Privacy Policy

Last updated: May 15, 2026

Draw.Audio is a free, browser-based step sequencer. It does not require an account and does not identify individual users. This policy describes what data is collected, how it is used, and what choices are available.

Information the server records

When you use Draw.Audio, the server records the following:

• A random 27-character visitor ID, stored in a cookie, used to distinguish repeat visits and prevent abuse.
• A per-session request ID used to correlate requests within a single visit.
• Your selected interface language.
• Core Web Vitals (CLS, INP, LCP, TTFB) and session duration, used to monitor performance.
• Feature usage events from a fixed allowlist. No free-form text and no pattern contents are recorded.
• An approximate city, region, and country derived from your IP address.
• A SHA-256 hash of your IP address. The raw IP address is not stored.
• Browser, operating system, and device type, parsed from the User-Agent header.

Information the server does not record

• No accounts, names, email addresses, or phone numbers.
• No third-party analytics or advertising trackers.
• No device fingerprinting.
• No raw IP addresses.
• No audio recordings or audio uploads. Audio cannot be uploaded to Draw.Audio.

Cookies

• visitorId: a 27-character random string. One-year expiration, SameSite=Strict, Secure. Used for repeat-visit identification.
• _rid: a per-session request ID. Expires at the end of the session. Used for log correlation.
• lang: stores the selected interface language.

Blocking or clearing cookies does not prevent the site from functioning. Repeat-visit recognition and saved preferences will reset each time cookies are cleared.

Local storage

Draw.Audio uses your browser's localStorage to save data on your device. This data is not transmitted to the server. It includes your current project, undo and redo history, UI preferences (motion, panel layouts, mixer orientation, EQ mode), MIDI device settings, and cached themes. The visitor ID is also mirrored in localStorage as a fallback against browser cookie restrictions. Clearing your browser's site data removes all of it. Draw.Audio does not use IndexedDB or OPFS.

Shared patterns

When you share a pattern, the server stores the pattern's JSON content, the upload timestamp, and a source tag indicating whether the upload came from the share button or from a re-uploaded download. No visitor ID, IP address, name, or other identifier is stored alongside a shared pattern. Shared patterns are anonymous and immutable. Anyone holding the 9-character share ID can view, download, and remix the pattern.

Service providers

Draw.Audio is hosted by a US-based hosting provider. The provider processes network traffic to the site as part of delivering it. The provider's own privacy practices apply to that traffic.

Your rights

Depending on your jurisdiction, including the EU and UK under the GDPR and California under the CCPA, you may have rights to access, correct, delete, or export the data held about you, and to object to or restrict its processing.

Draw.Audio does not collect identifying information. The only record tying server data to your device is your visitor ID cookie. To submit a request, email randy@draw.audio from a device on which you have used the site and include your visitor ID. The visitor ID can be found in your browser's developer tools under Application → Cookies → visitorId. Without this ID, Draw.Audio cannot reliably locate your data.

Draw.Audio does not sell personal data. EU and UK residents may file a complaint with their national data protection authority.

Children

Draw.Audio does not knowingly collect data from children under 13. Users under 13 should have a parent or guardian's permission before using the site. A parent or guardian may request deletion of data associated with a child's device by emailing randy@draw.audio with the visitor ID.

International data transfers

Servers are located in the United States. Data from users outside the United States is processed in the United States. Where applicable, standard data protection safeguards such as Standard Contractual Clauses are used.

Changes to this policy

This policy may be updated. Material changes will be noted in the application and the "Last updated" date will be revised.

Contact

For questions or requests related to this policy, email randy@draw.audio.