Last updated: 17 September 2026
SetMaster masters DJ sets. To do that it has to receive your audio and your
email address. This page covers what happens to both, and how long we keep
them. It applies to setmaster.krateo.me only; the rest of
krateo.me has its own policy.
| Data | Why | Legal basis |
|---|---|---|
| The audio you upload | To analyse the set and produce your master. It is never used to train models and never shared. | Art. 6(1)(b) GDPR: performing the service you asked for |
| Your email address | How we deliver your finished master, how we send you the link back to a set you saved if you ask us to, and how we recognise you. SetMaster has no accounts and no passwords. | Art. 6(1)(b) GDPR |
| Set metadata (title, artist, year, genre, all optional) | Written into the tags of your master file. | Art. 6(1)(b) GDPR |
| Your IP address | Counted in memory to rate-limit abusive traffic. Never written to disk. | Art. 6(1)(f) GDPR: keeping the service available |
| Error reports | When something breaks, a technical report is recorded so it can be fixed. Personal data is scrubbed before it is stored. | Art. 6(1)(f) GDPR |
The app keeps a handful of small values in your browser's local storage so it can pick up where you left off, such as which set you are working on and your sign-in session if you are a subscriber. Some of these can include your email address, for example a checkout in progress. None is a cookie, none is shared with anyone, and clearing your browser data removes them all.
| What | Kept for |
|---|---|
| Uploaded audio and rendered masters | 24 hours |
| A master you paid for | 7 days, reachable through the link we email you |
| Audio from a render that failed | 7 days, so we can look into it and re-run it |
| Download and resume links | 24 hours, or 7 days if you paid |
| Sign-in links | 30 minutes, single use |
| The record holding your email | Deleted with the link above, so 24 hours or 7 days |
| Your email on a payment record | 180 days, then removed while the order itself is kept |
| Subscription status and usage | 90 days, so a monthly allowance can be counted |
| Feedback you send us | 180 days. The feedback button is currently a dev-only tool, not open to visitors |
All of this deletes itself automatically. Nothing on this list needs you to ask.
One exception, so the sentence above is not more comforting than the truth: we take nightly backups so we can recover from a failure or a mistake, and a backup is a copy of the database as it was that night. Those copies are kept for up to a year and then deleted. Your audio is not in them: uploads and finished masters are mirrored separately, and deleting a file there removes it from the mirror too. What a backup can still hold past the periods above is the database itself, which means an email address, the record of a job, and our own logs. If you ask us to erase your data we erase it from the live service straight away; the backups age out on the schedule above.
Polar. When you buy, you buy from Polar Software, Inc., not from us: Polar is the Merchant of Record and the seller. Polar therefore decides for itself how it handles your payment data, and is a separate controller, not a processor acting on our behalf. Polar's own privacy policy applies to the purchase: polar.sh/legal/privacy. What reaches us from Polar is the order and your email address, so we know what you bought and where to send it. We never see your card details.
Each of these, by contrast, processes data on our behalf, for the purpose named and nothing else:
| Who | What for |
|---|---|
| Resend | Sending the emails that deliver your master and your sign-in links. |
| Netcup GmbH | The server in Germany where the service runs and your audio is processed. |
Where your data goes. Netcup is in Germany, and your audio is processed there and nowhere else. Polar and Resend are in the United States, so your email address and your order details are transferred there. Those transfers rest on the European Commission's standard contractual clauses. You can ask us which safeguard applies to a given recipient.
Under the GDPR you can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interests. You can also complain to a supervisory authority.
In practice all of it deletes itself on the schedule above, whether you ask or not. If you want something gone sooner, email us and we will act on it.
Email mastering@krateo.me.