Privacy Notice

Last updated: October 12, 2026

This notice covers the MercuryPitch app at mercurypitch.com, the iOS and Android apps, and this site, about.mercurypitch.com. It says what we collect and why, which services handle it, how long we keep it and what you can ask us to do. We don’t sell your personal data.

1. Who we are

MercuryPitch is run by Irchiinnuss, a sole trader (obrt) registered in Croatia. We decide how your data is used, which makes us the controller under the EU’s General Data Protection Regulation (GDPR).

For anything about your data, use the contact form and pick the Privacy topic, or write to us by email or post at the details below.

2. What stays on your device

Pitch detection, scoring and voice analysis run in your browser or in the app. When you practice, your microphone audio isn’t sent to us, and your recorded takes stay on your device. The songs and stems in your library stay there too, unless you use one of the features in the next section.

3. When audio leaves your device

Only when you use one of these:

• Jam. Jam sends your live voice or instrument, and your camera if you turn it on, to the other people in the room. To connect directly, the devices in a room exchange their network (IP) addresses. If they can’t connect directly, the connection passes through a relay run by Cloudflare. We don’t record Jam.
• Cloud separation. When you separate a song on our servers, with credits or with the songs in the iOS and Android apps, the song you choose is uploaded to RunPod, which makes the stems you asked for. Large songs pass through our storage at Cloudflare (R2) on the way, and RunPod saves the stems there for your browser to download. We don’t use your audio to train models, and we don’t sell it or share it with anyone for their own use. Separation on your device uploads nothing.
• Sync and backup. Sync sends songs straight from one of your devices to another, never through a relay. Google Drive backup saves them in your own Drive, straight from your browser. For that, we keep an encrypted Google token that only reaches the files the app created in your Drive.

Legal basis: our contract with you, the Terms (GDPR Art. 6(1)(b)).

4. Cookies and browser storage

Google Analytics and Google Ads

On mercurypitch.com and about.mercurypitch.com we use Google Analytics and Google Ads to see how the sites are used and whether our ads work. Our Analytics account is linked to Google Ads, so the data also helps Google measure and personalize our ads. Where you are decides whether we ask you first, as the next paragraphs explain.

In the EEA, the UK and Switzerland, Google sets cookies only after you press Accept. Before you choose, Google’s tags still send Google basic signals without cookies, such as the page address, browser details and your IP address. Google uses them to estimate visits and conversions. Everywhere else, Google’s cookies are on unless you decline.

Google’s cookies have names starting with _ga (Analytics) and _gcl (Ads). Google sets them for mercurypitch.com and its subdomains, so both sites share them. Google sets how long they last; the longest, _ga, lasts up to two years. Google keeps Analytics event data for 2 months and user data for 14 months.

For Analytics, Google is our processor: it handles the data for us under its data processing terms. For Google Ads, Google decides how it uses the data, as a separate controller under its own terms. Google explains what it does with this data in How Google uses information from sites or apps that use its services.

To change your choice, use Cookie settings at the bottom of any page on this site, or open Settings › About in the app. Each site remembers its own choice. Declining on this site also deletes Google’s cookies, including those the app shares. The app may set them again unless you decline there too. If you decline after accepting, Google stops using cookies on that site from then on.

Legal basis: in the EEA, the UK and Switzerland, your consent (Art. 6(1)(a)), which you can withdraw at any time in Cookie settings. Elsewhere, and for the signals sent before you choose, our legitimate interest in counting visits and measuring our ads (Art. 6(1)(f)). You can object at any time with Decline in Cookie settings.

Our own visit counter

To see how far visitors get in the Voice Mirror, Glass, Karaoke Night and the app, your browser keeps a random ID on mercurypitch.com. If you arrived from an ad or a tagged link, it also keeps the ad click ID, the campaign tags and the page you came from. Each step sends these to our server. They aren’t linked to your account and aren’t sent to Google. The Voice Mirror also sends the numbers it measured (your lowest and highest notes, range, accuracy and steadiness), never the audio. We delete the ad click ID after 90 days and the rest after 13 months.

Legal basis: our legitimate interest in knowing which pages and campaigns bring people who practice (Art. 6(1)(f)). You can object at any time by writing to us. Clearing the site’s data in your browser also starts you over with a new ID.

What your browser keeps

Besides Google’s cookies, your browser keeps these for us:

5. Your account and sign-in

You can use most of MercuryPitch without an account. When you first save something, we create an anonymous account tied to a random ID on your device. If you sign up, we keep your email address and your sign-in methods: a password (stored hashed, so nobody can read it), Google, Apple, passkeys or two-step codes. For Google and Apple we keep the account ID they send us, and for Apple also a token it issues. For a passkey we keep its public key, a label for the device you made it on, taken from your browser, and when you added it and last used it. We also keep the dates you signed up, last signed in and were last active.

We keep a list of the devices you’re signed in on, with the browser, IP address and dates, for up to 31 days, so you can see them and sign them out.

