---
title: "Privacy policy | Mixroadie"
description: "What this website, the waiting list and the cheat sheet store, and what the Mixroadie app sends and never sends. Hosted in Germany, no cookies unless you allow ad measurement."
url: "https://mixroadie.com/privacy/"
---

# Privacy policy

Last updated 22 October 2026

This policy covers **this website** and, at the end, the **Mixroadie application**. The short version for the application: it never sends audio, and it contacts us only to start a trial, to activate or manage a licence, to check once a day for a newer version, and — if you switch them on — to send anonymous usage statistics.

## Controller

The controller responsible for data processing on this website is:

Vincent Will\
Landsberger Allee 171d\
10369 Berlin, Germany\
<support@mixroadie.com>

## What this site does not do

- No cookies are set, by us or by anyone else — unless you press _Buy_ on the pricing page, which opens Paddle's checkout (see [Buying a licence](https://mixroadie.com/privacy/#purchase)), or you came from one of our ads and allow ad measurement (see [Ad measurement](https://mixroadie.com/privacy/#ads)).
- No content is loaded from third-party servers. Fonts, images and scripts all come from this domain, so your browser never contacts a font or CDN provider. The two exceptions are the checkout, only once you press _Buy_, and Google's ad measurement, only once you allow it.
- No ads on this site, no ad profiles, no remarketing, no user profiles.
- No contact form. The only personal data you can send us is an email to us, or your address on the waiting list or for the cheat sheet — and that only if you fill it in.

## Hosting and server log files

This website is hosted on a virtual server operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The server is located in Germany. IONOS acts as our processor under Art. 28 GDPR on the basis of a data processing agreement.

Each time a page is requested, the web server writes a log entry containing:

- the shortened IP address of the requesting device
- the date and time of the request
- the page or file requested and the amount of data transferred
- the HTTP status code
- the referring URL and the browser's user agent string

These logs are needed to deliver the site, keep it stable and defend against attacks. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in operating a secure website. IP addresses are shortened before they are written, so log entries cannot be linked back to you. Logs are deleted after 7 days.

## Analytics: self-hosted Umami

We measure how the site is used with [Umami](https://umami.is/), an open-source analytics tool that we run ourselves at **analytics.vincentwill.com** on a server in Germany. No data reaches any analytics company; there is no third party involved.

Umami is configured so that it:

- sets no cookies and writes nothing to your browser's storage
- does not store your IP address — it is used in memory to derive a country, then discarded
- does not create a persistent identifier that would recognise you across days or devices
- records only the page visited, the referrer, the country, the device type, the browser and the screen size, plus whether a waiting-list, cheat-sheet or buy button was clicked and whether a sign-up or purchase went through

The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in understanding which pages are read and whether the sign-up works, using the least invasive method available. Because no information is stored on or read from your device, § 25 (1) TDDDG does not apply and no consent banner is required. Aggregated statistics are kept for 12 months.

You can opt out by enabling Do Not Track or a content blocker in your browser; the site works identically either way.

## Ad measurement: Google Ads

We advertise Mixroadie with Google Ads, for example on YouTube. If you reach this site by clicking one of those ads, the address you land on carries a click id that Google adds, and this site asks whether you allow ad measurement. Visitors who did not come from an ad are not asked, and nothing below happens for them.

Until you press _Accept_, nothing is loaded from Google and no cookie is set. If you press _Accept_, your browser loads Google's tag (gtag.js) from Google's servers. It stores the click id in a cookie (`_gcl_aw`, or `_gcl_gb` and `_gcl_ag` on some devices, plus `_gcl_au`), kept for up to 90 days. When you start a download, the tag tells Google that the click led to a download; when you buy a licence, it tells Google that the click led to a purchase, with the amount without sales tax, the currency and Paddle's order number. Google receives your IP address, your browser details, the address of the page and the click id. We see only the number of downloads and purchases per ad and what the purchases came to, not who downloaded or bought. Ad personalisation is switched off, so the tag is not used to show you ads or build an ad profile.

With a purchase, the tag also sends Google your email address from the checkout, but only as a SHA-256 hash made in your browser (after trimming it, putting it in lower case and, for Gmail addresses, removing the dots before the @); the address itself does not go to Google. Google compares the hash with the Google accounts it knows, to tell whether someone who saw or clicked our ad bought, even when the cookie is gone or the ad was on another device ("enhanced conversions"). Until the page that thanks you for buying has sent it, the address is kept in your browser's session storage, for that tab only. This is part of what you allow with _Accept_; if you accepted before we described it here, your address is not sent.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also go to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework; that adequacy decision (Art. 45 GDPR) is the basis for the transfer. See [Google's privacy policy](https://policies.google.com/privacy).

The legal basis is your consent, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Your choice, allow or decline, is kept in your browser's local storage for 12 months so you are not asked again; that entry contains nothing but the choice and its date. You can withdraw your consent at any time with the button below, or with _Cookie settings_ at the foot of every page once you have chosen; this deletes Google's cookies on this site. Withdrawing does not affect what was measured before.

## Downloads

You download Mixroadie from [/download/](https://mixroadie.com/download/). The file comes through our own web server, and requesting it produces a normal server log entry as described above. You do not need an account and are not asked for any information.

