PrivacyPolicy

Who we are

Producer Freedom is a small set of free, browser-based tools for music producers, built and run by Rocket, an independent producer based in Denmark. If you ever want to reach a human, email [email protected].

Your files never leave your browser

This is the part we care about most. Every tool on Producer Freedom (Black Bars, Beat Videos and Whole Batch) does all of its work locally, on your own device. When you drop in a folder of pictures or a beat, your browser processes it right there on your computer.

We do not upload, receive, store, see, or process your media on any server. Nothing is sent anywhere. When you close the tab, it's gone from our side because it was never on our side to begin with.

Your email

If you want to download what a tool made for you, we ask for your email address, as part of a free account. You give it to us on purpose. The account adds a little more: see the next section.

We use your email to send you the tools and the occasional note when a new free tool is live. That's it. Here's how it's handled:

• Your email is stored and managed by Kit (formerly ConvertKit), the email service I use. Their handling of your data is covered by their own privacy policy.
• We use it for those emails only. Never spam, never noise.
• You can unsubscribe at any time from a link at the bottom of every email, and you're out for good.
• We never sell, rent, or trade your email to anyone.

If you sign in: your account

You can try every tool without an account. To download what a tool made, you sign in with a free account. There are two ways, and neither uses a password:

• Type your email. We email you a 6-digit code; type it back to prove the address is yours. That puts you on the Producer Freedom email list (through Kit, as described above) and unlocks the downloads. There is no password. The code works once, for 10 minutes, and we keep only a scrambled copy of it. Any presets you save stay in this browser only.
• Continue with Google. Google shares your name, email address and profile picture with us, and Google learns that you signed in to Producer Freedom. Presets you save then stay on your account, so they follow you to other devices. On your first Google sign-in we offer to copy this browser's presets over.

What an account keeps, and why

• To sign you in: your email address (lower-cased) and whether it is verified; with Google, your name, profile-picture link and Google's account ID; which tool you signed up from; when you signed up and last signed in.
• To keep you signed in: a session record: a scrambled (hashed) copy of your session token, when it was made, when it expires and was last used, and the first 200 characters of your browser's user-agent text. Sessions expire 30 days after you last use them.
• To save your settings: the presets you save for a tool, only for accounts signed in with Google.
• To point you at the right tool, and the right emails: after you sign in we ask four short questions, and from your second download on we ask before the download starts (you can skip them at sign-up). We keep what you answer: which beat stores you use, how you make money and which one is your number one, what eats most of your time (the boxes you tick and anything you write), which tools you'd like to see from us, and where you heard about us. With any sign-in they are stored on your account; a copy also stays in this browser so the page can show them. Only a sign-in that proved the address (Google, or an email code) can read them back from the account; older sign-ins made by just typing an address cannot. They are deleted with your account.
• Email tags from your answers: the boxes you tick (never what you write) become tags on your Kit subscriber record, all starting with "pf-" (for example "pf-store-beatstars", "pf-top-youtube", "pf-pain-thumbnails", "pf-heard-tiktok"). They decide which emails make sense for you. Deleting your account does not remove them from Kit; unsubscribing, or asking us, does.
• To see what is used: which tool, which action and when, with an optional short note. This is how I decide what to fix and build next. It never contains your files or what is in them. Events from visitors who aren't signed in carry no account.
• To run each email signup once: a note of which tools' signups have already happened for your account.
• To check your email: the code we send is stored only as a scrambled copy, for 10 minutes or until you use it. The email is sent through Resend, our email-sending service.
• To stop abuse: counters keyed to a scrambled version of your IP address and email, kept for about 24 hours. We never store your raw IP address. For Google sign-in we also keep a scrambled copy of Google's sign-in token until it expires, about an hour, so it can't be used twice.

Your phone number (optional)

• Optional, always. You can leave the phone box empty. It never decides whether you get your download or an account.
• Texts only with a separate yes. The box "Text me when Producer Freedom drops a new tool" is unticked until you tick it. A number without that tick is kept on your account and is never texted and never sent to anyone. With the tick, we keep the number, the time you ticked it, the page you were on and which version of that sentence you saw, so we can prove what you agreed to.
• Stopping is one step. Reply STOP to any text, or untick the box (or remove the number) in your account. Message and data rates from your carrier may apply; how often we text varies.
• Who sees it: only while the box is ticked, the number goes to Kit (our email provider) as a field on your subscriber record, with the tag "pf-sms-consent". Untick, remove the number or delete your account and we clear it from Kit too.
• Why we may do this (EU): your consent. Withdrawing it does not affect anything sent before.
• Seeing it: signed in with Google you see the full number in your account; signed in with an older typed-address session you see it part-hidden.

