According to a Foss Post report, Audacity was recently acquired by MuseScore, triggering an update to the app’s privacy page. This update includes information that the company may pass data to regulators in the United States, Russia and the European Economic Area – locations where it has servers and people working.
All your personal data is stored on our servers in the European Economic Area (EEA). However, from time to time we may share your personal data with our main office in Russia and our external counsel in the United States.
The changes continue by noting that the company could share data with entities it calls “third parties”, “advisers” or “potential buyers.”
The bad news continues, with real user IPs being logged and in a readable format for 24 hours before they are chopped, a move that’s odd for a music editing app.
The real IP addresses of the users remain for 1 day on Audacity’s servers before being hashed, and therefore convenient identification of users is possible if one of the mentioned governments sends a request for data. Things that shouldn’t have been possible with an offline audio editor.
It’s not immediately clear why these changes were made or why Audacity needs to track its users’ IP addresses, but it’s enough to have some users calling for a boycott of the app. Sadly, Audacity is currently one of the best music editing apps for Mac.