Mixel privacy policy

Effective: 13 November 2026

Mixel is a product of 0x1audio. This page explains what personal data we handle, why, who helps us, how long we keep it, and what you can do about it.

The short version

Your sounds stay on your Mac. Mixel indexes your folders where they are. Search in words and Find similar run on your Mac. We never receive your audio, including anything you record in Mixel, or what you search for.
Your account holds only what it needs: your email address, how you sign in, and your plan.
No ads, and we never sell your data.
Usage sharing on the Mac is off until you say yes.
You can export your data or delete your account yourself, at any time.

1. Who we are

The controller of your personal data (the person responsible for it under the GDPR) is:

Gabriele Pio Midulla, a sole trader trading as 0x1audio Italy Partita IVA 07440110828

Privacy questions and requests: support@0x1audio.com, with “Privacy” in the subject
General questions: hello@0x1audio.com
Security problems: security@0x1audio.com

We haven’t appointed a data protection officer, because the law doesn’t require one for what we do (GDPR, Art. 37). We’re established in the EU, so we don’t need an EU representative.

2. What stays on your Mac

Most of Mixel runs on your Mac and never talks to us.

On your Mac only	Details
Your Library	The folders you add, file names and paths, file details, tags, stars, notes, crates, duplicates and the index
Search in words and Find similar	The sound models run on your Mac. Your searches, anything you record to search with, and the “sound fingerprints” (embeddings) they make stay in Mixel’s folder
What Mixel learns from your searches	When you confirm a search result, Mixel may keep what you searched with on your Mac, to tune search for you. You can reset it in Settings. It’s never sent to us
Inbox and Voice Memos	Anything you capture or import stays on your Mac
What your assistant did	The log of what a connected AI assistant asked Mixel, kept on your Mac for 30 days
Feedback you haven’t sent	Drafts, feedback waiting for a connection (for up to 30 days), and the counts Mixel uses to decide when to ask its occasional question (how many days you used it, and how many searches found something)

We can’t see any of this, so we can’t export or delete it for you. You can: it lives in Mixel’s folder on your Mac, and removing the app and that folder removes it.

These can take Library data off your Mac, and each one is your choice:

An AI assistant you connect to Mixel, such as a chat app on your Mac (section 3.6).
Store apps you allow to use the internet (section 3.7).

3. What we process, and where it comes from

3.1 Your account

When you make a Mixel account, we keep:

your email address
an account id, and the id of your sign-in record at WorkOS (section 3.2)
when you made the account
if your account was made during the beta: whether it was on the waitlist or approved, and when, and that you’re a beta tester
your role (user, developer, reviewer or admin) and a history of role changes and approvals
your active sign-ins: when each started, when it ends, and how you proved it was you (for example “password” or “passkey”). The secret part of each sign-in is stored only as a one-way hash
command-line tokens you create with mixel login: the label you gave each one, and when it was created, last used and expires. The token itself is stored only as a one-way hash
a record of each time your account was linked to a sign-in by its email address
which version of the Terms of Service you agreed to, and when, including that you confirmed your age

3.2 Signing in

Sign-in is run for us by WorkOS (AuthKit). You type your password, use a passkey or an authenticator app, or choose Google, GitHub or Apple on WorkOS’s sign-in page, not ours.

WorkOS holds your email address, your password (as a hash), your passkeys and authenticator apps, and what Google, GitHub or Apple share when you sign in with them.
We never see your password, passkeys or authenticator codes.
To protect sign-ins, your IP address and browser details (user agent) go to WorkOS when you sign in, so it can stop bots and password guessing. Our sign-in step holds them for about 10 minutes while your sign-in finishes.
Signing in from the command line: we show the network address the request came from on the confirmation page, so you can check it’s you. That step forgets it after 10 minutes.
To stop abuse, we count attempts per network address for a short time (at most 24 hours).
Like every request, sign-ins also appear in our request logs, with your address shortened, for 30 days (section 3.12).

If you sign in with Google, GitHub or Apple, that company also knows you signed in. Its own privacy policy applies.

