Privacy

Last updated: 16 October 2026

Your audio and browser storage

Tracks are read into the tab's memory and exported to your device. We receive no audio or filenames. Closing the tab releases the audio. The tool works without an account.

Your browser stores sign-in tokens, a finished-render count and whether you have written a review. These support sign-in and review prompts; they do not follow you across websites. The theme resets when the page reloads.

Accounts and reviews

If you sign in, Supabase stores your email and account details. Google sign-in can also provide your Google identifier, name and profile-image metadata. We receive no Google password and request no access to Gmail, Drive or contacts.

Reviews store your chosen public name, rating, text, status and timestamps, linked privately to your account. Published reviews show your chosen name, rating and text, never your account email. Four- and five-star reviews publish automatically; lower ratings await approval. Previously hidden reviews stay hidden until approved.

You can edit or delete your review on the reviews page. Open pages refresh published reviews automatically; built-in copies update after a site rebuild. Search engines and other caches may keep older copies. Avoid putting private information in a review.

Site usage and service providers

Vercel hosts the site and provides cookieless Web Analytics and Speed Insights. These measure page visits, approximate country, device type, page performance and tool events: file selection, analysis, renders and download handoffs. A completed render includes its whole-number BPM and input/output formats, never a filename or audio.

Supabase also keeps anonymous daily counts of starts, analyses, renders and download handoffs, separated into sample and user tracks and broad referral sources. These counters have no file, account, visitor or session identifier and respect your browser’s Do Not Track setting.

Supabase handles accounts and review storage. Resend sends account and moderation emails; review notifications contain the rating, review ID and an admin link. Support emails go to Gmail. Hosting, sign-in and email services may process connection information such as IP addresses and keep security or delivery logs. Providers may process data outside your country.

We use this information to operate and secure the site, manage accounts and reviews, answer support requests and improve reliability. We do not sell personal data, run ads or use cross-site tracking.

Your choices and data retention

Account and review data stay until you delete them or we remove them for moderation or security. Delete your account from the account menu to remove its details and review from the active database. Provider backups, logs and cached pages may remain under their retention settings. Support messages remain in our mailbox until deleted.

To request access, correction or deletion, email bpmlockapp@gmail.com. Depending on where you live, you may also have rights to a copy of your data, to restrict or object to its use, or to complain to your privacy regulator. We may need to verify that an account is yours before acting.

Contact

BPM Lock is an independently run site based in Wisconsin, United States. For privacy questions or support, email bpmlockapp@gmail.com. For bugs, include your browser and what went wrong. Please do not send audio files.