illmus

Privacy Policy

Last updated: 2026-08-30

This Privacy Policy explains what data illmus collects, why, and what we do with it. illmus is a free music player provided by illusd.com and is designed to collect as little personal data as possible.

1. Data We Collect

  • Account: Your email address, hashed password, and (for Google / Apple sign-in) the basic profile information returned by the provider (name, avatar URL).
  • Uploads: The audio files you upload and their derived metadata (title, artist, duration, cover art URL, lyrics). Audio files are stored privately and accessible only to you via short-lived signed URLs.
  • Passkeys: The public key and credential identifier of any passkey you register. We never see or store your device's private key.
  • Playback activity: Which of your own tracks you played and when, used to power Recently Played and Liked Songs.
  • Security: A reCAPTCHA token generated during sign-in and account creation to help us detect abuse. Google may collect additional data as described in its Privacy Policy.

2. What We Don't Collect

illmus does not run behavioural advertising, does not sell your data, and does not track you across other websites. We do not fingerprint your browser beyond what reCAPTCHA requires.

3. How We Use Data

We use your data solely to provide the Service: authenticating you, storing your uploads, matching them against Genius, streaming them back, and providing the library, playback history and playlists features.

4. Third-Party Services

  • Genius (genius.com): Track titles, artists and song IDs you search for are sent to Genius.
  • Google reCAPTCHA: Used to protect sign-in and sign-up forms.
  • OAuth providers (Google, Apple): Used only when you choose to sign in with them.

5. Data Retention

Your uploads and account data are kept until you delete them. Deleting your account permanently removes your uploaded audio files, playlists, liked tracks and playback history.

6. Security

Data is transmitted over TLS. Uploaded audio files are stored in a private bucket protected by row-level authorization — only you can generate a streaming URL for your files.

7. Your Rights

You may access, edit, or delete your data at any time from Settings, or by contacting us via illusd.com.

8. Changes

We may update this policy. Material changes will be surfaced in the app before they take effect.