Berlin support@tune-scout.com

Account data

For email accounts, we process your email address, display name, a one-way password hash, account timestamps and session tokens stored as hashes. We never store your password itself. With Google sign-in, we process the name, verified email address and Google account identifier returned by Google; we do not receive your Google password.

Early-access lists

If you join the tunescout Separation early-access list, we store your email address and whether the request came from a signed-in account. We use it only to contact you about access to that feature, not for a general newsletter. You can ask us to remove the entry at any time.

Contact messages

When you use the contact form, we process your name, email address, subject and message in order to receive and respond to your request. The message is delivered through our email infrastructure and is not used for marketing.

Scan history and public results

Successful scans can be stored in a signed-in user’s private history. This includes the source key, video title, scan mode, timestamps and identified tracks. Public result pages are shared cache entries and are not labelled with an account identity. When the same identified song appears in multiple public YouTube videos, those shared results can be linked from the song’s public BPM page. For the BPM finder, a verified artist, title, measured tempo, rhythm confidence and non-personal source key can be stored in the public tempo database. Audio used by song and BPM scans is handled only for the duration of the scan and is then deleted; scan results may remain in the shared result cache.

When you use the private Separation beta, your uploaded audio and generated stems are stored in account-specific temporary storage. Uploaded audio remains while a job is queued or processing and is removed after the job finishes or fails. Completed stems are automatically deleted 24 hours after they become ready. Job metadata such as the original filename, duration, status and credits used can remain in your private account record until you delete your account.

Service providers and external platforms

To provide a scan, we process the link you submit and retrieve media from the platform selected by you. Audio recognition is performed through the recognition service used by tunescout. Hosting and email infrastructure are operated through Hetzner. Google is involved when you choose Google sign-in and, where advertising is enabled, to deliver and measure Google AdSense advertising.

Payments and subscriptions

Stripe processes checkout, payment methods, invoices, taxes where configured and subscription management. tunescout stores Stripe customer and subscription identifiers, plan status, billing period and idempotent webhook records, but does not receive or store full card details. Stripe's own privacy notice applies to the payment information you submit to it.

Connected streaming services

If you choose to connect Spotify or Apple Music, we store the provider account identifier, display name, granted permissions, playlist identifier and encrypted access credentials needed to create and update your TuneScout playlist. Identified artist and track names are sent to the selected provider to find the corresponding catalogue recording. Connections and automatic additions are optional and can be disabled or removed in Account Settings. Removing a connection deletes the local credentials and sync history; it does not delete a playlist already created in your streaming account.

Analytics

We use self-hosted analytics. An IP address and browser user agent are transformed into a salted daily hash to estimate unique visitors and deduplicate actions; raw IP addresses are not stored, and anonymous daily hashes cannot be linked across days. We also retain page path, referrer host, bot classification and an offline-derived country code for operational statistics. If you voluntarily rate a recognition result, the response, scan mode and public result key are stored with the same daily hash. Streaming hand-offs are counted only for confirmed browser navigation and stored with a daily hash to prevent repeat requests from inflating the metric. Product events such as opening Separation, selecting a file, completing or downloading a Separation, viewing pricing and progressing through checkout are stored to measure the conversion funnel. For signed-in events, the internal account ID is transformed into a separate salted hash before it enters analytics; the analytics database does not contain the account ID, email address or raw IP address.

Cookies

Account features use a secure session cookie. A separate same-site security cookie protects forms from cross-site requests. A random first-party identifier enforces monthly scan allowances without storing a raw IP address and is not shared with advertisers. These cookies are necessary for authentication, security and fair resource use. Where Google AdSense advertising is enabled, Google’s consent flow provides choices about advertising-related storage and personalised advertising for visitors where this is required. You can revisit those choices through the privacy options provided in that flow.

Purpose, retention and deletion

We process data to provide scans, maintain accounts and history, prevent abuse, secure the service and understand its technical use. You can permanently delete your account and its private history in Account Settings. Public, anonymous result pages remain available because they are not personal account data. Verification and password-reset tokens expire automatically.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing. You may also complain to the competent data-protection authority. Contact us at support@tune-scout.com.