Privacy Policy

Last updated 2026-07-08 · vault.audio

This Privacy Policy explains what data vault.audio collects, why, and how you can remove it.

Data we hold

• Account info: your email address and display name.
• Password: stored only as an argon2 hash. We never store, log, or have access to your plaintext password.
• Connected-service credentials: if you link a streaming account (Qobuz, Tidal, Spotify, Apple Music), those credentials or tokens are encrypted at rest and used only to act on the corresponding service on your behalf.
• Activity history: your library and playlist history within the Service, so you can see and manage your collection.
• Server logs: transient operational logs (which may include your IP address) kept only as long as needed for debugging, security, and abuse prevention, then rotated out.

How we use your data

Your data is used exclusively to operate the Service for you: authenticating your account, connecting to the streaming services you've linked, and running the library and organization features you request. We do not sell, rent, or share your personal data with third parties for advertising purposes.

No advertising or cross-site tracking

vault.audio does not run third-party advertising, does not embed advertising trackers, and does not share your activity with data brokers or ad networks. We do not use cross-site tracking technology to follow you across other websites.

Where your data lives

Our servers are located in Germany. Your data is processed and stored there for as long as your account remains active.

Your right to erasure

You can permanently delete your account at any time from Settings. Doing so removes your account record, your connected-service credentials, your activity history, and any files vault.audio has stored on your behalf. This action is immediate and cannot be undone, so make sure you've saved anything you want to keep first.

Data retention

We keep your data only for as long as your account exists, plus a short window for server logs used for security and debugging purposes. Deleting your account removes the data described above without unnecessary delay.

Security

Passwords are hashed with argon2 and never stored or transmitted in plaintext. Third-party service credentials are encrypted at rest. Access to the Service requires authentication, and we apply standard web security practices to protect your data in transit and at rest.

Contact

For questions about this policy or to exercise a data-protection right not covered by the Settings page, contact our data controller at privacy@vault.audio.