Privacy Policy

Controller and Contacts

Controller: Pianotify. Privacy contact: privacypianotify.com. Support: contactpianotify.com. Supervisory authority: CNIL.

Scope

This policy covers pianotify.com. It applies to visitors, account holders, and contributors of user-generated content.

Personal Data We Process

Account: email, username, preferences, subscription status, purchase history via Stripe identifiers. Usage: IP address, user-agent, timestamps, pages and events, error logs. User content: uploaded MIDI, PDF and MuseScore files, YouTube URLs, related metadata and thumbnails. Support: messages and attachments. Billing: Stripe tokens and receipts. Pianotify does not store card numbers.

We also hold, where the situation arises: a one-way hash of your address together with the IP and browser you signed up from, kept to stop the same person taking the free trial again and again; a flag when an account is shadowbanned; a record of every administrative action on your account, including a sign-in as you by an administrator; your push subscription — the endpoint your browser issues and its keys — if you turned notifications on; and your given and family name if you signed in with Google, which passes them to us.

Purposes and Legal Bases

Provide and secure the Service: contract and legitimate interests. Payments and accounting: legal obligation and contract. Product communications (existing customers): legitimate interests with easy opt-out. Product communications (prospective users): consent before sending marketing emails. Analytics and non-essential marketing: consent. Compliance and requests from authorities: legal obligation.

Processors and Recipients

AWS, region eu-west-1 (Ireland). Stripe for payments. Google Analytics and Search Console for measurement. Customer.io for transactional and, if opted-in, marketing email. Sentry (Functional Software, Inc.) for error monitoring, with data hosted in the EU. Data Processing Agreements and Standard Contractual Clauses apply where transfers occur outside the EEA.

International Transfers

Primary hosting in the EU. Some processors may process outside the EEA. We use Standard Contractual Clauses and additional safeguards where applicable. Where our providers are located outside the EEA, we rely on the EU-US Data Privacy Framework (where applicable) or the European Commission's Standard Contractual Clauses, together with Transfer Impact Assessments and supplementary measures. For the UK: where we transfer personal data to organizations that participate in the UK Extension to the EU-US Data Privacy Framework, we rely on that adequacy decision. For other UK restricted transfers to countries without adequacy, we use the UK Addendum to the EU Standard Contractual Clauses or the UK IDTA, as applicable.

Data Sources

We may process HTTP referrer, UTM parameters, approximate location inferred from IP, and YouTube embed metadata (if you open third-party videos). Third-party embeds may set their own cookies subject to your consent. The approximate location comes from the GeoLite2 database created by MaxMind, available from maxmind.com. We use it only to pick a currency and to know whether the cookie banner is required, and the country it gives is not kept.

Public Content and Indexing

Public uploads (MIDI files, sheet music, MuseScore files and video covers), their titles, descriptions, thumbnails, tags, and your public username are crawlable by search engines and may appear in third-party search results. You can delete them at any time; removal from search results depends on third-party crawlers. If you link to or embed third-party content (e.g., YouTube), indexing of that third-party content is governed by the third party's policies.

Copyright notices

Anyone, member or not, can send a takedown notice through the form on our DMCA page. What that form collects — name, email, an optional phone number and postal address, the electronic signature, the work and the addresses concerned, and the IP the notice was sent from — is kept exactly as sent: it is the record that justifies removing something, and a record that can be retouched justifies nothing. We use it only to handle the notice, to tell the sender the outcome, and to defend the decision if it is challenged. We keep a notice for five years from the decision on it — the period during which either the person who sent it or the person whose content it concerns can still bring a claim — and clear the sending IP after twelve months, since that address only serves to spot an abusive flood and check where a notice came from.

Email Analytics

Our marketing emails include an open and click tracking pixel. You can opt out at any time via the unsubscribe link or the preference center.

Suppression List

If you unsubscribe, we will keep your email on a suppression list to ensure you do not receive further marketing messages.

Retention

Active account: retained while in use. Deleted account: active data deleted promptly; rolling backups retained up to 30 days. Logs: up to 12 months. Billing records: 10 years. Support: 24 months. Public user content: until you delete it or moderation removes it. Suppression list: retained indefinitely to ensure no further marketing emails are sent.

Deleting your account anonymizes it rather than erasing every trace, because some records have to outlive it. Your uploads stay unless you ask for them to go — the box is ticked to keep them — and their pages then show an anonymous author. Download logs keep the IP and browser for 12 months (French LCEN). Invoices are kept 10 years, consent records for 5, support messages 24 months, and the anti-abuse hash 12 months. A shadowbanned account keeps the canonical form of its address so the same inbox cannot simply sign up again. Backups roll off within 30 days.

Your Rights

You can exercise your rights by emailing privacypianotify.com. Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. We respond within one month, extendable by two months for complex requests.

Children

Pianotify is for people aged 16 and over, or the age of digital consent in their country where that is lower. We ask you to confirm it when you create an account. If you believe a child holds an account here, write to us and we will remove it.

Security

TLS in transit, AWS encryption at rest, least-privilege access, admin two-factor authentication, logging and alerting, backups with restore tests.

Marketing Choices

Unsubscribe links in every marketing email. Transactional or service emails may still be sent.

Automated Decision-Making

No decision producing legal or similarly significant effects is taken about you by automated means alone. Automated checks do run: new uploads, comments and contact messages are scored for spam; ten failed sign-ins within fifteen minutes lock an account for the rest of that window, whatever address they came from; and a free trial can be refused when the anti-abuse hash matches an earlier signup. Each of these is reversible, and a person reviews it if you ask — write to us and say what happened.

Cookie Policy

This is everything Pianotify stores in your browser. The first group works whatever you choose; the rest only with your agreement, where your agreement is required.

Strictly necessary

• p_session — signing in, security checks and one-off messages; lasts the session, at most 24 hours. Pianotify
• REMEMBERME — staying signed in between visits; 14 days. Pianotify
• cc_pianotify — remembering the cookie choices you made; 180 days. Pianotify
• pianotify_locale, pianotify_currency — the language and the currency you chose; 1 year each. Pianotify

Preferences

• theme, sidebar_state, browse_view — how the interface is laid out for you — light or dark, sidebar, grid or list; 1 year each. Pianotify
• unverified_popup_dismissed — hiding the “confirm your address” reminder once you dismiss it; 24 hours. Pianotify
• pn_pref_*, pianotify:pdf-viewer — your player and PDF reader settings — tempo, volume, tracks, zoom, night mode, last position. Local storage on your device, not cookies, never sent to us; until you clear your browser data. Pianotify

Analytics

• _ga, _ga_* — measuring how the site is used, in aggregate; up to 2 years. Google Analytics 4

Marketing and embedded media

• Customer.io — recognizing you between visits so the messages we send or show are relevant, including in-app messages loaded from gist.build; up to 1 year. Customer.io
• YouTube — playing an embedded video cover; set by Google under its own policy. YouTube (Google)

Where the law requires consent — the European Economic Area and the United Kingdom — nothing in the last three groups loads until you accept, and we ask on your first visit. Elsewhere we do not show the banner and analytics load by default; you can refuse at any time from the Cookies link at the foot of every page, and the choice is kept in cc_pianotify.

You can change your mind whenever you like from that same link, or clear these cookies in your browser.

Changes to This Policy

We may update this Policy. We will update the “Last updated” date and notify you of material changes by email or in-product notice.