Data Protection

Verantwortlich

The Sonodex team is responsible for this website. A public contact address for data protection questions will be added here.

This website

This website uses no analytics trackers, no advertising cookies and no newsletter backend. Fonts, images and scripts are served by this website itself, not by third-party servers.

Kontoregistrierung

Only when you submit the registration are your name, email, password and, if applicable, invite code transmitted, encrypted, to the Sonodex account server. This website does not store passwords or sign-in tokens.

Account and email

The account server processes your registration data for sign-in and account management. Requested messages for email confirmation and password recovery are sent via Resend. Your music files are not transferred for this.

Download

The Windows download queries the Sonodex server and is redirected from there to a short-lived link on the file storage with the latest final installer.

The desktop app

The app stores music files and library locally. Optional services such as metadata lookup, Last.fm, streaming providers or WebDAV backups connect only if you set them up. In addition, the installed app connects to the Sonodex server for the update check (at launch and every six hours), for error reports if you turn them on, and, if you are signed in, for your account.

Error reports

The app does not show technical errors and limit messages. Only if you switch on “Share diagnostic reports” under Settings → General → “Privacy & diagnostics” does it send them anonymised to the Sonodex server so we can fix them. The option is off by default; errors then stay only local in logs/diagnostics.log. You can switch it off again at any time.

What is sent

App version, operating system, architecture, update channel (beta or final) and up to 50 error entries per submission, each with source, message, count and first and last time. Reports are sent at most once per hour and on exit.

What is removed beforehand

Beforehand, the app removes on your device file paths (only the file extension remains), file names, “Artist - Title”, URLs except the host name, email and IP addresses, tokens and Windows user and computer names. Account, device ID, cookies, track titles or paths are never sent.

Speicherung

The server uses your IP address only hashed and only in memory, to limit the number of reports. An error entry is deleted 90 days after it last occurred.

Account backup

The current app does not offer account backup for the time being. For backups uploaded with an earlier version, the following applies: with account backup, your library, playlists, cues, grids and analyses were saved in your Sonodex account so you could restore them on a new device. The app encrypts the backup on your device with your recovery key; the server and we cannot read the content. Music files are not uploaded.

What is stored

Encrypted pieces of the backup and an encrypted table of contents for each version, in Cloudflare R2 and in the Sonodex server’s database. Only size, time, the device name you chose and the app version are unencrypted. The server stores only a check value of the recovery key.

Retention

At most 10 versions and none older than 30 days; the newest is always kept. If no backup has been uploaded for 90 days and the account then no longer has Pro, all backups are deleted, as they are when the account is deleted. You can delete individual versions in the app at any time.

Controller-Berichte

After the controller test under “Perform → Check controller” you can choose to send a report. It shows us which buttons, faders and jog wheels of your controller work in Sonodex, and we use it to improve the device profiles. Nothing is sent unless you click “Send report” in the “Send controller report” dialogue; the dialogue shows the exact content beforehand.

What is sent

Name of the controller mapping and MIDI port (for example “DDJ-FLX4”), app version, operating system, measured audio latency and, for each control, name, deck and result (“ok”, “wrong value”, “no response”, “not mapped”, “skipped”). Never sent: account, email address, device ID, file paths, track titles or other data from your library; the server rejects reports containing such fields.

Speicherung

The server uses your IP address only in hashed form and only in memory, to limit the number of reports (at most 10 per hour). A report is deleted 180 days after it is received. Reports are only evaluated in aggregate per device. Because a report contains no personal data, we cannot assign it to anyone afterwards.

External links

Links to GitHub are subject to GitHub’s privacy policy.

Notes on the illustrations

The images are original app views with generated demo tracks. DJ software and brands belong to their respective owners. Acceptance testing of all versions and devices is not guaranteed.