FASTERMASTER
Privacy Policy
Last updated: 2026.
TL;DR — Your audio never leaves your device. We don't have it. We can't lose it. We can't be subpoena'd for it.
1. What we DON'T collect
- Your audio files. Uploads, masters, downloads — all processed locally in your browser via the Web Audio API. The audio data is decoded, analysed, transformed, and exported to WAV without ever traversing our servers.
- Audio metadata (track name, length, genre, LUFS, etc.) — this is computed locally, displayed locally, and discarded when you close the tab.
- Your IP address as a stored value (Vercel logs requests for 24h for abuse-prevention; we don't query those logs).
- Cookies for tracking, advertising, or analytics third parties.
2. What we DO collect (only if you create a Pro account)
- Email address — used for login (magic link), receipts, and product announcements you can opt out of.
- Subscription status — your active plan and billing period. Stored via our payment processor (Polar.sh) and synced to our database (Supabase).
- Anonymous usage counters — number of masters per day. Stored against your account ID, never the audio itself.
3. Where data lives
- Supabase (EU region) — auth + user records. SOC2 Type 2 certified.
- Polar.sh — payment processing. PCI-DSS compliant.
- Vercel — static hosting and serverless functions for auth callbacks.
- Your browser (localStorage) — UI preferences (selected mastering style) and free-tier usage counter. You can clear this any time via your browser's site settings.
4. Anonymous Free use
You can use FasterMaster for free without creating an account. In that case, the only data we ever see is:
- Standard server access logs (IP, user agent, timestamp) — kept by Vercel for 24 hours, then auto-deleted.
- That's it.
5. Cookies
We don't use any first-party cookies for tracking. The only browser storage we use is localStorage, locally to your device, for:
fm_style— remembers your last-selected mastering style.fm_quota_*— tracks today's master count for free tier.
If you log in to Pro, an authentication cookie is set by Supabase (httpOnly, secure, SameSite=Lax) for session management.
6. Third-party services
- Google Fonts — loads the Audiowide and Share Tech Mono fonts. Google may log the request.
- Polar.sh — handles all payments. They're a Merchant of Record, so they're the entity processing your card and managing tax compliance globally.
- Supabase — auth + database. Subject to Supabase's privacy policy.
7. Your rights (GDPR / CCPA)
- Request a copy of your data (only the email + subscription record we hold).
- Request deletion of your account at any time — email hello@fastermaster.io.
- Opt out of product emails via the unsubscribe link in any email.
8. Changes
If we change this policy materially we'll email Pro subscribers and update the date at the top. Anonymous Free users won't be affected because we have no way to reach them — we don't have your email.