3.3 Your Macs

When you sign in on a Mac, Mixel registers that Mac with your account, so your account can list the Macs signed in to it and you can sign one out from the web. We keep a random id the app makes for this Mac; the Mac’s name as macOS shows it (if it contains your name, so will this); its model and chip type; the macOS version and the Mixel version; and when the Mac first and last checked in. The Mac’s hardware id never leaves your Mac. We keep this until you remove the Mac in your account or delete your account, and it’s in your data export. Legal basis: contract (Art. 6(1)(b)), as part of running your account.

3.5 What the Mac app sends over the internet

Mixel talks to the internet only for these things:

Signing in, and checking your sign-in is still valid.
The store catalogue, which it reads from our cloud.
Counting installs. When you install a store app, we record the app, and either your account (if you’re signed in) or a random id the app makes up (if you’re not). That id isn’t linked to you or your Mac. To stop people inflating counts, we briefly use your network address (for at most 24 hours).
Model downloads. The first time you set up search in words, Mixel downloads the sound models from models.0x1audio.com, served by Cloudflare. Like any download, this shares your IP address with Cloudflare. No account is needed and nothing about you is sent.
The new-version notice. At most every 6 hours, Mixel reads one small public file on 0x1audio.com to see whether a newer version exists. No cookies and nothing about you are sent; Cloudflare sees your IP address.
Downloads from GitHub. The app itself, its updates, official apps and the tools that run them (Python and uv) download from GitHub. GitHub sees your IP address, as any website does, under its own privacy policy.
Usage sharing, only if you say yes (section 3.10).
Feedback and answers, only when you send them. Before Mixel asks its occasional question, it checks with our cloud that the question is still open; that check sends nothing about you (section 3.11).

Each of these requests reaches Cloudflare and, for our cloud, our request logs, like any request on the internet (section 3.12).

3.6 AI assistants you connect

Mixel can let an AI assistant on your Mac (for example a chat app that supports MCP) search your Library and suggest crates. Nothing happens until you connect one in Settings, and you can disconnect it at any time.

When an assistant asks, Mixel answers it on your Mac. The answers can include sound titles, tags and folder names, which can identify a project or a client. If the assistant runs in the cloud, as most do, its maker will receive what the assistant reads, under that maker’s own terms and privacy policy. We don’t receive any of it. Choose an assistant you trust, and check its settings for whether it keeps or learns from your conversations.

3.7 The store, and apps by other developers

Installing apps. Some store apps are made by other people. Each app shows the permissions it asks for before you install it, and you choose whether to grant them. If an app asks to use the internet and you allow it, that app can send data to its developer. The developer is then responsible for that data under their own privacy policy.

If you publish apps:

GitHub connection. You connect your GitHub account so you can choose a repository. We keep your GitHub account id and username, and a GitHub access token, which we store encrypted. The token can only read public information: your profile, your public repositories, their branches and app.json.
Submissions. We keep what you submit: the app’s name and descriptions, tags, version, repository, branch and commit, your message to reviewers, the results of our automated checks, and the reviewers’ notes and decision.
What becomes public. When an app is accepted, its listing is public: name, descriptions, tags, version, the GitHub owner and repository, and the reviewed commit.

Reviewers and admins. We log every review action (accept, reject, note, feature, pin, sponsor, withdraw), who took it and when, so decisions can be checked later. Reviewers and admins must prove a second factor, and we keep the ids of the factors confirmed when their role was granted.

3.8 Plans and payments

Plus isn’t on sale yet, and nothing is sold. We keep whether your account has the founding price (Terms §8.1), and any Plus reservation an account made during the beta (none are made now). No payment company is involved.

3.9 Email

We send email about your account, and one email when Mixel Plus goes on sale. See Email from Mixel.

We send account notices: when your account is deleted, and similar notices about your account. We send them through Amazon SES in Milan, Italy.
WorkOS sends sign-in, verification and password-reset emails.
One email when Plus goes on sale. If your account has the founding price (Terms §8.1), we send you one email when Mixel Plus goes on sale, with your price. You can say no when you agree to the Terms (“Don’t email me when Mixel Plus goes on sale”), at any time in Account › Emails, or with the link in the email itself. We send it once, and not at all if you’ve said no.
Bounces and complaints. If a message to your address bounces, or you mark one as spam, we record the address, the reason and the date, and stop sending to it. We keep this record even after you delete your account, so we never email an address that asked us not to.

We don’t send newsletters. The Plus email above is the one exception; for anything else of that kind, we’ll ask first.

