Privacy notice (draft for the test version)

Run by Adam Till, a sole trader in the UK. Contact: [email to add before launch].

What we keep

• Waitlist: your email and, if you tell us, the gear you play. Used only to email you about the launch. Lawful basis: your consent; untick or email us to be removed.
• Settings requests: the song and the list of gear you picked, plus a random id stored in your browser so the free version can count songs. No name or email is attached.
• Account (optional): if you sign in, your email address, the rigs you save and the songs you look up, so they're on every device. Lawful basis: providing the service you asked for. Delete it all at any time from the Account page ("Delete my account"): that removes your email, rigs, songs and sign-in straight away, and signs you out on every device. Copies in our encrypted backups are overwritten within 35 days.
• Feedback you choose to send about a song. It isn't linked to your account.
• Abuse limits: to stop one person using up the free AI or flooding sign-in emails, the server counts requests per day under a code made from your IP address (with a salt that changes daily) and, for sign-in codes, a one-way hash of the email address. These counts are deleted after 2 days. Lawful basis: our legitimate interest in keeping the service available and safe.
• Visit counts: when a page opens, the server turns your IP address and browser type into a code that changes every day and can't be traced back to you, then counts the codes to see how many people use the site, which pages they open, the site that sent them (its name only) and whether they use a phone, tablet or computer. Your IP address itself is not stored, in these counts or in our server logs, nothing is saved on your device for this, and the counts are deleted after 90 days. Server logs (without IP addresses) are kept for up to 90 days to fix problems. Lawful basis: our legitimate interest in knowing whether the site is useful.

Who processes it

Amazon Web Services (hosting, storage, sign-in and sign-in emails, London region) and Anthropic (the AI model that works out settings; our server sends it only the song and the gear, never your email or IP address, and Anthropic doesn't use API requests to train its models). Anthropic may process these requests in the United States, under the UK's approved data transfer terms; since no personal details are in them, this is about the song and gear only. Both act under data processing terms.

Tuner

The tuner listens through your microphone only while it is open. The sound is processed on your device and is never recorded or sent anywhere.

Cookies and storage

No cookies at all, and no advertising or tracking. Your rig, songs, a random id and, if you sign in, your sign-in tokens are kept in your browser's local storage so the app works; clear your browser data or sign out to remove them.

Your rights

You can ask to see or delete your data at any time, and complain to the ICO (ico.org.uk).