1. How We Collect and Use Your Information

1.1 Local music library data Stored locally

Our app revolves around a local music library. Imported directories, song info, playlists, play history and settings are stored locally on your device by default and are never uploaded to external servers.

1.2 Media file parsing Local only

We read tags (ID3/Vorbis etc.), lyrics (LRC/embedded), and cover artwork from your audio files to build and display your local library. All parsing happens on your device and is never sent externally.

1.3 Anonymous usage telemetry Anonymous · Optional Off by default

To improve the app, we generate a randomly assigned, non-personally-identifiable device ID (UUID v4) and use PostHog to collect the following anonymous events only after you enable Anonymous Usage Analytics:

We never collect: song titles, artist names, file paths, lyrics, IP addresses (stripped server-side before reaching PostHog).
You can disable this at any time via Settings → Privacy → Usage Analytics.

1.4 Crash and error reporting Anonymous

If this release is configured with Sentry, the app may automatically capture crashes and unhandled exceptions so we can fix them quickly. Sentry receives: the anonymous device ID (only when analytics is enabled), stack traces, error category, OS version, and app version. It never intentionally receives music library content, your name, or contact information.

1.5 Local diagnostic logs Stored locally

We store crash dump files and lifecycle diagnostic snapshots locally (up to 5 crash dumps are kept; lifecycle snapshots older than 24 hours are auto-deleted). These are used for on-device recovery only and are never transmitted externally.

1.6 Remote feature flags Anonymous

When a release explicitly configures the ConfigCat SDK, we use ConfigCat to manage feature flags (e.g. enabling experimental features). ConfigCat only receives the anonymous device ID, platform type (windows_desktop), and app name — no personally identifiable information. Without that configuration, the app uses local defaults.

1.7 User-initiated data export Local only

A shareable JSON file is generated only when you explicitly trigger the Export Data Snapshot feature. You choose the destination; we play no further role.

1.8 What we do NOT collect

We do not collect: device identifiers (IMEI/MAC etc.), location data, contacts, camera/microphone data, or advertising identifiers. This product contains no ad SDKs and performs no behavioural tracking or personalised advertising.

2. Third-Party SDK and Service Disclosures

None of the above services receive song names, artist names, file paths, lyrics, IP addresses, or any personally identifiable information. PostHog telemetry can be fully disabled via Settings → Privacy → Usage Analytics.

3. App Capability Declarations

This app declares the following capabilities in its Windows app package (MSIX). Each capability is used only for the stated purpose (least-privilege principle):

We do not request camera, microphone, contacts, location, or account access capabilities.

4. Cookies and Similar Technologies

This product is a Windows desktop application and does not use browser cookies. We use only OS-level local storage (SQLite database and file system) for your settings and library data. An anonymous device UUID is created only when you enable usage analytics or when a release is explicitly configured for remote feature flags, and is stored at %AppData%/MusicX/analytics/device_id.

5. Sharing, Transfer and Disclosure

We do not sell, rent, or publicly disclose your personal information to any third party. Anonymous data is sent to the listed SDKs only when usage analytics is enabled or the release is explicitly configured for remote feature flags or crash reporting.

User-configured third-party service connections

If you voluntarily configure the following services in Settings, data handling is governed by each provider's privacy policy:

• Subsonic / Jellyfin home media servers (requires your server address and credentials)
• DLNA / AirPlay wireless streaming (local network only)
• Last.fm / Spotify metadata fetching (requires your authorisation)
• WebDAV cloud drives (requires your server address and credentials)

All connections above are initiated explicitly by you. We establish no external connections without your deliberate action.

6. How We Protect Your Data

• All local data is stored in your device's app data directory, protected by Windows access controls.
• Cloud service credentials (e.g. Jellyfin / WebDAV passwords) are encrypted via Windows Credential Manager and never stored in plain text.
• No unauthorised external network connections are established.
• Diagnostic log files are automatically cleaned up on a schedule to prevent data accumulation.
• Traffic to PostHog passes through our own reverse proxy (seek.music.blrra.com) where IP addresses are stripped before forwarding.

7. Your Rights

7.1 Access and deletion

You can view and manage your library data, play history, and settings at any time within the app. To delete all local data, use Settings → About → Clear All Data, or simply uninstall the app.

7.2 Opt out of analytics

Navigate to Settings → Privacy → Usage Analytics to disable PostHog telemetry at any time. Once disabled, no usage events will be sent externally.

7.3 Data export

Export your data as a JSON snapshot at any time via the Export Data Snapshot feature for migration or backup purposes.

7.4 Stop using the app

You can stop using this product at any time by uninstalling it. All data stored by the app will be cleared according to OS behaviour upon uninstallation.

8. Children's Personal Information

This product is a desktop music player intended for general adult audiences. We do not design features for children and do not knowingly collect personal information from children. If you are a parent or guardian, please use your own judgement in deciding whether to permit use of this app.

9. How This Policy Is Updated

If this Privacy Policy changes materially (e.g. new data types collected, changed purposes), we will update this page, revise the date at the top, and notify you via an in-app prompt for significant changes.

10. How to Contact Us