← Back to Stalak

Privacy and cookies

In short: Stalak does not receive your videos or your sound, except the sound of a part when you use “Auto transcription” (it is not kept) and, on Creator Plus, the projects that save to your account. All the editing and the export happen in your browser, on your device. You can use Stalak without an account. On Free, if you choose to watch an ad to remove the watermark, Google serves that ad (see “Ads and cookies”). We don’t sell your personal information for money. US residents: see Your US privacy rights and Your Privacy Choices.

What stays on your device

Your sound, your takes, your lyrics and the exported videos. The site keeps a few settings in your browser (local storage): the lyrics style, the synced lyrics of each sound, the chosen mode, the language, your privacy choices, a few technical options. You can erase them by clearing the site’s data in your browser.

Your account (if you create one)

You only need an account to subscribe. We then keep: your email address, your language, the country you signed up from (worked out by Cloudflare from your connection at that moment; not the city or the IP address, and it isn’t updated afterwards), and if you add them your display name, your profile photo and your password (never in plain text: only a cryptographic hash). To sign you in, we also keep the codes sent by email (as a hash, erased after use or after 10 minutes) and a sign-in session (a “stalak_s” cookie needed for the site to work, valid 60 days, no ads or tracking). If you sign in with Google, Google sends us your email address, your name and your profile photo.

If you subscribe, we receive from Paddle the state of your subscription (plan, active, cancelled, renewal date) and a customer ID, then the amount of each payment and each refund (for our accounts). We never see your card.

Online saving (Stalak Creator Plus). Your projects save to your account automatically: the song, takes, lyrics and edit of each project, with a small picture of the edit used as its cover in the Gallery, are kept privately in your account (up to 100 GB): only you can reach them. You can delete a project at any time in the Gallery (account menu, top right). A project you haven’t opened for 6 months is deleted, after a reminder email sent at least 14 days before.

This data is only used to run your account and subscription (performance of the contract), except the country, which only feeds our own statistics (where Stalak is used; legitimate interest). It is kept as long as your account exists; when you delete your account from the Account page, it is erased immediately.

Ads and cookies

When there is an ad. Only on Free, and only if you choose “Watch an ad to remove the watermark”. Before that choice, no ad is loaded. With Pro or Creator Plus, there are never any ads.

Who serves the ad. Google (Google Ad Manager) picks and shows the ad, with its advertising partners. To do this, your browser sends Google technical information: IP address, browser and device type, the Stalak page, and the fact that you watched the ad to the end. Google may also read or set advertising cookies and identifiers, depending on your choices below. Stalak only gets from Google the “ad finished” signal that removes the watermark; we don’t see your ad profile or your clicks on the ad.

In the United States, unless you opt out, Google and its partners may use these cookies and identifiers to show you ads based on your interests. Some US state laws call this “selling” or “sharing” personal information for targeted (“cross-context behavioral”) advertising. You can opt out anytime: see Your Privacy Choices. If you opt out, you can still watch an ad to remove the watermark; Google then serves a non-personalized ad.

In Europe (European Union, European Economic Area), the United Kingdom and Switzerland, a consent window asks you first. It offers “Accept all”, “Reject all” (as easy as accepting) and “Customize”, with the list of Google’s partners. If you accept, Google and its partners may use cookies and identifiers to measure the ad, fight fraud and show you ads based on your interests. If you reject, you can still watch an ad: Google then serves a non-personalized or “limited” ad, which doesn’t use advertising cookies; fewer ads may be available. If you are under 15, ask a parent before accepting advertising cookies: you can also just reject them. Your choice is kept for 6 months at most, then you’re asked again. Legal basis: your consent (for cookies and personalized ads); for limited ads, our interest in funding the free plan.

To learn how Google uses this data: How Google uses information from sites or apps that use our services. You can also set your preferences in My Ad Center.

Other cookies. Apart from ads, the site only uses the “stalak_s” sign-in cookie (if you have an account) and the local storage described above, which are needed for it to work.

