Privacy Policy — Fix The Mix

Last updated: October 2026
Controller: Artek Futura · hello@artekfutura.com

1. Data controller

The data controller is Artek Futura (FUTURAWAVE SRL), owner of Fix The Mix (fixthemix.io). Contact us at hello@artekfutura.com.

2. What we collect and why

Account data — Email and name to manage access and sync progress. Legal basis: contract (art. 6.1.b GDPR).

Progress & usage — Levels, scores and streaks to personalize your experience. Legal basis: contract (art. 6.1.b GDPR).

Payment data — Processed by Stripe. We never store card data. Legal basis: contract (art. 6.1.b GDPR).

Analytics — PostHog (hosted in the European Union), Google Analytics 4 and Contentsquare to understand how the service is used (pseudonymized data). Legal basis: consent (art. 6.1.a GDPR). If you choose «Essential only» in the cookie notice, analytics stays disabled.

Anonymous Mix Analyzer measurements — Your audio never leaves your browser: the analysis runs on your device. When you analyze a song we store only its technical measurements (LUFS loudness, peaks, dynamic range, stereo correlation and the level of seven frequency bands), whether the tool took it for a mix or a master, which reference genre it suggested, which one you picked and, if you answer, whether we got it right. We do not store the audio, the file name, your account or any device identifier. To prevent abuse we compute a code from your IP address and a key that changes every day; the IP is not stored and the code cannot recognise you from one day to the next. We use this to check and improve the analyzer's accuracy. Legal basis: legitimate interest in improving the service (art. 6.1.f GDPR).

Songs you upload to split into stems — In "Stem Separation" and in Mix Space's "Upload your song", your song does leave your device, because the separation runs on a server. It is stored in private Supabase storage that only your account can access, together with its title (the file name) and the resulting stems. To split it, it is sent to Replicate (US), which processes it on our behalf. The song and its stems are deleted automatically after 30 days; we keep only the record that you made a split (without the audio or the title), to apply your plan's limit. We don't use them for anything else. Legal basis: contract (art. 6.1.b GDPR).

Splitting stems without an account — If you split without an account, your browser keeps a guest pass: a random code that only opens what you split from that browser. We store only an irreversible fingerprint (hash) of that code next to the project, with no data about you. Thirty seconds of your song are split, and they're handled like any other song: private storage, processed by Replicate and deleted after 30 days. To stop abuse we use Cloudflare Turnstile, an invisible bot check that only loads when you upload a song without an account. Cloudflare processes technical data from your browser and connection for this under its Turnstile Privacy Addendum. Legal basis: legitimate interest in protecting the service (art. 6.1.f GDPR).

Advertising — Meta Pixel and the ChatGPT Ads (OpenAI) measurement pixel to measure ad campaigns, and Google AdSense on the web. Legal basis: consent (art. 6.1.a GDPR). In the European Union, the European Economic Area, the United Kingdom and Switzerland the advertising pixels only run if you choose «Accept all»; in other countries they run by default and you can turn them off by choosing «Essential only».

Communications — Klaviyo to manage newsletter sign-up and delivery when you register. Legal basis: consent (art. 6.1.a GDPR); you can unsubscribe from any email.

3. Who we share data with

We do not sell your data. Providers: Stripe (payments), Supabase (database and storage), Replicate (stem separation), PostHog (product analytics, EU servers), Klaviyo (email), Google Analytics (web analytics), Contentsquare (web UX analytics), Meta Platforms (web advertising), OpenAI (ChatGPT ad measurement, web), Google AdSense (web advertising) and Google AdMob (advertising in the mobile app). All act as processors under data protection agreements. Some of them are located outside the European Economic Area; in those cases transfers rely on the European Commission's Standard Contractual Clauses or on adequacy decisions.

4. How long we keep it

Account & progress: while your account is active (deleted within 30 days after closure). Analytics: per provider policy (GA4: 14 months; Contentsquare: 13 months). Payment data: per accounting legal requirements. Anonymous Mix Analyzer measurements: up to 24 months. Because they are not linked to your account or your device, we cannot locate yours to hand them over or delete them.

5. Your rights

You can access, rectify, erase, port your data, object to processing and withdraw consent at any time. Email hello@artekfutura.com — we respond within 30 days. You may file a complaint with the Spanish DPA (AEPD) if you believe we breach the GDPR.

6. Cookies

Essential — Session and auth. No consent required.

Analytics — PostHog, Google Analytics 4 and Contentsquare. Consent required.

Advertising — Meta Pixel, ChatGPT Ads (OpenAI) pixel and Google AdSense. Consent required in the EU/EEA, the United Kingdom and Switzerland; elsewhere you can refuse them with «Essential only».

Google AdSense and its partners use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising in Google Ads Settings, and opt out of third-party vendors' use of cookies at aboutads.info.

Manage your preferences from the cookie banner or the "Manage cookies" link in the footer.

6 bis. The mobile app

The iOS and Android app does not include Google Analytics, the Meta Pixel, Contentsquare or Google AdSense: those are web-only and are stripped from the application bundle. Inside the app only Supabase (account and progress), PostHog (product analytics), Klaviyo (newsletter sign-up) and Google AdMob (advertising) operate.

Personalised advertising and consent. If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows a Google consent form (User Messaging Platform) before loading any ad. Your device advertising identifier (IDFA on iOS, Advertising ID on Android) is only used to personalise ads if you accept. If you decline you will still see ads, but non-personalised ones: no profiling and no tracking across apps or websites.

The app does not access the microphone: all audio is playback, never recording.

7. Security

HTTPS for all communications. Restricted access to personal data. Providers with SOC 2 / ISO 27001 certifications.

9. Google Sign-In and Google User Data

Fix The Mix uses Google Sign-In (OAuth 2.0) to allow users to create and access their account.

Data accessed: When you sign in with Google, we receive your Google account email address, display name, and Google account ID (subject identifier). We do not access Google Drive, Gmail, contacts, or any other Google service.

Data usage: This data is used solely to create and authenticate your Fix The Mix account, identify you across sessions, and sync your progress. It is not used for advertising targeting or profiling.

Data sharing: Your Google account data is not sold or shared with third parties, except with Supabase (our database provider) which stores it as part of your account record under a data processing agreement.

Data storage and protection: Google user data is stored in Supabase servers within the EU, protected by HTTPS encryption in transit and access controls at rest. Supabase is SOC 2 certified.

Data retention and deletion: Google account data is retained while your account is active. You can request deletion of your account and all associated Google user data at any time by emailing hello@artekfutura.com. We will delete your data within 30 days of the request. Alternatively, revoking Fix The Mix's access from your Google Account permissions page will prevent future sign-ins, but you must also contact us to delete stored data.

Fix The Mix's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

10. Contact

Artek Futura (FUTURAWAVE SRL) · hello@artekfutura.com · fixthemix.io