The short version
Playing is anonymous. Your songs, scores, settings and pad maps live in your browser and are never sent to us.
An account is needed only for Pro. It stores the minimum needed to recognise you and to know whether a subscription is active.
Payments are handled by Polar, our merchant of record. We never see card numbers.
No analytics cookies, no advertising, no third-party scripts on this site.
What the account stores
Your email address and display name, as provided by the sign-in method you chose.
The identifiers of the sign-in providers linked to the account (Google, Discord, or email link).
Your subscription status: plan, period and whether it is active, as reported by Polar.
The browsers you are signed in on, so that the account page can list them and sign them out. Up to five are kept; the oldest is signed out when a sixth signs in.
Why
To sign you in, to turn Pro on in any browser you sign in on, and to answer support requests about your subscription. To do that we use a few service providers who process the data on our behalf: Resend sends the sign-in email links, DigitalOcean hosts the app and its database, and Better Auth provides the authentication service, including a hosted dashboard that receives sign-in and session events.
Usage statistics
We count page visits, clicks on the main buttons and a few actions in the app (which song is played and on which input, how many songs a library scan adds, settings changed, the buy dialog opened, a checkout started or completed, the sign-in dialog opened, a sign-in started or completed) to learn what works. Counting uses Umami, without cookies, and the requests go through our own server.
What is sent: the page or app screen, the song played as its artist and title (never file names, folders or anything else from your library), the name of your MIDI device, whether your browser can run the app and whether MIDI access was allowed, the name (never the message) of an error that stopped the app, whether you are signed in and on which plan (never who you are), the referring site, browser, operating system, device type, screen size and language. Our server passes your IP address to Umami, which works out the country from it and does not store the address. Nothing in the statistics identifies you or links them to your account. Umami (Umami Software, Inc.) stores them on our behalf.
Retention
Account data is kept while the account exists. Deleting the account removes it within 30 days. Invoices are kept by Polar for as long as tax law requires.
Export and delete
The account page has Export data, which downloads everything stored about you as a JSON file, and Delete account, which removes it. You can also write to us through the contact page.
Billing data
Polar Software Inc. is the merchant of record. Polar collects the payment details, billing address and tax information needed to process the purchase, issues the invoice and handles refunds. Polar's privacy policy applies to that data.
Cookies and storage
The marketing site sets no cookies. The app keeps your library index, scores and settings in the browser's own storage, plus a signed-in session cookie when you have an account. A dismissed language banner is remembered in local storage. Usage statistics use no cookies and no local storage.
Contact
Questions about privacy? Use the contact page.
Messages sent through the contact form pass through Web3Forms, which forwards them to us by email; we keep them only as long as needed to answer.