We’d like to know which features people use, so we can make Mixel better. We use PostHog, with the data held in the EU (Frankfurt, Germany). PostHog discards your IP address on arrival and doesn’t look up your location.

One switch, on our side. Everything in this section runs only while we’ve switched it on, and we switch it on only while PostHog’s data processing agreement with us is in place. While it’s off, nothing goes to PostHog from your Mac, from our web pages or from our cloud.

On your Mac: only if you say yes.

Mixel asks once, after your first folder is ready (or at the third launch, if you never add one). “Ask me later” asks again two launches later. You can change your answer any time in Settings › Privacy. Until you say yes, nothing is sent.
What’s sent: which features you use, as named events (for example “searched”, “added a folder”, “installed an app”), with counts in ranges, yes/no values and the names of official or reviewed store apps; how long getting your Library ready took; whether Mixel’s occasional question was shown, answered or closed (never your answers); the Mixel version, your macOS version and chip type; and a random id made for this install when you said yes.
Your first session. How your first session went (for example when you added your first folder and first found a sound by searching) is kept on your Mac until you answer, and sent with its times only if you say yes. If you say no, it’s deleted.
What’s never sent: your sounds, recordings, file or folder names, paths, searches, tags, or anything you type.
Our switch. Once you’ve said yes, Mixel asks our cloud whether usage sharing is switched on, when it opens and about once an hour, so we can pause it for everyone at once. That request carries nothing about you or your Library; like any request, it reaches Cloudflare and our request logs (section 3.12). While it’s paused, nothing is sent and what was waiting is deleted.
Turning it off stops sending at once and deletes the install id. Events already sent can’t be tied back to you, so we can’t find them to show or delete them.

On our cloud’s public pages (sign-in, sign-up, the command-line and desktop sign-in pages, the docs and the developers page), we count page views without cookies or anything stored in your browser. We record the page’s path (never its query), the site you came from, your browser details (the user-agent string, which names your browser, system and device type), and your timezone. To count each visitor once a day, PostHog makes a code from your IP address and browser details mixed with a value that changes every day, so it can’t follow you from one day to the next, and it doesn’t keep your IP address. Nothing loads on signed-in pages, and nothing runs if your browser sends Do Not Track or Global Privacy Control.

In our cloud, we count a few account events: an account was made, you agreed to the Terms, an account was let in from the waitlist. Each is sent with a scrambled id that only our server can link back to an account, never your email or IP address, and with fixed values only (such as the plan and currency). When you send feedback (section 3.11), we also count that it arrived and the choices you picked, never what you wrote, your email or your account, under a random code made for that count alone.

3.11 Support and feedback

When you write to us, we get your email address and whatever you include. Mail to our addresses is routed by Cloudflare to the founder’s own mailbox, an ordinary account with a consumer email service. It’s used under the provider’s own terms, not under a data processing agreement with us, so the provider handles those emails under its own privacy policy. Please don’t send us anything you wouldn’t put in an ordinary email. If you send us a log from the app, it may contain file and folder names; we use it only to help you, and we delete support emails 2 years after the conversation ends.

Feedback and questions in Mixel. You can send us feedback from the Mac app (Help › Send Feedback…) and from your account on the web. Now and then, Mixel also asks a short question about how it’s working for you. Answering is always optional.

What we get is only what you choose to send: your answers, and whatever is in the box when you press Send. From the Mac, feedback also carries your Mixel and macOS versions, unless you untick them. The occasional question carries your Mixel and macOS versions and how many sounds your Library holds, as a range; it says so before you answer. We also note where you sent it from (for example the Help menu).
Never attached: your audio, your files, what’s in your Library, or any id for your Mac. If you type or paste a path in the Mac app, your home folder is written as ”~” before it’s sent. No IP address is stored with your feedback; to stop abuse, we count sends per network address for at most a day.
Where it goes: to our own servers in the EU (AWS, Milan), not to PostHog. It isn’t connected to usage sharing: you can send feedback whether or not you share usage.
If you want a reply. If you tick “You can email me” or offer to join a call, we keep the email address you give, only to reply or to arrange the call. If you send it from your account on the web, we also link your account. We remove both after 6 months; the feedback stays, no longer linked to you. If we take you up on a call, we’ll first tell you how it’s recorded and kept, and you can still say no.
Otherwise it isn’t linked to you, so we can’t tell which feedback is yours unless you give us the email you used, or tell us when you sent it and what it said.
How long: 2 years, then it’s deleted (section 7).
Your rights: feedback linked to your account is in your data export. Deleting your account deletes feedback linked to it or sent with its email address. To have other feedback deleted, write to us (section 8).

