Privacy policy

Last updated October 12, 2026

Pass a Tune is a small multitrack recorder in the browser: you record an idea as a tune, send its link, and friends add layers. This page explains what data Pass a Tune handles and why. Questions: contact@nightlybuildaudio.com.

The short version

• Recordings are stored in the tune creator's own Google Drive, not on Pass a Tune's servers.
• Pass a Tune can only see the files it created in your Drive.
• No ads, no analytics, no tracking. We never sell data.

If you sign in with Google (to create tunes)

When you sign in, Google shares with Pass a Tune your Google account ID, name and email address, plus permission to create and manage the files Pass a Tune itself creates in your Google Drive (the drive.file permission). Pass a Tune can't see or open any other files in your Drive.

We use this to:

• recognise you when you come back and list your tunes;
• show your name as the author of your takes to people who have a tune's link (your email address is never shown to them);
• create an app folder in your Drive and save recordings there: yours, and the ones collaborators add to your tunes;
• make each recording playable by anyone with its file link, so collaborators' browsers can play it. Those file links are only given to people who have the tune's link, and folders are never shared.

Google's access tokens are encrypted before they are stored and are only used by our server to work with your tunes in Google Drive. They are never sent to anyone else.

If you open a tune link (to collaborate)

You don't need an account. If you type a name, it's saved with your takes and shown to others in that tune. Your recordings go straight from your browser into the tune creator's Google Drive and become part of their tune; the creator can delete them.

What we store

On Amazon Web Services, in the United States:

• the account details above, with the Google tokens encrypted;
• Tune details: names, tempo, tracks, where each clip sits on the timeline, references to the audio files in Google Drive, waveform overviews, and a scrambled (hashed) form of each tune link's secret;
• sign-in sessions for creators, and short-lived upload tickets, which are deleted automatically.
• your saved appearance preference and, if you support development, supporter status, payment and refund amounts/currency, timestamps, and Stripe payment identifiers linked to your internal account ID.

The audio itself stays in Google Drive.

Optional support payments

Stripe hosts checkout and processes payments. Card details go directly to Stripe; Pass a Tune does not receive or store them. We send Stripe an internal account ID, the selected USD amount and a checkout reference so a confirmed payment can unlock your account’s supporter themes. We do not send your recordings or Google tokens to Stripe. Stripe collects the payment and billing details you provide under Stripe’s privacy policy.

Payment records help us confirm support, handle refunds and meet accounting obligations. Relevant transaction records may need to be retained after an account deletion request. Supporter status and themes are private account preferences; we do not publish contribution amounts.

Cookies and browser storage

• Creators get a sign-in cookie that lasts 30 days, plus a short-lived one during Google sign-in. There are no advertising or analytics cookies.
• Your browser keeps, on your device only: the links of tunes you've created or opened (so you can come back and share them), the name you type for your takes, and settings such as metronome and zoom.

IP addresses and logs

Your IP address is used briefly to limit abuse (rate limits) and isn't stored by Pass a Tune. Our server logs record errors, never the contents of requests or tune links.

Who else is involved

• Google: sign-in and Drive storage, under Google's privacy policy.
• Amazon Web Services: hosting.
• Stripe: optional support payments.

We don't share your data with anyone else, and we don't sell it.

Google user data

Pass a Tune's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is only used to provide the Pass a Tune features described above. It isn't used for advertising, isn't sold, and isn't read by people, except when you ask us for help, for security reasons, or when the law requires it.

Your choices

• Delete recordings: a tune's creator can delete clips in the tune, or delete the files from their Google Drive.
• Stop Pass a Tune's access to your Drive at any time at myaccount.google.com/permissions. Existing tunes stay playable, but nobody can add takes until you sign in again.
• Delete your account and tunes: email contact@nightlybuildaudio.com and we'll delete your data from our servers. The files in your Drive are yours: delete the app’s folder whenever you like (older folders may still have the previous app name).

Children

Pass a Tune isn't intended for children under 13.

Changes

If this policy changes, we'll update this page and the date at the top.