mashuplab.app

Privacy Policy

Last updated: June 15, 2026

mashuplab.app ("Mash Lab", "we", "us") is operated by Masi Services LLC, a New Jersey limited liability company. Mash Lab is a free, browser-based tool for making mashups of two songs. This policy explains what we process when you use the service and why. We've designed Mash Lab to need as little of your data as possible: there are no accounts, and the files you upload are processed temporarily and deleted automatically.

Information we process

• Files you upload. The audio or video files you provide, and the outputs we derive from them (separated stems, the synced mashup, rendered MP3s and reel videos). We process these only to provide the service to you.
• Technical data. Your IP address and basic request metadata (such as timestamps and the pages/endpoints you call), used to operate the service, apply rate limits, and prevent abuse. Our hosting and network providers keep standard server logs.
• No accounts. We don't ask you to register, and we don't collect your name, email, or payment information. If you choose to email us, we'll have whatever you put in that message.

How we use it

• To run the analysis, stem separation, beat-matching, effects, and export that the app performs.
• To keep the service available and secure (rate limiting, abuse and fraud prevention, debugging).

We do not sell your data, use your audio to train machine-learning models, or use it for advertising. We don't show ads or run third-party analytics or tracking on the site.

Retention and deletion

Your uploads and the files derived from them are stored only as long as needed to process your session. They are deleted automatically a short time after they're created (by default within about two hours), and we also make a best-effort attempt to delete them immediately when you close or leave the tab. Operational logs that may contain IP addresses are retained briefly for security and then rotated out.

Cookies

Mash Lab does not set tracking or advertising cookies and does not use browser storage for tracking. Our network provider (Cloudflare) may set strictly necessary cookies to provide security and protect the service from abuse.

Service providers

To run the service we rely on the following processors, who handle data on our behalf:

• Cloudflare — DNS, CDN, TLS, and security/abuse protection.
• Fly.io — hosting for the application/API.
• Modal — on-demand compute for audio/video processing.
• Upstash / Redis — short-lived session state and rate-limit counters.
• Cloudflare R2 — temporary storage of uploaded and rendered files.

Web fonts are served from our own domain, so loading the site does not send your data to any third-party font provider.

International transfers

The service is operated and processing takes place in the United States. If you access it from elsewhere, your data is transferred to and processed in the U.S.

Security

We use measures such as encryption in transit (HTTPS), restricted origin access, and short data retention to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Children

Mash Lab isn't directed to children under 13 (or under 16 in the EEA/UK), and we don't knowingly collect their data. If you believe a child has provided us data, contact us and we'll remove it.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. Because uploads are deleted automatically within a short window, most content is gone before a request would be needed — but you can contact us to exercise any rights.

Changes to this policy

We may update this policy from time to time. We'll revise the "last updated" date above, and significant changes will be reflected on this page.

Contact

Questions about privacy? Email [email protected].