Privacy Policy
Last updated: March 18, 2026
1. Who We Are
Mixtuby (mixtuby.com) is a free web application that lets you create and play YouTube music playlists. The service is operated from Romania.
2. Information We Collect
Account data (if you register): email address, name (optional), and profile picture (if using Google Sign-In).
Usage data: playlists you create, app settings, and preferences.
Analytics data (with your consent): Google Analytics 4 collects anonymized usage statistics such as pages visited, session duration, browser type, approximate location (country/city level), and device type. This data is processed by Google under their Privacy Policy.
3. Legal Basis for Processing (GDPR)
We process your data under the following legal bases:
- Contract performance — to provide your account and sync playlists
- Consent — for analytics cookies (Google Analytics 4). You can accept or decline via the cookie banner.
- Legitimate interest — for essential session cookies and security (rate limiting)
4. Cookies & Local Storage
Essential cookies (always active):
_mixmusic_session— Rails session cookie for authenticationremember_user_token— persistent login (if you check "Remember me")
Analytics cookies (require consent):
_ga,_ga_*— Google Analytics 4 (loaded only after you click "Accept")
Third-party cookies:
- YouTube embedded player may set cookies when you play a video. These are governed by Google's Privacy Policy.
- YouTube may set advertising cookies (e.g., for ad personalization, frequency capping, view counting). Mixtuby does not control these — they are managed by Google.
Local storage (not cookies, no consent needed):
mixtuby-theme— your dark/light theme preferencemixtuby-settings— player settings (crossfade, speed, etc.)mixtuby-cookie-consent— your cookie consent choicepwa_installed— PWA installation state
5. How We Use Your Information
- Provide and maintain your account
- Sync your playlists across devices
- Send password reset emails when requested
- Understand how the service is used (analytics, only with consent)
- Protect the service from abuse (rate limiting)
6. Third-Party Services
- YouTube Embedded Player — streams content directly from YouTube. We do not download or store any audio/video.
- Google OAuth 2.0 — optional sign-in method. We receive your email and profile picture.
- Google Analytics 4 — anonymized usage analytics (only with your consent).
7. Data Sharing
We do not sell, trade, or share your personal information with third parties. We may disclose information only if required by law.
8. Data Retention
- Account data — kept until you delete your account
- Session cookies — expire when you close your browser (or 2 weeks for "Remember me")
- Analytics data — retained by Google for 14 months, then auto-deleted
- Shared mixes — kept until deleted by creator or 90 days if anonymous
9. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access — request a copy of your personal data
- Rectification — update or correct your information
- Erasure — delete your account and all associated data (via Profile Settings)
- Withdraw consent — decline analytics cookies at any time (clear localStorage or use browser settings)
- Data portability — export your playlists
- Lodge a complaint — with the Romanian Data Protection Authority (ANSPDCP) at dataprotection.ro
10. Children's Privacy
Mixtuby is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use after changes constitutes acceptance.
12. Contact
For privacy-related questions or to exercise your rights, contact us at privacy@mixtuby.com