Privacy Policy

Effective date: 9 April 2025  ·  Last updated: 9 April 2025

boots.list ("the app", "we", "our") is a macOS application built by Fraser Muir. This policy explains what personal data we collect, how we use it, and your rights in relation to it.

The short version: we collect only what we need to run your account. Your Rekordbox library never leaves your Mac.

1. What we collect

When you create an account or sign in, we collect:

• Email address — used to identify your account and send password-reset emails if you use email/password sign-in.
• Display name (optional) — a name you choose to appear in the app. You can leave this blank.
• Sign-in provider metadata — if you use Sign in with Apple or Sign in with Google, we receive a unique identifier and, optionally, a name from that provider. We do not receive your Apple or Google password.

We also store the following app preferences locally on your Mac using macOS UserDefaults:

• Whether you have completed the in-app tutorial.
• Whether you have chosen to stay signed in.
• Security-scoped bookmarks for the music folders you have granted the app access to.

2. What we do not collect

• Your Rekordbox library. The XML file you import is parsed entirely on your device. Track titles, BPM values, file paths, and genre tags never leave your Mac and are never sent to our servers.
• Generated playlists. Playlist history is stored locally on your device only.
• Analytics or crash data. We do not embed any analytics SDK, ad network, or crash-reporting service.
• Location data. We do not collect or access your location.

3. How we use your data

We use your email address and display name solely to:

• Create and manage your boots.list account.
• Allow you to sign in and restore your session across devices.
• Send transactional emails you request (e.g. password reset).

We do not use your data for advertising, profiling, or any purpose beyond operating the app.

4. Data storage and third parties

Account data (email address, display name, sign-in tokens) is stored using Supabase, a managed backend platform. Supabase stores data on servers in your selected region and operates under its own privacy policy.

We do not sell, rent, or share your personal data with any other third parties.

5. Data retention

Your account data is retained for as long as your account is active. If you delete your account, all associated personal data is permanently removed from our systems within 30 days.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict how we process your data.

To exercise any of these rights, email us at our support form. We will respond within 30 days.

7. Children

boots.list is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Reach us at our support form.