Privacy policy

Last updated: 2026-05-03

lyrictok turns audio + lyrics into lyric videos. We try to collect as little personal data as we can — what's listed below is the full set.

What we collect

• Email address. Only when you sign in. We use it to send you the magic-link sign-in email and (eventually) render- complete notifications. Nothing else — no marketing, no list sharing.
• Audio, lyrics, and cover images you upload. Stored on Cloudflare R2 alongside the transcript and waveform we generate from them. Used only to render your videos.
• Editor settings + render history. The choices you make in the sidebar (font, colors, aspect ratio, etc.) and the renders you submit — kept so the editor remembers where you left off and so you can re-download past renders.
• Payment metadata. When you buy credits, Stripe processes the card and tells us how many credits to grant. We never see card numbers or CVCs — those go straight to Stripe. We store the Stripe payment-intent ID for reconciliation.
• Session cookie. A signed UUID, no tracking tokens. Lets your browser pick up where you left off.

What we don't collect

• No third-party analytics (Google Analytics, Meta pixel, etc.).
• No advertising trackers.
• No data brokers.

Who we share data with

Only the service providers we need to run the product:

• Cloudflare — R2 object storage for your audio, lyrics, and rendered MP4s.
• Stripe — payment processing.
• Postmark — sign-in emails.
• Hostinger — web hosting.

All transcription happens on our own infrastructure — your audio is not sent to OpenAI / Google / anyone else for processing.

How long we keep things

• Uploaded audio + transcripts + waveforms: as long as your account is active, then 30 days after you delete it.
• Rendered MP4s: as long as your account is active.
• Anonymous-session uploads (you never signed up): 7 days, then deleted automatically.
• Email + payment ledger: kept for as long as legally required (US tax retention is generally 7 years).

Your rights

Email [email protected] and we will, within a reasonable time:

• Send you a copy of everything we have on you.
• Delete your account and uploads.
• Correct anything inaccurate.

Cookies

We use one cookie: lyrictok_session. It contains a signed UUID — nothing else. It expires after 30 days of inactivity. No cookies for analytics or advertising.

Changes to this policy

If anything material changes, we'll update the date at the top and, if you have an account, send you an email about it.

Contact

Email [email protected] with any privacy question — we read everything.