## Waiting list

You can ask to be emailed when Mixroadie is ready for a platform or DAW that is not supported yet. The list runs on [listmonk](https://listmonk.app/), open-source mailing-list software that we host ourselves at **listmonk.vincentwill.com** on a server in Germany. No newsletter or email-marketing company is involved. The emails are delivered through Mango Mail, \[Mango Mail's postal address], which processes your address on our behalf under Art. 28 GDPR.

### What is stored

- your email address, and a name listmonk derives from the part before the @, because the form does not ask for one
- which waiting lists you ticked, and for each whether you have confirmed or unsubscribed
- when you signed up and when any of that last changed

Your IP address is not stored with your sign-up. We use your address only to tell you that something you ticked is ready, and we do not pass it on.

Signing up is double opt-in: you are only added once you press the link in the confirmation email we send you. That confirmation email contains no tracking. Sign-ups that are never confirmed are deleted after 30 days.

### Opens and clicks

The emails we send to the list contain a tracking pixel: a tiny, invisible image that your email program loads from our listmonk server when it shows images. Links in the emails may also pass through that server, which counts the click and forwards you to the destination. This tells us how many people opened an email and how many followed a link.

It is counted per email, not per person. listmonk is configured not to record which subscriber opened or clicked, so no record ties an open or a click to your address. Loading the image or following a link is still an ordinary request to that server, which sees your IP address and your email program or browser, like any web request; its log entries are shortened and deleted after 7 days, as described above. If you would rather not be counted at all, turn off loading images in your email program — the emails read the same without them.

### Legal basis, unsubscribing and deletion

The legal basis for the waiting list and for counting opens and clicks is your consent, given when you sign up: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time, which does not affect emails already sent.

Every email has an unsubscribe link, and a List-Unsubscribe header so your email program can offer its own unsubscribe button. Unsubscribing takes effect immediately. Your address then stays in the database marked as unsubscribed, so that we can show your consent was withdrawn and do not write to you again; the legal basis for keeping that record is Art. 6 (1) (f) GDPR together with Art. 7 (1) GDPR.

The page behind the unsubscribe link also lets you download everything stored about you, or delete all of it at once, without asking us. You can also write to us and we will do it for you.

## Cheat sheet

On [/cheatsheet/](https://mixroadie.com/cheatsheet/) you can ask for our mixing cheat sheet, a PDF, by email. The form sends your address to our licence server at **license.mixroadie.com**, on the same server in Germany as this website. It emails you the sheet through our own listmonk server and Mango Mail, as described under [Waiting list](https://mixroadie.com/privacy/#waitlist).

Getting the sheet means joining our “Mixing tips” list: mixing tips and news about Mixroadie, like new versions. The form says so at the button. First we email you a link to confirm your address; only when you open it do you join the list and get the sheet. If you don't, you are not added to anything and won't hear from us again.

### What is stored

- your email address
- that you confirmed it, that the cheat sheet was sent to it, and when
- that you are on the “Mixing tips” list, and whether you have unsubscribed

Your IP address is used to limit how often the form can be sent; the licence server stores it only as a salted hash, which is deleted after 12 months. It is not stored with your sign-up. The list works like the waiting list in everything else: the same counting of opens and clicks, the same unsubscribe link, and we do not pass your address on.

The legal basis is your consent, Art. 6 (1) (a) GDPR and, for counting opens and clicks, § 25 (1) TDDDG. You can withdraw it at any time by unsubscribing, which does not affect emails already sent.

## Contacting us by email

If you write to us, your email address, your message and any details you include are stored so we can answer. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR where your message concerns a contract. We keep the correspondence until it is no longer needed and delete it at the latest after 24 months, unless statutory retention periods apply.

## Transfers outside the EU

None from us. Hosting, analytics, the waiting list, the cheat sheet, email and the licence server all run on servers in Germany. The shop that sells licences, Paddle, is in the United Kingdom; see [Buying a licence](https://mixroadie.com/privacy/#purchase). Google's ad measurement, only if you came from an ad and allowed it, may send data to the United States; see [Ad measurement](https://mixroadie.com/privacy/#ads).

## Encryption

This site is served over HTTPS with TLS. You can tell by the `https://` in the address bar.

## Your rights

Under the GDPR you have the right to:

- information about the data we hold about you (Art. 15)
- correction of inaccurate data (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest, including the analytics described above (Art. 21)

Write to <support@mixroadie.com> and we will answer within one month. You also have the right to lodge a complaint with a supervisory authority (Art. 77) — for us that is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

## The Mixroadie application

The application does not require an account and has no sign-in. Your audio never leaves your machine in any configuration. The part of the system that touches audio — reading the DAW project, measuring, applying effects, rendering, taking backups — is always local, and it is the only part that has access to audio at all.

A fresh install sends nothing. The application contacts a server only in the cases below, each of which you start yourself.