Legal basis: our contract with you (Art. 6(1)(b)). We keep your account until you delete it.

6. Voiceprints, history and community

While your device holds an account, signed in or anonymous, your voiceprints, practice history, settings, survey answers and library list (song titles, lengths and sizes, never the audio) are stored with it, so they follow you to another device. A voiceprint is a summary of your voice, such as your range, voice type and the singer it matches most closely. It isn’t a recording.

Profiles, leaderboards, leagues, follows, shared melodies and shared sessions are public only when you use them. If content is reported or an account is suspended, we keep a record of it.

Voice analysis gives you feedback on your singing. It doesn’t make decisions about you that have legal or similarly significant effects.

Legal basis: our contract with you. For moderation, our legitimate interest in keeping the community safe, and our duties under the EU Digital Services Act. We keep all of this until you delete your account.

7. Payments and credits

Stripe processes card payments for credits and donations, and we never see your full card number. We keep your purchases, donations, credit balance, supporter status, launch-offer rewards and the promo codes you used. To stop one email address claiming the same promo twice, we keep a one-way code made from the address, even after you delete your account, until 30 days after that promo ends. At checkout we keep a record that you asked for your credits straight away. If you cancel a purchase, we keep your cancellation: the name and email you give, the purchase, the refund, and when we received it. The free song each month in the iOS and Android apps keeps a one-way code made from your email address until that month ends, so one address gets one free song a month. In the iOS and Android apps, purchases go through Apple or Google, and RevenueCat tells us about subscriptions.

Legal basis: our contract with you; our duties under accounting and tax law, for the payment records Stripe keeps (Art. 6(1)(c)); and our legitimate interest in stopping repeat promo claims.

8. Emails

Resend sends our emails: sign-in codes, confirmations, receipts and, if you ask for it, the newsletter. It keeps a record of each message and whether it was delivered. Messages you send through the contact form reach our mailbox at Proton Mail.

The newsletter is off unless you ask for it, with the form on this site or the product-updates checkbox in the app under Settings › Account. Every newsletter has a one-click unsubscribe link that works without signing in. We keep a record of when you opted in and out, because it shows the choice was yours.

Legal basis: our contract with you for account mail and receipts; your consent for the newsletter; our legitimate interest in answering your messages; and our legal duty to keep complaints for at least a year (Croatian Consumer Protection Act, Art. 10).

9. Security and logs

To stop abuse, our servers note IP addresses for short periods. We delete rate-limit records after two days. Cloudflare keeps our server logs for 7 days; they record requests, and can include your IP address and, in Jam, your display name. A Cloudflare check (Turnstile) runs on sign-up, sign-in, password reset and this site’s contact and newsletter forms to keep bots out.

Legal basis: our legitimate interest in keeping MercuryPitch secure and working (Art. 6(1)(f)).

10. Services we use

Some features load files from other services, which see your IP address: piano samples from jsDelivr, a note-detection model from GitHub, speech models from Hugging Face (voice control and lyric timing), and lyrics from LRCLIB when you search (we send the song title and artist). Badge images from PeerPush and Product Hunt in the app load from those sites.

Apple, Cloudflare, Google, RevenueCat, Resend and RunPod are US companies, and Stripe belongs to a US group, so your data may be processed in the US. Cloudflare, Google, Resend and Stripe’s US company are certified under the EU-US Data Privacy Framework, which the EU recognizes as protecting data adequately. RevenueCat’s data processing terms, which are part of our contract with it, include the EU’s standard contractual clauses (revenuecat.com/dpa). Apple handles App Store purchases and Sign in with Apple itself, and its privacy policy says its transfers of data from the EEA, the UK and Switzerland use standard contractual clauses.

Legal basis: as in the section each service belongs to. For the files your browser loads, our legitimate interest in delivering the feature you opened (Art. 6(1)(f)).

11. How long we keep things

12. Your rights

You can ask for a copy of your data, ask us to correct it, delete it or limit how we use it, and object to uses based on our legitimate interests. You can also ask for the data you gave us in a format you can take elsewhere. Where we rely on your consent, you can withdraw it at any time; that doesn’t change what we did before.

You can delete your whole account in Settings or at mercurypitch.com/delete-account. For anything else, use the contact form or the details in section 1. We answer within a month.

If you think we got something wrong, you can complain to AZOP, the Croatian data protection agency (azop.hr), or to the data protection authority where you live or work.

You don’t have to give us any personal data to practice. You need an email address only for an account you sign in to, and card details, given to Stripe, only to buy credits or donate.

13. Children

You must be at least 13, or older if your country sets a higher age for digital consent, to use MercuryPitch. If you’re under 18, use it only with a parent’s or guardian’s permission. If you think a child has given us personal data without that permission, contact us and we’ll delete it.

14. Changes

When we change this notice, we update the date at the top and note the change here.

• October 12, 2026. Rewritten. It now names every service we use, the legal basis for each use, how long we keep things and your rights, and it corrects what we said about audio leaving your device.