Links and listeners
- Shared pages are kept out of search engines, and only people with the link can open them.
- Links end in a random id that can't be guessed, and anyone trying many links from one connection is slowed down.
- A link's password is kept only as a hash, and listeners who type it get a pass for that browser tab, good for up to 12 hours.
- As the song's owner, you can remove any note left on it, spam included. Listeners can report a link to abuse@finalmix.io.
- Your upload link only lets people send you audio files, which arrive in Incoming. It never shows what you have, and nothing sent replaces a file.
Your account
- Your browser stretches your password before it's sent, and we store only a hash of the result. You can also sign in with Google or Apple.
- Settings can log you out on every other device at once.
- Payments go through Paddle; your full card number never reaches us.
- Everything travels over HTTPS, with HSTS so browsers never fall back to plain HTTP.
Mistakes and accidents
- A song or folder you delete waits in Deleted in your studio for 30 days, with its notes, versions and link, so you can restore it. Deleted holds up to your plan's storage; past that, the oldest go first.
- If you delete it for good sooner, its files stay hidden in storage for up to 7 more days in case of a mistake on our side, and are then erased. After its 30 days in Deleted, it is erased.
- Deleting your account erases your files at once.
- The database can be restored to any minute of the last 7 days.
- Uploads of new songs over 64 MB that stop halfway pick up where they left off, and the site is checked every 5 minutes, with an alert to us when something breaks.
Privacy
- No ads and no tracking cookies. When something breaks on a page, the browser tells us what broke, never who you are or what your files are called.
- We don't listen to or share your mixes. The full details are in the privacy policy.
Found a problem?
Please write to security@finalmix.io.