Your Privacy Choices (opt out of sale or sharing)

Wherever you live, you can stop Google and its partners from using your information for targeted ads on Stalak:

Your opt-out applies to the browser you use (and to your account if you’re signed in). You don’t need an account to opt out, and opting out doesn’t change anything else: you can still use Stalak and watch ads to remove the watermark. We don’t knowingly sell or share the personal information of anyone under 16 for targeted ads.

Your US privacy rights

This section is for residents of California and of other US states with consumer privacy laws (for example Colorado, Connecticut, Virginia, Texas, Oregon). It sums up the information above.

Your rights: to know what we collect and get a copy, to correct it, to delete it, to opt out of sale or sharing (see above), and not to be treated differently for using these rights (same prices, same service). To use them, email [email protected] from your account’s email address (or tell us how to reach you if you don’t have an account). We may ask a few questions to confirm it’s you, and answer within 45 days. You can use an authorized agent, who must show your written permission. If we refuse your request, you can appeal by replying to our answer; if we still refuse, you can contact your state’s attorney general.

Children

Stalak is a general-audience service and isn’t directed to children under 13. We don’t knowingly collect personal information from children under 13, and we don’t want ads on Stalak to be personalized for them. If you are a parent or guardian and think your child under 13 gave us personal information (for example by creating an account), email [email protected]: we’ll delete it.

Our service providers

Stalak is run from France and some of these providers are in the United States: your data may be processed in both. For people in Europe, transfers are covered by the safeguards of the GDPR (standard contractual clauses or the Data Privacy Framework).

What goes through our services

The site is hosted by Cloudflare, which processes the technical information needed to show the pages (IP address, browser), as for any website.

Automatic lyrics (Stalak Pro and Creator Plus). When you tap “Write my lyrics”, the sound of the chosen part (mono, reduced quality, without the videos) is sent to Cloudflare Workers AI to write the lyrics, which come back to your device. Neither the sound nor the lyrics are kept by Stalak; we only count, per day, the number of transcriptions and seconds of sound (for the usage limits), erased with your account.

Help assistant. When you ask the help ice cube a question, your question, the last messages of the conversation and a little info about the screen (step, messages shown, file names, browser type, end of the technical log) are sent to Cloudflare Workers AI, which writes the answer. Stalak keeps neither the questions nor the answers; only counters (per connection, without the IP address in clear, kept briefly, usually one to two days) are used for the usage limits. The answers are written by an AI and can be wrong: never type a password or a code there.

Visit statistics. While the site is open, your page sends a sign of life about every 5 minutes: a random number drawn when the page opens and the site’s language. With it, we record the country the connection comes from, as worked out by Cloudflare at that moment (two letters, like “US”): never the city, the region or the IP address. There is no cookie and no account in it: it is only used to count visits, the visitors on the site right now and the countries they come from. It is kept for 90 days.

Usage counters. A few steps of the app add 1 to a daily counter (for example “video exported”, “ad watched”, “plans opened”, or the kind of error when an export fails). These counters hold no cookie, no account and nothing that identifies a person or a video: only the day and the total.

Anti-robot check. On “Create an account” and “Forgot password”, a Cloudflare Turnstile check may run to block robots that send emails to addresses that aren’t theirs. Cloudflare then processes technical information about your browser and connection (including the IP address) to tell a person from a robot, without advertising cookies.

Limits per connection. To stop abuse, some counts per connection (visits, questions to the help assistant, events) use a scrambled (hashed) form of the IP address, never the address in clear, and are kept briefly.

Help

If you write to us for help, you can send us the “technical info” (button in the help bubble): it contains the browser type, the names of your files and technical messages, nothing else. We use it only to fix your problem.

“Talk to a human” (Stalak Creator Plus). In the help bubble, you can write to the team. We keep your messages, our answers, your account’s email address and a little info about the screen at your first message (step, messages shown, file names, browser type), to answer you. If you have left the page, the answer is sent to you by email. Your conversation is erased 6 months after the last message, with your account if you delete it, or sooner on request.

Your rights in Europe

For any question about your data, or to exercise your rights (access, erasure, objection, withdrawing your consent…): [email protected]. You can also contact the CNIL, the French data protection authority (cnil.fr), or your local authority.

Last updated: November 1, 2026