Privacy Policy
Effective date: November 4, 2026
StepShed is a music practice tool. This policy explains what we collect, what we do with it, and what we do not do. We keep it short and in plain language on purpose.
Information we collect
- Account email. When you create an account, our authentication provider (Clerk) stores your email address so you can sign in. We use it to identify your account and to contact you about the service.
- Audio you upload. When you import a song, the audio file is uploaded to our servers and processed to create the isolated practice stems, beat grid, and section data used inside the app. These files and the results are stored under your account.
- Basic operational logs. Like most online services, our servers record basic technical logs (such as request timestamps and error information) so we can keep the service running and diagnose problems.
- Discord link. If you link Discord to the beta, we keep your Discord user id and which StepShed account it belongs to while the link is in use, at most 30 days for a link that is never completed, and delete it when you ask us to.
Early access signups
If you apply for alpha access or join the waitlist at stepshed.app/early, we collect what you enter on that form: your email address, first name, primary instrument, phone platform and model, and — for alpha applications — your answers about how you practice. We use it to choose and contact testers. We don't sell it or share it with anyone.
After you submit, we email you a link to confirm the address is yours. Nothing is added to our lists until you open it and press Confirm. Until then we keep your answers for at most 7 days and use them for nothing else. To stop the form being abused, we keep a scrambled record of the network you submitted from, for at most 2 days.
The form asks you to tick a box agreeing to email about StepShed: beta invites and updates. We keep the time you ticked it, the time you confirmed, and the wording you agreed to. Every update has a link to unsubscribe or change your email preferences, and we stop as soon as you use it. The emails are sent through Cloudflare, which handles your address only to deliver them.
Want it deleted? Email support@stepshed.app. We delete your answers and your place on our email lists, and keep only a scrambled record of your address so we never email it again.
The early-access form is protected by Cloudflare Turnstile, which checks that submissions come from people rather than bots. Turnstile's handling of the data it processes is described in Cloudflare's Turnstile Privacy Addendum.
What we do NOT do
- We do not sell or rent your personal data to anyone.
- We do not show ads or use your data for advertising.
- We don't use advertising trackers or cross-site analytics. This site uses Cloudflare Web Analytics — a cookieless visit counter that stores no cookies and builds no visitor profiles — and nothing else. The app itself contains no analytics or tracking.
Where your data is stored
Your account data and uploaded audio are stored with our infrastructure providers — Cloudflare R2 (audio and stem files) and Neon (account and song records) — on servers located in the United States. Access is limited to what is needed to operate the service.
Retention and deletion
We keep your account data and uploaded audio for as long as your account is active. You can ask us to delete your account and all associated audio and data at any time by emailing support@stepshed.app. We will delete your data promptly after we confirm the request.
Children
StepShed is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes to this policy
If we change this policy, we will update the effective date above. Because StepShed is in private alpha, material changes may happen as the product evolves.
Contact
Questions about this policy or your data? Email support@stepshed.app.