What Catalog protects, and what it cannot

Last updated: September 26, 2026 Service: Catalog, available at catalog.stream Operator: Jose Miguel Lopez, an individual doing business as Raw Explicit, Miami, Florida, USA ("we," "us," "Raw Explicit")

This page exists because "your music is safe with us" is not a sentence anybody should have to take on faith. Below is what we actually do, what we deliberately do not do, and what no service of this kind can promise. If any of it changes, this page changes with it.

What we do not do with your audio

We do not train artificial intelligence on it. Not our own models, not anybody else's. Your recordings are not a dataset, they are not sold, licensed, or handed to a third party for that purpose or any other, and this is not a setting you have to find and switch off.

We do not listen to it for our own purposes. We look at your files when you ask us to — a support request you have sent us, or a fault we have to reproduce — and not otherwise.

We do not make it public. No recording in Catalog has a public address. Every playback URL is signed, short-lived, and minted only after we have checked that the person asking is allowed to hear it.

The licence we take, and why it is small

To store your music and play it back to the people you choose, we need your permission to hold a copy and transmit it. That permission is limited to exactly that: to provide the service you are using, and nothing else. It is not a licence to distribute, to sublicense, to create derivative works, to use your music in marketing, or to keep it after you leave.

You own your recordings and your compositions. Nothing you upload changes that, and nothing in our Terms asks you to share ownership. The full wording is in the [Terms of Service](/terms).

What we actually protect against

Nobody reaches your workspace without being let in. Access is decided in the database itself, on every single request, not by the screen you happen to be looking at. A person removed from a workspace loses access on their next request, not at the end of their session.

A release is private until you invite somebody. Not open-by-default with a switch to close it — closed, and the way in is somebody putting you there.

A shared link is a link you control. You can give it a password, an expiry, a limit on how many times it can be played, and you can revoke it while somebody is listening; the next track stops working. Revoking is immediate and permanent.

Audio does not download. There is no download button, no download URL, and no setting that produces one. The single exception is a Delivery Package, which you create deliberately for a named recipient, which contains only material you have approved, and every opening of which is recorded.

We log what happened to your links, and not who you are. Opens and plays are recorded so you can see interest in your music. IP addresses and device fingerprints are not stored.

What we cannot prevent, and will not pretend to

Anybody who can hear your music can record it. A phone held up to a speaker, software that captures the audio leaving a computer, a screen recording — these are outside the reach of any service that also lets people listen. Be suspicious of any service that tells you otherwise.

A password you share is a password you have shared. If the person you sent a link to forwards it, the link works for whoever received it. This is why links can expire, why they can be limited, and why you can revoke them.

A file you upload is a file we hold. We protect it, we do not mine it, and we will delete it when you ask. We cannot make it impossible for a court order, a subpoena, or a lawful demand to reach it — no provider can, and one claiming otherwise is describing something they cannot deliver.

We are a small operation. Catalog is run by one person. That is a reason to be honest with you about the above rather than a reason to hide it: you should weigh it, alongside the fact that your music is also stored with a major infrastructure provider rather than under a desk.

Leaving

Delete a workspace and its audio is removed from storage, not merely hidden. Delete your account and the same applies to everything only you had. We do not keep a copy for ourselves, and we do not need your permission to stop holding something you have told us to delete.

Telling us something is wrong

If you believe your music has been exposed, or you have found a way to reach something you should not be able to, write to us at the address in the [Terms of Service](/terms). We would much rather hear it from you than not hear it.