Trust & Security
How FloorTest handles unreleased music today.
Your files
- Only the receiver you sent a track to can play or download it. Files are never listed publicly or shared with anyone else.
- Files are checked for valid WAV or MP3 structure before they're accepted, up to 250 MB. Anything else is rejected.
- Uploads aren't yet scanned by an antivirus engine. That's planned before general availability.
How long we keep them
- Tracks a receiver hasn't decided on are deleted 90 days after delivery.
- Tracks a receiver marks “could be better” are deleted 30 days later.
- Tracks a receiver keeps stay until they delete them.
What senders are told
- Listened: played for at least 30 seconds, or a quarter of the track if it's shorter (30 seconds at most).
- Downloaded: the original file finished downloading.
- Replied: the receiver sent you a message.
- Keep and could-be-better decisions are private to the receiver and never shared.
Protecting receivers
- Each connection can send 10 tracks an hour, and each email address 5 a day, to any one link.
- Senders confirm their email address. Receivers see whether a sender is verified.
- Receivers can block senders and set closing dates on each callout.
Accounts
- Passwords are stored as salted scrypt hashes. Sessions use HTTP-only cookies.
- Senders don't need an account. Their name and email are used only for receipts and updates about their tracks.