Privacy Policy

Last updated: 2026-09-09

Bake'n Deck is built by one person and does not want your data. This page explains, per product, what leaves your machine.

Bake'n Deck for Mac (App Store app)

The app collects no personal data, no usage analytics and no crash reports.
All audio analysis and file processing happens on your Mac. Nothing is uploaded anywhere.
The app makes no network connections. Updates are delivered by the Mac App Store.
Files and folders you pick are accessed only for the operation you start. The app remembers your chosen folders locally using macOS security-scoped bookmarks so you do not have to pick them again; you can forget them in Settings.

Processing is fully local. Audio files, rekordbox XML exports and reports never leave your computer.
The baken headroom subcommand checks GitHub once a day for a newer release by requesting https://api.github.com/repos/M-Igashi/baken/releases/latest. GitHub receives your IP address as with any web request; baken sends no identifier of its own. Disable it with --no-update-check or the BAKEN_NO_UPDATE_CHECK environment variable. rbsort and cdjsafe never connect to the network.

Hosted on Cloudflare Workers. Cloudflare processes request logs (IP address, user agent) to serve and protect the site under its own privacy policy.
Uses Cloudflare Web Analytics, which is cookie-free and does not fingerprint or track visitors across sites. It records aggregate page views only.
No cookies, no advertising, no third-party trackers.

The form at /support/new has no name field and no email field, and takes no attachments. It cannot collect contact details because there is nowhere to put them.
What you write becomes a public GitHub issue under M-Igashi/baken, world-readable and permanent. You see the exact text before it is posted, and it is held for ten minutes first, so withdrawing it leaves nothing behind.
Home folder names in any path you paste are replaced with [redacted] before posting. Text that looks like an email address, phone number, bank account or payment card is refused outright.
The only thing kept is a random ticket token pointing at an issue number. It is deleted after 180 days. There is no account, no cookie, and no way to trace a ticket back to a person.
Anti-spam counters are keyed by a salted hash of your IP address and expire within the hour; the address itself is never written down. The form uses Cloudflare Turnstile, which is cookie-free and does not track you across sites.

The form at /support/private is for what must not be public: an App Store receipt or purchase question, a request to delete something already posted, or a privacy question. Nothing sent through it reaches GitHub, and none of it is published.
It is the one place on this site that asks for an email address, because it is the only way a reply can reach you: there is no ticket page here. The address is used to answer you and for nothing else. It is not added to any list and there is nothing to unsubscribe from.
Your message is relayed straight to a private mailbox and is not stored on this site: not in the browser, not in our storage, not in any log. Once it is sent, the only copy is the one in that mailbox.
The message is relayed by Mailjet to an address on this domain, which Cloudflare Email Routing then forwards to a Google mailbox. Mailjet, Cloudflare and Google each handle it in transit under their own privacy policies, exactly as they would for any email you sent yourself. Nobody else sees it.
Text that looks like a bank account or a payment card is refused outright, and home folder names in pasted paths are replaced with [redacted], the same as on the public form. An email address is the one thing not refused here, since the form asks for one.
The same Turnstile check and the same salted, hourly-expiring IP counters apply. There is no confirmation email, so the address you type is echoed back on the confirmation screen for you to check.

Questions about this policy: use the support form, open an issue at github.com/M-Igashi/baken/issues, or use the private form if you would rather not ask publicly.