Effective date: October 29, 2026
MetaSync is part of the SoulSync project: free, open-source software by BoulderBadgeDad. This policy covers the online services: the MetaSync portal at metasync.ssync.net, SIN (the SoulSync Intelligence Network), and the metadata network relay. SoulSync and MetaSync themselves run on your own machine, under your control; this policy is about the services they can connect to.
Sign-in is handled by Google or GitHub. When you sign in, that provider sends us your name, email address, and profile picture. We use them only to create and run your portal account and to show you your keys. We never receive or store your Google or GitHub password, and we do not store their access tokens.
When you create a key in the portal, the raw key is shown to you once. We store a SHA-256 fingerprint (a hash) of it, plus its first few characters so you can tell your keys apart; the key itself can never be read back or recovered from our database. You can revoke your keys in the portal at any time; revoking stops the key from working, though its fingerprint record is kept. A key works only from the node you bind it to, and unbinding a node removes that node's access, effective on its next request.
Joining SIN is optional and off by default. A node that joins sends one report per week for the week that just ended: anonymous counts of library activity signals, for example how many releases were wishlisted, added, downloaded, kept, or listened to, identified by MusicBrainz IDs rather than names (listening counts are a separate opt-in, off by default). Reports are authenticated with your node's key so the pool knows a real node is reporting, but the counts are not attached to your portal account, and reports are counted on arrival rather than stored. A count is published only once at least 15 different nodes have reported the same item, which keeps published data from pointing back at any single install. Nothing is sold, and nothing is shared with advertisers. SIN exists to build community charts that enrich SoulSync itself.
The metadata network's servers store no library metadata. The relay is a switchboard: it forwards signed questions between nodes that are online and returns answers that are sealed (encrypted to the node that asked), so the relay cannot read the answers and keeps no message content. The answers come from other users' nodes, out of their own libraries, and your own node decides which questions it answers and which answers it trusts.
The portal uses only the cookies needed to keep you signed in. There are no advertising cookies and no third-party trackers.
Your portal account holds your sign-in details and, for each key, its label, its first characters, its fingerprint, and when it was last used. For a key bound to one of your nodes, or a node asking to bind to it, it also holds that node's public key and fingerprint. You can revoke your keys in the portal at any time. To delete your account entirely, email broque.n.roll@gmail.com and we will remove it. The anonymous SIN counts that have already been combined into past tallies cannot be separated back out; that is what makes them anonymous.
If this policy changes, the new version will be posted on this page with a new effective date.
Questions about any of this: broque.n.roll@gmail.com.