Privacy.

Mixtaped is owned and operated by Verstack For Marketing and PR L.L.C S.O.C, a limited liability company registered in Dubai, United Arab Emirates (commercial license no. 1516468), Office 101B-06, Mohammed Bin Al Zubair building, Al Garhoud, Dubai, UAE. For your data, Verstack is the controller.

Your email address — for the 6-digit sign-in code. There are no passwords. Occasional announcements about Mixtaped are opt-in: you receive none unless you switch them on in settings, and every one carries a link that switches them off again. Sign-in codes cannot be turned off, because they are how you get in. Your handle and profile (display name, bio, avatar). Your library — shelves, entries, notes, tags, dates, and photos you upload. Who you follow, and who follows you. A view count per profile and per shelf. Your settings — theme, motion and email preferences. Your appearance choices, which a paid plan unlocks: the accent colour and typeface you pick for your account, how your library is laid out, and any background image you upload for a shelf or for the library itself. Those images are stored files, like the rest of your photos, and the same caveat below applies to them. If you subscribe, your plan status (which plan, its state, when it renews) and the identifiers of whichever shop sold it — a Stripe customer and subscription reference on the web, or the Apple transaction references from the App Store.

We don't run ads, we don't sell or share your data with data brokers, and we don't track you across the web. There is no analytics service on mixtaped.app — no measurement or session-recording script from anyone, and no script on any page here that we didn't write ourselves. The one thing we count is the view count named above: opening someone's profile or shelf adds one to a single number on that page's row, and that is the whole record. No visitor id, no cookie, no IP address, nothing that could put two visits together as the same person, and never a view of your own pages. Your browser keeps a list of what this tab has already counted so a refresh doesn't inflate anyone's number; it is thrown away when the tab closes.

If the app crashes in your browser, a short technical crash report (the error text, the page address, and your browser's user-agent string — never your library) is sent to our own server logs so we can fix it.

There are two ways to pay for a plan, and they involve two different companies.

On the web, payment is processed by Stripe. Your card details go to Stripe directly and never touch our servers. We give Stripe your email address and your Mixtaped user id so the payment can find its way back to your account, and we receive a customer reference and the state of your subscription.

In the iPhone app, a plan is an Apple in-app purchase. Apple takes the payment; we never see your card or your Apple ID. Apple's servers send us signed notifications about the transaction — the product, the dates, the status — carrying the Mixtaped user id the app attached at purchase so we credit the right account. If a purchase arrives without one, we park it for a human to match rather than guessing.

Stripe's and Apple's own privacy policies govern what each of them holds.

Every shelf has a visibility: public (on your profile), unlisted (off your profile, readable by anyone who has the address), or private (only you).

Private is not a hidden button. The rule lives one layer deeper than the app: the database itself checks who is asking before it hands over a single row, and to anyone who isn't you a private shelf simply does not come back. So a bug in a page, a link someone shares, or a request made straight to the database without going through Mixtaped at all still gets nothing.

Unlisted is not a secret, and we'd rather say so than let you assume otherwise. There is no random token in the link: the address is your handle plus the shelf's name, so someone could guess it. What unlisted does buy is that the shelf is off your profile and out of every list the database will hand out — it can only be resolved one exact address at a time, and a run of wrong guesses gets rate limited. Treat unlisted as unadvertised, not as protected; anything that must not be seen belongs on a private shelf.

Photos are the second honest caveat. Every photo you upload — including one on a private shelf — is stored in public object storage under a long random filename. Anyone holding that exact URL can open the file without signing in, and the storage layer does not check who they are; what keeps it unseen is that the app never shows a private shelf's photo URLs to anyone else. Deleting your account deletes the files. Until that changes, skip truly sensitive photos.

Your profile has its own visibility — "Search-indexed", "Linked only", "Hidden", or "Private" — and only a search-indexed profile is offered to search engines. The default is "Linked only".

Your data sits in a Supabase Postgres database and Supabase object storage. The app runs on Railway, which also holds our server logs, and requests reach it through Cloudflare, so Cloudflare sees the traffic on its way in. Sign-in codes and announcement emails are delivered by Resend, which is given the address the email goes to. These providers process data on our behalf and nothing more.

When you search for something to add, the words you typed go to our server, and our server asks the matching index — so the index sees us rather than you. Which index depends on what you're adding: TMDb (films), Deezer (music), Apple's iTunes Search (track previews and album track listings), Open Library (books), Steam and, where it is configured, RAWG (games), OpenStreetMap's Nominatim (places), and Wikipedia (topics, and games Steam never sold). Pasting a link asks YouTube or Google Maps about that link. Map thumbnails for places are fetched from Geoapify. This is the same for both apps: the iPhone app searches through our server too.

Your device does talk to some of them directly, because pictures and sound have to come from somewhere: cover art from TMDb, Deezer, Open Library and Steam, the 30-second previews from Apple, and your own uploads from Supabase storage. Those servers see the request your browser or phone makes — its IP address and browser details — exactly as they would for any image on the web.

None of those indexes receives your email address, your handle, or anything from your library. Stripe and Apple do receive identifiers, as described under payments.

One feature would send text to a language model: drafting a shelf from a sentence you type, which would go to Anthropic (Claude) to come back as a suggested shelf. It is switched off in both apps today, and nothing else in Mixtaped sends your writing to a model. If we turn it on, this page changes with it.

No tracking cookies. Your browser's local storage holds your session token (so you stay signed in — unless you untick "Keep me signed in", which scopes it to the tab), your light/dark theme choice, the handle you last signed in as, and, during signup, your not-yet-saved handle and picks. Alongside it, for the life of the tab only, sits the list of profiles and shelves this tab has already counted a view for. On iPhone the equivalent session lives in the device keychain.

Export — "Your data" in settings downloads your whole library as JSON. Delete — "Delete library" in settings permanently removes your account, profile, shelves, entries, and uploaded files. It's immediate and irreversible, and a subscription bought on the web is cancelled with it.

Deleting cannot cancel an Apple subscription — nothing outside Apple can. If you subscribed on iPhone, cancel in your Apple ID subscription settings first, otherwise Apple keeps billing for an account that is gone.

Questions, worries, or requests: [email protected].

This page covers what we hold and who can see it. The other half of the deal — what you agree to by using Mixtaped — is on the terms page.