Please don’t include anything you’d rather we didn’t keep.

3.12 Security and operations

To run the service safely we keep:

Request logs. Our servers log each request: the time, the address requested (sign-in codes are removed), the result, how long it took, your browser or app details, and a shortened IP address: the last part is cut off (an IPv4 address to its first three numbers, an IPv6 address to its first 48 bits), so it points to a network, not to your device. We keep them for 30 days, then they’re deleted.
Counts and timings of requests, kept as totals, not per person.
Short-lived counters keyed by network address, to slow down abuse (minutes to 24 hours).
Security records: sign-in links and role changes, kept for a year.
Encrypted database backups (section 7).

All traffic to our websites and cloud passes through Cloudflare, which protects them from attacks and processes your IP address to do so.

3.13 Our website

0x1audio.com sets no cookies and loads no scripts or content from other companies. It’s delivered by Cloudflare. If Cloudflare ever suspects an attack and shows a security check, it sets one cookie to remember that your browser passed it (section 9).

3.14 Who at Mixel sees your data

Mixel is run by its founder, with help from AI agents that write code and operate the cloud for him. When it’s needed to run, secure or support Mixel, the founder may see account data, request logs, feedback and support emails. The agents may see them too, but only when they run on Anthropic’s commercial service (section 5), whose terms forbid Anthropic from training its models on what they see.

4. Why we use your data, and the legal basis

The GDPR (Art. 6) says each use needs a legal basis. Here are ours.

What we do	Legal basis
Run your account, sign you in, keep your sign-ins, and let you use the store	Contract (Art. 6(1)(b)): it’s what you signed up for
Review, list and publish your apps	Contract (Art. 6(1)(b)): you asked us to publish
Keep your founding price, and any Plus reservation from the beta	Contract (Art. 6(1)(b))
Send account notices	Contract (Art. 6(1)(b))
Send the one “Plus is on sale” email to accounts with the founding price (section 3.9)	Telling our users about our own similar service, which the Italian Privacy Code allows without asking first, as long as you can say no at any time, for free (Art. 130(4))
Keep the bounce and complaint list	Legitimate interest (Art. 6(1)(f)): respecting people who don’t want our email, and keeping our email deliverable
Protect sign-ins, rate-limit, keep request and security logs and the review log, prevent fraud and abuse	Legitimate interest (Art. 6(1)(f)): keeping Mixel and its users safe, and the store trustworthy
Count installs	Legitimate interest (Art. 6(1)(f)): honest numbers in the store
Count page views on the cloud’s public pages, account events, and feedback arriving	Legitimate interest (Art. 6(1)(f)): knowing whether sign-up, plans and Mixel itself work, with no profile of you
Usage sharing on the Mac	Your consent (Art. 6(1)(a)), which you can withdraw at any time in Settings
Answer support requests	Contract (Art. 6(1)(b)), or legitimate interest (Art. 6(1)(f)) if you don’t have an account
Keep and read the feedback and answers you send	Legitimate interest (Art. 6(1)(f)): learning what works and what doesn’t from what people choose to tell us
Keep the email address you give with feedback, and link your account, to reply or arrange a call	Your consent (Art. 6(1)(a)), given by ticking the box. You can withdraw it at any time by writing to us, and we remove them
Let the founder’s AI agents help operate, secure and support Mixel (section 3.14)	Legitimate interest (Art. 6(1)(f)): running a one-person service reliably
Defend or bring legal claims	Legitimate interest (Art. 6(1)(f))

Where we rely on legitimate interest, we’ve weighed it against your rights, and you can object at any time (section 8).

What you must give us. To make an account you must give an email address, because we need it to sign you in and to reach you. Everything else is optional, and Mixel works on your Mac without an account.

No automated decisions about you. Our automated checks on app submissions only help reviewers. A person makes every review decision.

We don’t train AI models on your data. The sound models run on your Mac and send nothing back to us, and the AI service our agents use isn’t allowed to train on what they see (section 3.14).

