Privacy policy
In short: the check runs in your browser. Files you upload are analysed on your device and never sent to us. For links and song names, your browser downloads the official 30-second preview from Apple Music or Deezer. We keep a record of each check (which song, the score and the verdict, and how you found us) to measure accuracy, and we never sell it. The details are below.
What we record
To understand which pages are useful, the site records anonymous usage events: a page being viewed, a tool being used, or a link to another website being clicked. Each event carries a random identifier created in your browser tab when you arrive. It is kept in session storage, disappears when you close the tab, and is not linked to your name, email address or device. We also record the address of the page, the website that referred you and any campaign tags in the link. With each event our server adds your country as reported by Cloudflare, whether you are on a phone or a computer, and the language of the page. Your browser keeps two small markers in local storage: one that only says you have visited this site before (it is not an identifier), and, in our own team's browsers, one that marks the visit as ours so we can leave it out of our statistics.
We also use Cloudflare Web Analytics to count page views and measure page load times. It does not use cookies, does not use local storage to identify you, and does not collect personal information; it only reports aggregate figures such as which pages were viewed and how quickly they loaded.
Song checks
The check runs in your browser. When you paste a link or type a song name, your browser downloads the official 30-second preview from Apple Music or Deezer and analyses it on your device. When you upload a file, the file is analysed on your device and is never uploaded to us: we do not receive the audio, and we do not record the file name.
To find the song, your browser sends what you typed or pasted to Apple (iTunes Search), and our server sends it to Deezer, and to Spotify or YouTube when you paste their links. For songs that are on Deezer, our server also asks Deezer whether it has labelled the album as AI-generated; when Deezer does not answer our server, your browser fetches an anonymous Deezer access token (without your Deezer login) and hands it to our server for that one question.
For each check we keep a record for up to 400 days: which song was checked (its title, artist and the Apple Music or Deezer ID) or, for a file, only its type and size; the score and the verdict; how long it took; how you reached the checker (the page, the referring website and campaign tags); your country as reported by Cloudflare; whether you use a phone or a computer; and the browser and operating system family. We use it to measure how the checker performs and which songs people ask about. We do not record your network address.
To count the 3 free checks per day and stop abuse, we use keyed hashes of your network address and of a random device ID stored in your browser. The address and device ID themselves are not stored. Each check record also keeps a keyed hash of that device ID (so we can count how many different people use the checker and how many come back) and the ID of your browsing session, for as long as the record is kept. Clearing your browser's site data gives you a new device ID.
If you use "Result wrong?", we keep your answer, the role you pick (for example "I made this song") and any note you write, together with the song and the verdict, for 365 days, to measure how often the checker is wrong. If you leave your email address to hear when paid packs open, we keep it only for that one message and delete it afterwards.
Share links (/s/…) contain only the song's Apple Music or Deezer ID. Whoever opens one runs the check again in their own browser; we do not store or show your result to them. Shared song pages are hidden from search engines.
What we never collect
We do not use cookies for tracking, we do not build profiles, and we do not store your IP address, browser fingerprint or any other personal information alongside these events. We do not sell or share data with advertisers.
Hosting
The site is served by Cloudflare. Like any web host, Cloudflare processes technical request data such as IP addresses to deliver pages and protect against abuse, under its own privacy policy.
Contact
Questions about this policy can be sent to hello@isthissongai.app.