Privacy policy

Who we are

Sift is a music discovery and annotation tool by simplest.agency, available at siftclub.cc. This policy describes how we handle information when you use Sift. For privacy questions or requests, contact infatuation.supply@gmail.com.

Your library starts on your device

Saved recordings, notes, timestamp marks, tags, collections, listening history, your queue, and preferences are stored in your browser using IndexedDB and browser storage. You can discover and save music without an account. Clearing site data can remove this local copy. JSON and CSV exports are downloaded to your device.

Signing in alone does not upload your library. When you choose Back up now, Sift sends your saved recordings and their source references, notes, marks, tags, and collections to account backup storage. These manual backups exclude your unsaved listening history, queue, and preferences. Restoring a backup downloads it and merges it with your local library.

Accounts and Google sign-in

We use Clerk to handle registration, sign-in, email verification, account profiles, and sessions. Clerk processes your email address, authentication information, and related security and device data. If you choose Google sign-in, Google shares the basic identity information you authorize, such as your account identifier, email address, name, and profile image. We use this information to sign you in, display your account, and associate backups with you.

Sift does not request access to your Gmail, Drive files, contacts, or private YouTube library. We do not use Google account information for advertising or sell it. You can remove Sift’s access in your Google account connections.

Account backups are stored in Cloudflare D1 and accessed through our Cloudflare Worker. Requests for private data must have a valid session for the account that owns it.

Playback, links, and service providers

Music plays in an embedded YouTube player. When the player loads or you interact with it, your browser communicates with YouTube, which may receive your IP address, browser information, and playback activity, and may use cookies under its own policies. YouTube may display advertising. Adding a YouTube link sends that link to our service and YouTube’s metadata endpoint to retrieve its title and channel. Sift does not download the audio.

Cloudflare delivers the site and API and processes request data, including IP addresses and technical information, to operate and secure the service. Clerk and Google support authentication; PostHog supports the usage analytics described below. These providers may process data in countries other than yours.

See the privacy notices from Cloudflare, Clerk, Google and YouTube, and PostHog.

Usage analytics and browser storage

When enabled, PostHog helps us understand which features work and where errors occur. Events include page views and actions such as advancing discovery, starting playback, saving a recording, importing a library, or making a backup. They include basic browser and device information, random device and session identifiers, and limited action properties such as counts or source type.

Our analytics configuration excludes account names and emails, note text, search terms, pasted links, recording titles and IDs, and library contents. It strips URL queries and fragments, disables session recording and automatic interaction capture, and requests that PostHog disable IP-based location enrichment. Network providers still receive the IP address needed to handle requests. Analytics identifiers are kept in local storage; Clerk and YouTube may use their own cookies and storage.

Sift’s analytics respects your browser’s Do Not Track setting. You can also block analytics requests through your browser. Disabling analytics does not disable local saving or playback.

Retention, access, and deletion

Local data remains until you remove it or your browser clears it. Account backup snapshots are retained as revisions; a later backup or removal of a local recording does not erase older server snapshots. There is currently no automatic expiry for those snapshots. Export a copy before removing data you want to keep.

You can manage your Clerk profile through the account menu. Deleting a sign-in account does not currently remove its D1 backup snapshots automatically. Contact infatuation.supply@gmail.com to request access, correction, or deletion of your account backup data, or to ask about other information we process. We may need to verify that you own the account. Do not send passwords or verification codes. Removing server data does not clear copies in your browser or exports you have downloaded.

We use information to provide, secure, and improve Sift, respond to requests, and meet applicable legal obligations. We do not sell personal information. We share information with the service providers needed for these purposes, and may disclose it where required by law or necessary to address abuse or protect rights. Provider logs and analytics have their own retention settings; contact us for questions about a specific record. No storage or transmission system can be guaranteed completely secure.

Changes and questions

We will update this page and its effective date when our practices change. For questions about this policy or your information, contact infatuation.supply@gmail.com. See also our Terms of use.