Privacy, mapped plainly.

Who operates Sunset

Sunset is operated by Michael Barber through BlackLabel Tech. This policy applies to sunsetmixing.com, Sunset Studio, and the Sunset Mac app. Questions and privacy requests can be submitted through Sunset support.

Audio and app processing

• Your tracks: the Mac app and browser Studio decode, analyze, preview, and export audio locally. Sunset does not receive the audio file or its waveform.
• Reference links: when you paste a SoundCloud, YouTube, or Spotify link, the Mac app requests title and artist metadata from that platform's oEmbed service. The URL and ordinary network metadata are sent to that platform; your audio is not.
• Update checks: the Mac app may request release information from sunsetmixing.com. The request can include the installed version and ordinary connection data such as IP address and user agent. It does not include projects or audio.

Website and support data

• Cloudflare: Cloudflare hosts and protects the site, delivers assets, runs the support endpoint, and may process IP address, request URL, user agent, timing, and security data in connection and service logs. Cloudflare Web Analytics may also process page, referrer, browser, device, and network context.
• PostHog analytics: for non-internal visitors, the site records page views, page exits, referring page, and checkout-click events. PostHog uses browser local storage for a persistent pseudonymous visitor identifier. Autocapture and session replay are disabled; the site does not intentionally send audio, form text, or account profiles to PostHog. Browser Do Not Track and Global Privacy Control signals disable this analytics loader.
• Support assistant: a question you submit is sent to Sunset's Cloudflare Pages Function and Cloudflare Workers AI so the assistant can retrieve relevant Sunset content and draft a response. It can include standard request metadata. Do not include passwords, payment-card data, health information, or other sensitive details.
• Local funnel buffer: the current page keeps a short in-memory list of page and checkout events for debugging. It disappears when the page is closed or reloaded.

Checkout, delivery, and forms

• Stripe: checkout is hosted by Stripe. Stripe receives payment, billing, device, and fraud-prevention information under its own policy. Sunset receives purchase and delivery details such as email address, order status, amount, and transaction identifiers; Sunset does not receive the full payment-card number.
• Google Forms: affiliate or waitlist forms are hosted by Google. Google receives the fields you submit plus ordinary service metadata. Sunset uses those responses to evaluate or answer the request.
• Google Fonts: pages request font files from Google. The browser sends Google the requested font URL and ordinary network metadata, including IP address and user agent.

How information is used and disclosed

Sunset uses this limited information to deliver purchases, run and secure the site, answer support, maintain the app, measure page and checkout performance, prevent abuse, comply with law, and defend legal rights. Information is disclosed to the processors named above when needed for those functions, and to authorities or advisers when legally required.

Sunset does not sell personal information or use it for cross-context behavioral advertising. “Share” can have a special meaning under some privacy laws; the provider disclosures above describe the operational transfers that occur.

Retention and choices

Browser local storage remains until you clear site data. Purchase and transaction records are retained as needed for delivery, refunds, accounting, fraud prevention, and legal obligations. Support and form records are kept only as long as reasonably needed to answer the request, maintain a business record, or resolve a dispute. Cloudflare, PostHog, Stripe, and Google retain provider-side data under their configurations and policies.

You can block analytics with browser controls, Global Privacy Control, or Do Not Track; clear local storage; decline optional forms; and use the app or Studio without uploading audio. To request access, correction, or deletion of Sunset-controlled information, use support. Sunset may need to verify your identity and may retain information required by law.

Health information, children, and security

Sunset is music software, not a health service. It is not offered for a covered entity's or business associate's protected health information, and the public service does not include a business associate agreement. Do not submit protected health information or emergency details to the support assistant or forms.

Sunset is not directed to children under 13 and does not knowingly collect their personal information. Reasonable technical and organizational safeguards are used, but no internet transmission or storage system is guaranteed to be completely secure.

Changes

Material changes will be posted here with a new effective date. Continued use after the effective date is governed by the updated policy.