The allegations, first published by tech site Fosspot, have raged on social media and prompted the company to revise the new privacy Ts & Cs.
Audacity is among the most popular audio editing software tools available, boasting at least 100 million users globally.
In April this year, the platform wash purchased by Muse Group, a Russian-headquartered firm which counts Ultimate Guitar and Staffpad among the companies under its umbrella.
“Real IP addresses of users remain for 1 day on Audacity’s servers before they are hashed, and hence, practical user identification is possible if one of the mentioned governments sends a data request,” the post read.
“One would not expect an offline desktop application to be collecting such data, phoning home and then handing that data to governments around the world whenever they see fit,” it added.
The new policy also restricted users under the age of 13 from using the platform. This, Fosspot noted, is a violation of the GPL licence under which Audacity is released.
The Muse Group has since confirmed the changes to its revised Ts & Cs, insisting that the platform collects a “very limited” volume of user data.
Daniel Ray, Head of Strategy at Muse Group, took to GitHub to clarify the situation. Ray confirmed that the firm is working closely with its legal team to revise the policy and “more clearly communicate” its Ts and Cs.
So where does this leave Audacity users?
According to Ray, the Muse Group doesn’t currently sell user data it collects, nor does it share it with third parties
With regard to the data Audacity does collect, Ray appeared keen to emphasise that this remains limited and only includes IP addresses, basic system info and error report data, which is optional.
IP addresses collected by the platform are “pseudonymised and irretrievable after 24 hours,” he added.
Data sharing with regulators and law enforcement was a key concern for users initially, which Ray said the company will only do if “compelled by a court of law in a jurisdiction that we serve”.
- DIGIT Deal Roundup Column | June 2021 edition
- Trump lawsuit targets tech giants over frozen accounts
- Crypto mining scam apps charge users to do nothing
Despite the Muse Group’s attempts to alleviate concerns, members of the open-source community weren’t satisfied, with some still pushing for a fork of the app that removes data collection requirements.
Some users on GitHub and Reddit appeared unwilling to accept the firm’s response. One popular comment on GitHub said: “Do you expect any trust from the community? MUSE still does not understand open source software at a fundamental level.
“I am holding out for a fork to gain momentum, and will stay on pre-MUSE Audacity until then.”
Another suggested the Muse Group’s response was the final straw for many users.