Privacy

The short version

No account, no ads, no analytics, no tracking. pocketband doesn’t know who you are, and has no way to find out. The only thing that leaves your device is your songs, when they sync between your own devices.

On your device

Your songs and settings (the colour, the icon, haptics, the last song open) are kept on the device, in the app’s own storage, or in your browser’s for the web app. The web app uses no cookies.

Sync

Sync keeps your songs the same on your devices. On an iPhone, iPad or Mac it’s on from the start; on the web, once you turn it on. Your devices share a library on pocketband’s sync server, which keeps:

• the songs you made or changed, as their text, and a note of any you deleted (without the song);
• your devices, each by its kind only (“iphone”, “ipad”, “mac”, “web”), and when each was last seen;
• what lets your devices in: a scrambled (hashed) copy of each device’s key, and the library’s join key.

None of it says who you are: no name, no email, no phone number, no location. Your Apple devices find each other through your iCloud Keychain, which keeps the library’s id and join key end-to-end encrypted by Apple. A pairing code, for adding a device by hand, lasts 10 minutes and works once.

Deleting it

In settings, under sync, stop syncing then delete the library removes your library and every song in it from the server. A library is also deleted when its last device leaves it. Your songs stay on your devices either way.

The default songs

The apps ask the server for the latest default songs. That request carries nothing about you.

Who handles it

The sync server and this site run on Cloudflare, which sees the network address a request comes from, as any server must to answer it. pocketband uses it only to stop anyone trying a flood of pairing codes, and doesn’t keep it. Nothing is sold or shared with anyone.

Questions

Write to me at marctorrelles@gmail.com. If this page changes, the date above will too.