Skip to content

Privacy

Your video never leaves your browser

Extractune extracts audio entirely on your device using your browser's built-in media APIs. The video you select is never uploaded to a server, and Extractune never stores the audio on its servers.

Your files stay in this browser

What you make (extracted audio, split parts, transcripts, videos) is kept in this browser on this device, under Your files, until you delete it there or clear this site's data. It's never uploaded. Up to 500 MB is kept; the oldest go first. A private window keeps none, or clears them as it closes.

Splitting voice and music happens on your device too

“Split audio” separates the voice from the music with an AI model that runs in your browser, so the audio is not sent anywhere to be split. The first time you split, your browser downloads that model (about 90MB) from Hugging Face, a third-party file host, and keeps it on your device for next time. Like any download, that request shows Hugging Face your IP address; no audio is sent with it. You can remove the saved model by clearing this site's data in your browser.

Getting the words is the one exception

When you tap “Get the words”, the extracted audio — never the original video — is compressed in your browser and sent to our server, which forwards it to Groq, a third-party speech recognition service, to transcribe it. At the same time, a short (~20 second) clip is sent to AudD, a third-party audio recognition service, to check whether it's a known song. If it is, we also request lyrics from LRCLib, a free lyrics database. Extractune doesn't store the audio, the clip, or the results after the request completes; Groq and AudD handle what they receive under their own privacy policies. This only happens when you explicitly tap “Get the words” (in the studio or in the music video maker) — never automatically. On the find-the-song page, “Find the song” sends only the short clip, not the audio for a transcript. To stop abuse, your IP address is counted for one hour so no single place sends too many of these; it isn't kept with the audio or the results.

Voting for a Pro idea

If you mark an idea for Pro as one you'd want, on the pricing page, your browser sends our server which idea it was and a random number it made up for itself, so each browser's vote for an idea counts once. Your IP address is used only to stop too many votes coming from one place in an hour, and isn't kept with the vote. The count keeps no list of voters, only roughly how many different browsers wanted each idea. No audio, file or anything else goes with it.

What's saved on your device

Extractune itself sets one cookie, only while you're signed in to Pro (see Pro below); Google Analytics sets its own, only if you accept them (see below). A few things are kept in your browser's own storage, on your device only, and are never sent to us:

  • The audio engine for splitting, so it's downloaded only once. While it downloads, the part that has arrived is kept too, so a download cut off part-way carries on from there.
  • The finished parts of your most recent split, so a split cut short by a reload or a crash picks up where it stopped. Only one split is kept: starting another replaces it.
  • A file you split on a page that sends it to the full tool to run faster, until the full tool opens it, which deletes it (anything left over is deleted after a day).
  • How fast splitting ran on this device, to estimate how long the next one takes.
  • Whether you switched on a labs feature, like tempo and key.
  • When you last saw the tip window, so a download shows it at most once a day, and that you were already asked “Was this useful?”, so it isn't asked again.
  • Which ideas for Pro you marked as wanted, so they stay marked, and the random number your votes are counted by.
  • If you have Pro: until when, so Pro's video features keep working offline.
  • If you have Pro: your latest video or two, as it's made, until you make the next.

Clearing this site's data in your browser removes all of it.

What we do collect

We use aggregate analytics to understand how the tool is used: page views, and which steps people take (a file was picked, with its type and rough size, or turned away and why; an extraction, split, transcript or song check succeeded or failed, and why it failed; how long a split's clip was, how fast it ran, and how far it got if it was stopped or the page was left, whether the page was left while it ran, and whether a split that stopped while you were away started again by itself; whether a split was held back with a memory warning, and what you chose; the studio was opened or put in full screen; which tool tab was opened on a page, or that a file was carried on to the full tool, or a split carried there to run faster; something was downloaded, and in which format (for a beat, how many parts, its tempo and length); that Get Pro was opened in the beat maker, and from what; that Surprise me was tapped there; your answer if you tap yes or no to “Was this useful?”, asked once; that you tapped a link to leave a tip on Ko-fi; which idea for Pro you marked as one you'd want). Split steps also say what kind of device ran them, as your browser reports it: phone or computer, whether it has a graphics chip the split can use, how many processor cores, and roughly how much memory. When an extraction fails, or only works on a second try, the step also says how far it got, the error your browser gave, and what the file's sound is (its container, codec, channels and sample rate), never its name or contents. A finished extraction says how long the run took, how long the source was and its size in whole megabytes, and the same kind of device as a split (phone or computer, cores, memory). When the page itself crashes, or a script on the page fails without crashing it, the event carries the page's address, the error's ID, kind and the first 100 characters of its message with anything that looks like a file name or path removed, the place in our own code it came from, the site's version, and your browser and system by name and version (like “Safari 17.4 iOS”), never the full browser string. A split refused before it starts, for a clip that is too long or on a browser that can't run it, is reported as a refusal rather than a failure, with the reason, the clip's length and your device's limit. When an HQ split or Pro is offered beside a split, the event says where and what was offered, and whether you tapped it. These are sent to Google Analytics. Page views are also counted by Vercel Web Analytics, which uses no cookies. Google Analytics sets cookies only if you accept them in the banner. Until you do, it sends Google only anonymous pings without cookies (that a page was viewed, with your approximate location and browser), which can't tell your visits apart. Once you accept, it sets cookies to tell visits apart. Its data is handled under Google's privacy policy. You can change your answer any time with “Cookie settings” at the bottom of every page. No analytics tool ever receives your files, their contents, their names, or anything tied to what you process.

Pro

Only if you get Pro. Every free tool works without an account.

  • We keep your email, your plan's status and end date, and the IDs Dodo Payments gives your customer record and subscription. Supabase, our account service, stores them in the United States (US East).
  • Dodo Payments sells Pro as the merchant of record. It holds your card and billing details under its own privacy policy; we never see your card.
  • Your sign-in code is emailed by Resend. If you use Continue with Google, Google shares your name, email and profile picture with us for the sign-in.
  • One cookie keeps you signed in, only while you are. Signing out removes it.
  • With Pro, Get the words counts your use (calls an hour and a day, minutes of audio a month) by your account instead of your IP address. Nothing else changes: no audio, video or file goes to Supabase, Dodo, Resend or Google, apart from HQ split below.
  • Analytics events for Pro say only that a sign-in was started or finished (and whether by email code or Google), a checkout was started (with the plan) or returned from, Pro turned on, billing was opened, or you signed out. Never your email or your account ID.
  • Delete your account any time on the Account page; your Pro record goes with it. Dodo Payments keeps payment records as the law requires.

HQ split

Only when you tap HQ split. The free split runs on your device and uploads nothing.

  • The song's audio (the sound taken out of your file, never the video) is uploaded to our private storage at Supabase in the United States (US East), and split on a GPU server at Modal in the United States.
  • Modal deletes its copy when the split ends. The song and its parts on our storage are deleted as soon as your device has the parts, and always within an hour.
  • We keep a record of each HQ split (when, how long the song is, whether it finished) and of your credits, with your account, so your balance adds up. Never the song or its name.
  • The 3 free tries are once per email address: we keep a one-way hash of the address for that, also after the account is deleted. New free tries are also counted per IP address for a day, and the count isn't kept with your account.

Contact

Questions about this policy can be sent to support@extractune.com.