We share data only with the companies that help us run Mixel, and only what each needs. The full, current list of the companies that process data for us is at 0x1audio.com/subprocessors. In short:

Processors (they work for us, under contract)

Company	What for	Where
Amazon Web Services EMEA SARL	Hosting the cloud, its database and logs; sending account email (SES)	Milan, Italy
Cloudflare, Inc.	The website, DNS, protecting traffic, email routing, model downloads, encrypted database copies	Global network; stored data in the EU
WorkOS, Inc.	Sign-in, bot and password-guessing protection, sign-in emails	United States
PostHog, Inc.	Usage counts (section 3.10)	Frankfurt, Germany
Anthropic, PBC	The AI service behind the agents that help run Mixel (section 3.14)	United States

Independent controllers (they decide for themselves)

The email service that hosts the founder’s mailbox, for the emails you send us (section 3.11).
GitHub, when you connect your GitHub account, and when the app downloads from GitHub.
Google, GitHub and Apple, if you choose to sign in with them.
The maker of an AI assistant you connect (section 3.6).
Developers of store apps you allow to use the internet (section 3.7).

Others

Authorities, only when the law requires it, and only what it requires.
A future owner of Mixel. If Mixel moves to a company (for example an Italian company the founder sets up), your data moves with it, under this policy. We’ll tell you first.

We don’t sell your data, and we don’t share it for advertising.

6. Transfers outside the EU

WorkOS and Anthropic are in the United States, and some of the other companies above may reach data from outside the EU for support or security. Where data leaves the EU, it’s protected by the European Commission’s Standard Contractual Clauses, or by the EU-US Data Privacy Framework for companies certified under it (GDPR, Art. 45 and 46). The list at 0x1audio.com/subprocessors says which applies to each. Write to us for a copy of the safeguards.

7. How long we keep data

Data	How long
Your account	Until you delete it
A new account whose owner never agrees to the Terms	Deleted 30 days after it was made. We email a week before, if the address can receive our email
Sign-ins	Until they end (at most 14 days), then they’re deleted
Command-line tokens	Until you revoke them, they expire (180 days) or you delete your account
Sign-in IP address and browser details	About 10 minutes in our sign-in step, and 30 days in our request logs (address shortened). WorkOS keeps sign-in event records for 90 days
Abuse counters (network address)	At most 24 hours
Request logs (shortened IP address)	30 days
Security records (sign-in links, role changes)	1 year
Install counts	While the app is listed. If you delete your account, your installs stay in the totals but become anonymous
Pending and rejected submissions	Until you delete your account
Published apps and their review record	While the app is listed. When you delete your account, you choose: withdraw your apps, or leave them listed (the listing keeps your GitHub username, which is public anyway, but not your account)
Review log (reviewers’ actions)	5 years after the app is withdrawn. A reviewer’s name is removed if they delete their account
Plus reservations made during the beta (none are made now)	Until the plan starts or you delete your account
Bounce and complaint list	As long as we send email, so we never write to that address again
Support emails	2 years after the conversation ends
Feedback and answers to questions in Mixel	2 years, then deleted. Deleted with your account if linked to it or sent with its email address
An email address or account link given with feedback	6 months, then removed from the feedback
What the AI agents see while working	Only for the short period Anthropic’s commercial terms set, then deleted by Anthropic
Usage events (if you said yes), page-view counts, and the counts of account events and feedback	Up to 12 months, then deleted
Database copies (our own backups of the cloud database)	30 days. Data from a deleted account leaves them within 30 days

8. Your rights

You have the right to:

access your data and get a copy
correct it if it’s wrong
delete it
restrict how we use it
take it with you in a machine-readable format (portability)
withdraw consent at any time, without affecting what happened before

Your right to object. You can object at any time to any use of your data that relies on legitimate interest (section 4), for reasons about your own situation. To stop the account event counts (section 3.10), write to support@0x1audio.com with “Object” in the subject, and we’ll stop counting your account’s events.

Do it yourself

Export: Account › Your data › Export. You get a zip of plain JSON files with everything your account holds in our cloud.
Delete: Account › Delete account. You’ll be asked to sign in again to confirm. Deleting signs out every device, deletes your sign-in at WorkOS (within 30 days if WorkOS doesn’t answer at first), and removes your data from our database at once and from our database copies within 30 days. Your Library and apps on your Mac are untouched.
Change your email, password or passkeys: on the sign-in page.
Usage sharing: Settings › Privacy on your Mac.
The “Plus is on sale” email: Account › Emails.