### Trial and licence

The licence is checked on your own computer, so the application does not contact us to run. It contacts our licence server at **license.mixroadie.com**, on the same server in Germany as this website, only when you start the free trial, activate a licence key, press Refresh, or remove a licence from a computer. Each of these requests sends:

- a computer identifier: a salted hash of your computer's own id, calculated on your computer. The id itself never leaves it.
- a description of the computer, such as “macOS 26.0 arm64” — the operating system, its version and the processor type, not the computer's name
- the application's version
- your licence key, when activating, refreshing or removing a licence
- when starting the free trial: the email address you type, the six-digit code we emailed to it, and whether you ticked “Send me product updates”

No audio, project or track names are sent. The server stores the computer identifier with the trial or licence it belongs to, the description and version, and when the computer was added and last asked. For a trial it also stores your email address and whether you ticked the product-updates box; the code is stored only as a hash, and deleted once it is used, replaced or has expired after 15 minutes. Your IP address is used to limit how often these requests can be made; in the activity log it is stored only as a salted hash, which is deleted after 12 months. Licence keys are stored hashed, like passwords.

The email with the code is sent through our own listmonk server and Mango Mail, as described under [Waiting list](https://mixroadie.com/privacy/#waitlist); sending it does not add you to any list.

The trial record is kept so that each computer and each email address gets one trial. Licence records are kept for as long as the licence exists. The legal basis is Art. 6 (1) (b) GDPR — providing the trial or the licence you asked for — and Art. 6 (1) (f) GDPR for preventing abuse.

If you tick “Send me product updates”, your address is added to our product-updates list on the same listmonk server, which works like the [waiting list](https://mixroadie.com/privacy/#waitlist): you may be asked to confirm by email, every email has an unsubscribe link, and we do not pass your address on. The legal basis is your consent, Art. 6 (1) (a) GDPR, which you can withdraw at any time by unsubscribing. Not ticking the box changes nothing about the trial.

### Buying a licence

Licences are sold through Paddle.com Market Limited, Judd House, 18-29 Mora Street, London EC1V 1BY, United Kingdom, which handles the payment, the invoice and sales tax as the seller and is responsible for the data it collects to do so under [its own privacy policy](https://www.paddle.com/legal/privacy).

Nothing is loaded from Paddle until you press _Buy_ on the pricing page, or open a payment link Paddle sent you, which leads to the same page. Then your browser loads Paddle's checkout script and checkout page from Paddle's servers, which receive your IP address and browser details like any website, and may set their own cookies. What you enter in the checkout goes to Paddle, not to us.

Once you have paid, Paddle tells our licence server your name, your email address and the order reference, so that we can issue your licence key, send it to you and help you if you lose it. The key is emailed to you from our own listmonk server, through Mango Mail, like the waiting list's emails — but you are not added to any list, and the email contains no tracking. We never see your payment details. The United Kingdom has an adequacy decision from the European Commission (Art. 45 GDPR), which is the basis for data going to and from Paddle. The legal basis for our side is Art. 6 (1) (b) GDPR. We keep this for as long as the licence exists, and longer where tax or commercial law requires it.

### Update check

Once a day, while the panel is open, the application downloads a small file from **mixroadie.com** saying what the newest version is — the same file for everybody, with nothing of yours in the request. Like any request to this site, it produces a server log entry as described above. Installing an update downloads it from the same place.

### Usage statistics and error reports

If you tick “Help improve Mixroadie” — in the installer, in Settings, or with `roadie telemetry on` — the application sends anonymous usage statistics and error reports to our licence server. The box starts unticked and nothing is sent unless you tick it.

Reports go under a random id created only for this purpose. It is not your licence key, your computer identifier or your email address, so a report cannot be matched to a purchase. No IP address is stored with a report. What is sent:

- the Mixroadie version, the operating system and its version, and the processor type
- which music programs are set up, and which version saved each song
- which kind of AI option is chosen (never an API key) and the licence state (trial, licensed…)
- which commands you run, how they ended and how long they took, and how many tracks a song has
- songs as scrambled numbers that only your computer could match back to the file — never their names
- error reports: what kind of error it was and where in Mixroadie's own code it happened, with the error text after everything in quotes, every file path, file name, web address and email address has been removed

Never sent: audio, track names, file or project names, anything you type, API keys or licence keys. The removal of names from error text is careful but not perfect: a name that appears in an error without quotes or a path around it could still get through.

`roadie telemetry show` prints exactly what is waiting to be sent. The legal basis is your consent, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Unticking the box withdraws it: the application deletes what it has not sent yet and asks the server to delete everything it received under that id. Reports are otherwise deleted after 400 days.

### Cloud AI providers

On the default setup the reasoning model also runs on your machine and nothing leaves it. If you deliberately switch to a cloud provider in Settings — such as Claude (Anthropic), ChatGPT (OpenAI), Gemini (Google), OpenRouter, Groq, Mistral, DeepSeek, Grok (xAI) or Together — measurements, track names and the text you typed are sent to that provider so it can answer — never audio, and never your project file. Before the first such request, the application shows you the exact payload it would send, generated by the same code that builds it, and sends nothing unless you agree. You can withdraw that agreement in the same place. In that case you are the controller for what you send, and the provider's own privacy policy applies.

## Changes to this policy

We update this policy when the site changes. The date at the top tells you when it last did.