Draft: not yet reviewed by a lawyer. It is not in force.
Privacy
rbx · [LEGAL_OPERATOR not set] · last changed [LEGAL_UPDATED not set]
rbx works on your own computer. Your Rekordbox library, your music and your edits stay there. This page is about what rbx's server keeps, why, and for how long. The controller is [LEGAL_OPERATOR not set], [LEGAL_ADDRESS not set] ([LEGAL_EMAIL not set]).
What the server keeps
| What | Why | How long |
|---|---|---|
| Your email address | Your account; sending the codes you sign in with | Until you delete the account |
| The sign-in codes (only a hash of each), when they were asked for, and the network address they were asked from | Signing in; keeping others from guessing codes or flooding an address | Until you delete the account |
| Your computers: the name each gives itself, a hash of its own ID, a public key it made, when it was last used | The 2 computers per account; the leases that let rbx work offline | Until you sign the computer out or delete the account |
| Your subscription's state, as Paddle tells us (status, trial end, renewal), and Paddle's customer number | Whether rbx may edit | Until you delete the account |
| A hash of the ID of each computer that had a trial | One trial per computer (our legitimate interest) | Kept when the account is deleted, without the account |
| Crash reports you choose to send: rbx's version, Windows' version, the end of rbx's log, and what rbx was doing when it stopped (a minidump: it may include names of your files and folders); the network address it came from | Finding and fixing what made rbx stop | 90 days |
| Shared playlists: their names, members and roles, and what each song in them is (title, artists, length, BPM, key, a hash of the file, a print of its loudness); which songs each member's computer can give | Shared playlists | Until the playlist is deleted, or you leave it (what you added stays for the others) |
The members of a shared playlist see each other's email addresses. Songs that pass between members' computers are encrypted by those two computers; the server passes them on in memory and never stores them. Our server's logs (requests, errors) are kept for 30 days; its backups for 30 days.
Who else handles it
- Paddle (paddle.com) sells the subscription and handles your card and invoices; we never see your card. Paddle's privacy notice.
- Oracle Cloud Infrastructure runs our server and keeps its backups.
- Our email provider sends the sign-in codes.
Your rights
In rbx, Preferences → Account: Export My Data gives you all the server keeps about you, as a file; Delete Account ends your subscription at Paddle and deletes the account and all of the above (but the trial note). You may also ask us to correct or delete data, object to its use, or ask what we keep, at [LEGAL_EMAIL not set], and complain to your data protection authority.