Or ask us

Write to support@0x1audio.com with “Privacy” in the subject. It’s free. We’ll answer within one month (in complex cases up to two more months, and we’ll tell you why). We may ask you to confirm the request from your account’s email address, so we know it’s really you.

For feedback that isn’t linked to your account, tell us the email address you gave with it or, if you gave none, roughly when you sent it and what it said. Without that we can’t tell which feedback is yours (GDPR, Art. 11).

Complaints

If you think we’ve handled your data wrongly, please tell us first. We’d like to fix it.

You also have the right to complain to a data protection authority. In Italy that’s the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, garanteprivacy.it. You can also complain to the authority where you live or work in the EU.

9. Cookies and similar technologies

We use only what’s needed to make Mixel work. No advertising or tracking cookies.

The law lets us use these without asking, because the service can’t work without them (Italian Privacy Code, Art. 122; ePrivacy Directive, Art. 5(3)).

Name	Where	What it does	How long
`ox1_session`	Mixel cloud (web)	Keeps you signed in	14 days, or until you sign out
`ox1_kit_state`	Mixel cloud (web)	Makes sure a sign-in finishes in the browser that started it (protects against forged sign-ins)	10 minutes
`cf_clearance`	`0x1audio.com` and the Mixel cloud, only when Cloudflare shows a security check	Set by Cloudflare to remember that your browser passed its security check, so it isn’t asked again	As long as the check is set to last (30 minutes by default)
WorkOS sign-in cookies	WorkOS’s sign-in page	Run the sign-in and protect it from bots	Set by WorkOS (WorkOS privacy)
App storage	The Mixel app on your Mac	Keeps you signed in	Until you sign out or remove the app

Two things count use without asking first, because they’re limited to plain statistics for us, with nothing that profiles you, follows you or is combined with other data. The Garante’s guidelines on cookies and other tracking tools (10 June 2021) treat this kind of minimised audience measurement like the strictly necessary tools above.

What	Where	What it does	How long
Page-view counts	The cloud’s public pages	Section 3.10. Nothing is stored in your browser; the daily visitor code changes every day	Counts kept up to 12 months
Install-count id	The Mixel app on your Mac, signed out	A random id with no link to you or your Mac, so each store install is counted once	Until you remove the app

What	Where	Default
Usage sharing (PostHog)	The Mac app	Off. You turn it on in Settings › Privacy
Any other analytics on our websites	None today	If we add any, we’ll ask first, with “Accept” and “Reject” equally easy

10. Children

You must be at least 14 to make a Mixel account. In Italy, from 14 you can consent to the use of your own data for online services (Italian Privacy Code, Art. 2-quinquies). If the law where you live sets a higher age, that age applies.
If you’re under 14, please don’t make an account. If we learn that someone under 14 has one, we’ll delete it. Parents can write to support@0x1audio.com.

The app’s features on your Mac don’t need an account and send us nothing about you.

11. Security

We protect your data with care that fits what we hold:

connections are encrypted (HTTPS)
sign-in secrets and tokens are stored only as one-way hashes; your GitHub token is encrypted
reviewers and admins must have proved a second factor recently to act
the cloud’s database account has only the rights it needs
copies of the cloud database are encrypted before they leave the server
store apps run with the permissions you grant, and installs are pinned to the exact version a reviewer read

No system is perfect. If a breach puts your data at risk, we’ll tell the Garante within 72 hours where the law requires it, and tell you without undue delay if you’re at high risk (GDPR, Art. 33 and 34).

Found a security problem? Please write to security@0x1audio.com.

12. Changes to this policy

When we change this policy, we update the date at the top. If a change matters, for example a new kind of data or a new company that processes it, we’ll tell you by email or in the app before it takes effect. Earlier versions stay available on request and in the website’s public history.

13. Contact

Gabriele Pio Midulla, a sole trader trading as 0x1audio · Italy · Partita IVA 07440110828 · support@0x1audio.com hello@0x1audio.com · support@0x1audio.com · security@0x1audio.com