Pianory
Privacy Policy
Last updated:
Pianory is a personal project. I built it because I'm learning piano myself, and I want it to be a quiet place with no ads and no tracking.
This page explains, in plain words, what Pianory stores, where it lives, and how you stay in control of it.
Using Pianory without an account
You can use Pianory without signing in. Your songs, lists, learning progress and settings then stay in your browser on your device (IndexedDB and localStorage). None of it is sent to the server.
Clearing this site's data in your browser removes it.
When you sign in
To sync across devices, Pianory stores the following on its server:
- Account details: your email address, display name, and profile picture (if you sign in with Google).
- Content you create: songs (title, artist, score content), practice lists, learning progress, and settings such as your timezone.
- Practice history: when each session started and ended, and how long it lasted.
- Sign-in session details: the IP address and browser user agent tied to a session, used to keep you signed in and spot unusual access.
- Rate-limit records keyed by IP address, used to block sign-in spam.
Signing in with Google
If you continue with Google, Pianory only asks for the basic openid, email and profile scopes. It receives your name, email address, email verification status and profile picture. It does not read your Gmail, Drive, contacts or any other Google data.
This information is used only to create and recognize your Pianory account. If you already have an account with the same email address, both sign-in methods lead to that one account.
Pianory's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Signing in with email
If you sign in with an email link, Pianory sends a one-time link to the address you enter. The link expires after 10 minutes and is stored only as a hash.
How your data is used
- Signing you in, syncing, and showing your data across your devices.
- Calculating streaks, statistics, and Free or Pro plan limits.
- Keeping the service secure, preventing abuse, and fixing bugs.
Pianory does not sell data, show ads, or use third-party analytics or tracking tools.
Where data is stored
Pianory runs on Cloudflare (Workers, the D1 database, and Email Service for sign-in links). Account data is stored on Cloudflare infrastructure and may be processed in data centers outside your country.
Server logs are kept by Cloudflare for a short time to track errors, with URL query strings redacted. If you sign in with Google, Google handles that authentication under its own privacy policy.
Retention and deletion
Account data is kept until you delete your account. You can delete it at any time in Settings. This immediately removes your account and all of your songs, lists and practice history from the database.
Automatic database backups may keep data for up to 30 more days before they are overwritten. Expired sign-in sessions are removed automatically.
If you cannot access your account, you can ask to see, correct or delete your data by writing to support@pianory.app.
Children
Pianory is not directed at children under 16. If you are under 16, please use an account with the consent of a parent or guardian.
Changes to this policy
When this policy changes, the date at the top of the page changes with it. If a change meaningfully affects your data, I will announce it in the app before it takes effect.
Contact
Questions about privacy? Write to me at support@pianory.app.