Who else sees it

• Kit gets your email address and the same signup details as the tool email gate described above, plus the "pf-" tags from your onboarding answers (see above), plus your phone number only if you ticked the text box (see above).
• Google is involved only when you choose Continue with Google.
• Cloudflare hosts the site and the database that holds your account. It acts as a processor for us.

Why we may do this (EU)

The email list rests on your consent. The account itself rests on providing the sign-in you asked for, and on our legitimate interest in keeping the service secure and working.

How long we keep it

Account data stays until you delete it. Sessions expire 30 days after last use. Abuse counters last about 24 hours. Google token copies last about an hour.

Deleting your account

• Signed in with Google: use the "Delete my account" button. It erases your account, sessions, presets and usage history in one step, plus the presets stored in this browser.
• Email only: clear this site's data in your browser to remove local presets. For anything held on our side (your address, usage), sign in with Google and delete the account, or email [email protected] and we'll do it.
• The email list is separate. Deleting your account does not take you off it. Use the unsubscribe link in any email, or email us, and you're removed from Kit too.

YouTube

Some Producer Freedom tools can upload your own videos to your own YouTube channel. They use YouTube API Services. By using these tools you agree to be bound by the YouTube Terms of Service, and your use of Google data is covered by the Google Privacy Policy.

What we access. Only after you press "Connect YouTube", and only to upload the video and thumbnail you chose, and set its title, description, tags and schedule. We do not read your channel, subscribers, comments, analytics or other videos.

What we store. Nothing. Your sign-in token stays in your browser's memory for about an hour and is gone when you close the tab. Your video files go from your computer straight to YouTube; they never pass through our servers.

Stop access any time in your Google security settings, and email [email protected] if you want any Producer Freedom data deleted; we act within 7 days.

Hosting and basic analytics

The site is hosted on Cloudflare. Like any website, that means Cloudflare handles standard server logs and privacy-friendly, cookieless analytics (rough visit counts, which pages load) so we can tell whether the tools are working. This isn't tied to your identity and isn't used to track you across the web.

Cookies, advertising pixels and how to opt out

The tools themselves don't need cookies to work. The site uses two kinds:

• Sign-in cookies, only if you sign in. pf_session keeps you signed in (it holds a random token, lasts 30 days and is renewed while you use the site; your browser's scripts can't read it). pf_csrf protects your account from forged requests. Both are needed for sign-in to work and are never used for advertising. Signing out removes the session.
• On your device, not cookies: this browser remembers your cookie choice, that you signed in (so the download stays unlocked) and, if you didn't sign in with Google, the tool presets you saved. Clearing your browser's site data removes them.

Apart from those, the only cookies this site can set are advertising-measurement cookies, and they are strictly opt-in:

• When we run ad campaigns, we advertise through Google Ads and Meta (Facebook/Instagram). Their measurement tags — Google Analytics and the Meta Pixel — may set cookies and collect device and usage data so we can tell whether our ads work. With the same yes, our server may also tell Meta when a visit led to a new account or a download (Meta's Conversions API). That message carries what Meta's own tag would see anyway: your IP address, your browser type and Meta's cookie IDs. If you're signed in, it adds your email and your account number, but only as one-way codes (SHA-256 hashes), so Meta can match the visit to an ad. It never includes your phone number or your files.
• These tags load only after you click "Accept" in our cookie banner. If you decline, they never load — the tools work exactly the same either way.
• You can change your mind anytime via the "Cookie Settings" link in the footer, or by clearing cookies in your browser. You can also opt out directly via Google's privacy policy, the Google Analytics opt-out, and Meta's privacy policy / your Facebook ad preferences.

How your data is stored

Your email lives in Kit's systems (they process it; we control it). We keep it for as long as you're subscribed. Unsubscribe and it leaves our active list; ask us to delete it entirely and we will. Your account lives in a database hosted by Cloudflare, as described in the account section, until you delete it. Your media files are never stored anywhere by us: they never left your device in the first place.

No selling of data

There's no password to create and no card to enter. The tools are free today; if that ever changes for a tool, it will say so clearly before you use it. We never sell, rent, or trade your personal data to anyone.

Your rights (GDPR)

Because we're built from Denmark for a largely European audience, the GDPR applies in full. You always have the right to:

• Ask what data we hold on you: your email, plus your account records if you signed in.
• Have it corrected or deleted ("right to be forgotten").
• Object to processing, or withdraw any consent you've given (including cookie consent).
• Receive a copy of your data in a portable format.
• Complain to a supervisory authority — in Denmark, that's Datatilsynet (datatilsynet.dk).

For any of these, email [email protected] and we'll sort it out — usually within days, always within the 30 the law allows.

Changes to this policy

If we ever change how any of this works, we'll update this page and the date at the top. Nothing sneaky.

From me to you,
Rocket