Privacy policy

The short version

Your device analyses the sound of your playing, and the sound is never stored or sent anywhere. Without an account, nothing you play leaves your device. If you sign in with Google, we keep your sessions on our server so they follow you from one device to another. If you buy Pro, Stripe handles the payment. There are no advertisements and no tracking across other sites. We count visits with a privacy-friendly service that sets no cookie and keeps no address.

Who is responsible

The controller of your personal data is Wabetune, Via Garibaldi 17, Varese, Italy. You can write to hello@wabetune.com about anything on this page.

What stays on your device

wabetune keeps on your device, in the browser's own storage: the settings you chose (the reference A, the tuning system and tonic, the transposition, how close counts as in tune), the sessions and chord progressions you have saved, and how much of today's two minutes of Spectrum you have used. Deleting the site's data from your browser removes all of it.

The microphone is used while you play. The page analyses the sound as it arrives, to find the pitch of each note. The browser holds a recording of the session you have just finished in memory for as long as you can replay it, then discards it. It is never saved and never sent.

If you sign in with Google

Signing in is optional, and is how a history reaches a second device. Google tells us your name, your email address and an identifier of your Google account. We do not receive your password, your contacts or anything else from your Google account.

What we store on our server when you are signed in:

your name, your email address and the Google identifier, which is how we recognise you the next time;
a record of each sign-in: a one-way hash of the sign-in token (never the token itself), when it was made and last used, when it expires, and the browser's identification string;
the sessions you have played: when each ended, the notes in it (which note, when, for how long, and how many cents from the target), the report and the settings it was measured under, which include the name your device gives its microphone;
the chord progressions you have saved;
if we gave you the paid plan without a payment, a short note of why and the date.

We use this to provide what you asked for: an archive that follows you, and the plan you have paid for. The legal basis is the contract between you and us.

Cookies

wabetune sets two cookies, both strictly necessary and both for signing in. One keeps you signed in and lasts up to 400 days (it ends when you sign out). The other lasts fifteen minutes and exists while you go to Google and back, to make sure the answer matches the request we sent. Both are flagged so that the page's scripts cannot read them, and the browser sends them only over a secure connection. We set no other cookie.

Counting visits

The pages of the site and the app load a small script from Umami (Umami Cloud) that counts visits: which page was opened, from which site you came, and in broad terms the browser, the device type, the language and the country. It sets no cookie, does not keep your IP address and does not follow you from one site to another, so it does not need a banner. The app also tells it, without any content, that something happened: a place in the app was opened (play, stats, tuner, setup, the paywall), Play Over or the metronome was started, a session was started or ended, the microphone was refused, the app was installed, the payment form was shown or a purchase went through, the day's free minutes of Spectrum ran out, a report was shared, the tour of the app was finished or skipped, a session was reopened or heard back, a language was chosen, or one of the settings (the tuning system, the level, the reference A, the transposition) was changed, with the value chosen. What you play, your notes, how long you practised, your sessions and your account are never part of it.

If you buy Pro

You pay on a form that Stripe provides. You give your card details to Stripe, and they never reach us. To prepare the payment we give Stripe your email address, so that the receipt goes to it, and an internal identifier of your account, so that the payment can be matched to it afterwards. We keep the identifier of the payment, its amount, currency and status, to know that you have paid and to handle a refund. The legal basis is the contract, and for the payment records the law that requires them to be kept.

Stripe is an independent controller of the data it handles for the payment. Its policy is at https://stripe.com/privacy.

Who else is involved

Google, for signing in: https://policies.google.com/privacy
Stripe, for payments: https://stripe.com/privacy
Railway, which hosts the server and the database.
Umami, for counting visits: https://umami.is/privacy

These companies may handle data outside the European Economic Area, under the safeguards they describe in their own terms, such as standard contractual clauses. We do not sell your data and we do not share it with anyone else. The fonts on this site are served by us, not by a font service.

How long we keep it

Your account and what is linked to it, until you ask for it to be deleted.
A session or a progression, until you delete it. When you delete one while signed in, its content is erased from our server and only a marker is left, with its identifier and date, so that another of your devices does not bring it back.
A sign-in record, until it expires or you sign out.
Payment records, for as long as the law requires accounting records to be kept.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, to receive it in a form you can take elsewhere, and you can object to its use. To delete your account and everything linked to it, write to hello@wabetune.com from the address you signed in with: we will erase it, apart from the payment records the law obliges us to keep. If you think we mishandled your data you can complain to the Italian data protection authority (Garante per la protezione dei dati personali, https://www.garanteprivacy.it) or to the authority of your own country.

Children

wabetune is not aimed at children under 14. A child under 14 needs a parent or guardian to create the account.

Changes

When this page changes in a way that matters, the date at the top changes with it, and the app shows you any change that affects what you agreed to before it applies.