Privacy Policy
Last updated 28 October 2026
This policy covers the Togeda studio at https://studio.togeda.app, this site (https://togeda.app, including the user guide), the Togeda Bridge app for Mac and Windows, and jams that the Session app uploads into Togeda.
In short
- We keep what Togeda needs to work: your account, your projects and the files you add to them.
- No ads, no analytics, no tracking cookies. We don't sell your data.
- We don't use your audio, video or projects to train AI models.
- Your projects are stored in the EU.
What we collect
Your account
You sign in with Google. We receive your email address, your name and an account ID from Google, through our sign-in provider Supabase. We never see your Google password.
The waitlist
When you join the waitlist we keep your email address and when you joined, only to let you in later. Signing in before you are let in puts your Google email address on the waitlist too.
Feedback
When you send feedback from a project we keep what you wrote with your account and the project you were in, to improve Togeda.
Your projects
Everything you make in a project is stored so that it can be shared and reopened from any computer: the arrangement, mix, automation, plug-in settings, comments, section names and the version history. We also store who is a member of each project and their role, the email addresses of people you invite, and share links (only a fingerprint of each link, not the link itself).
Your audio, video and files
Files you add are uploaded and stored as they are. We also make waveform overviews and compressed preview copies (Opus audio, a 720p copy of a picture track when you choose Share Copy) so projects open quickly.
Session app jams
When the host of a Session app room connects it to a Togeda project, the recorded tracks of that jam are uploaded into the project.
Plug-in names
When Togeda Bridge loads a plug-in, Togeda sends that plug-in's name, vendor, version, format, tags and the names of its controls, so we can draw controls for the most used plug-ins. It never sends who you are, your projects, audio or settings. Turn it off with Share plug-in control names in the Togeda Bridge settings of Track View.
Server logs
Our servers log requests (IP address, time, the page or address asked for, browser type) to keep Togeda secure and to fix problems.
On your computer
Togeda keeps some data in your browser: your sign-in session, settings such as panel layout and the last project you opened, the pairing with Togeda Bridge, and a local copy of your audio so projects open fast and keep playing offline. These are not tracking cookies. Clearing your browser's site data for studio.togeda.app removes them.
Togeda Bridge keeps its settings and plug-in scan results on your computer, and checks for updates at https://bridge.togeda.app.
Why we use it
- To run Togeda for you (performing our contract with you): your account, projects, files, sharing and sync.
- Our legitimate interests: keeping the service secure, fixing problems, and the plug-in names above, which you can turn off.
Who can see your projects
The people you add to a project, with the role you give them (edit, comment or view), and anyone you give a share link to. Signed-out visitors can only view, and only through a link. Turn a link off or reset it in the Share window at any time.
Service providers
We use these companies to run Togeda. They process data only on our behalf.
| Provider | What for | Where |
|---|---|---|
| Supabase | Sign-in and the database | EU |
| Railway | Servers for sync and the API | EU |
| Cloudflare | Hosting togeda.app and the studio, file storage, Togeda Bridge downloads and updates | Files stored in Western Europe; served worldwide |
| Sign in with Google; the Inter font on devices that have neither SF Pro nor Inter | USA |
Cloudflare and Google are US companies. Transfers to them rely on the EU-US Data Privacy Framework and the EU's Standard Contractual Clauses. When a device downloads the Inter font from Google Fonts, Google receives that device's IP address.
How long we keep it
- Account: until you ask us to delete it.
- Projects and files: until the owner deletes the project. Projects in Trash are kept until the owner restores them or asks us to delete them.
- Version history: automatic versions older than 30 days are thinned to one per day; named versions stay with the project.
- Invites: expire after 14 days.
- Waitlist: until you are let in and for as long as you have access, or until you ask us to remove you.
- Feedback: until you ask us to delete it, or with your account.
- Server logs: only as long as needed for security and troubleshooting.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Ask us and we answer within one month.
When we delete your account, we remove your name and email address and delete the projects you own. Your edits and comments in other people's projects stay there, without your name.
You can also complain to your data protection authority.
Children
Togeda is not meant for children under 16.
Security
All traffic is encrypted (HTTPS and secure WebSockets). Files are only handed out to signed-in members and valid share links. Share links and app codes are stored only as fingerprints. Togeda Bridge accepts connections only from the Togeda studio and only after you pair it.
Changes
When we change this policy, we update the date at the top. If a change matters for how your data is used, we tell you in Togeda before it applies.