Short version: Music Maestro collects only what's needed to run accounts, understand the product funnel and process payments. We don't sell your data or run ads. Cloudflare hosts the service and Stripe processes payments.
Who we are
Music Maestro is an interactive music theory learning app. The service is operated by an individual developer. Questions: use the feedback link at the bottom of the app.
What data we collect
If you create an account (optional):
- Email address and a salted password hash (the original password is not stored)
- Display name (if you provide one)
- Whether your account has paid access (yes/no)
- Your practice progress per module and concept (correct/wrong counts)
- Selected grade level
If you pay (Grade 2 & 3 access):
- Payment is processed entirely by Stripe — we never see or store your card details
- Stripe provides us with a customer ID to match your payment to your account
- Stripe's Privacy Policy: stripe.com/privacy
Without an account (guest mode):
- Game progress and scores are stored in your browser's localStorage
- A random identifier and limited events (such as landing visit or upgrade view) may be sent without your name or email
How we use your data
- To authenticate you and sync your progress across devices
- To verify that your account has paid access
- To measure privacy-safe visits, signups, upgrade views, checkout starts and payment outcomes
- We do not use your data for advertising or behavioural profiling
- We do not sell or share your data with third parties (except Stripe for payment processing)
Children's privacy
Music Maestro is designed for use by children under parental supervision. We recommend that a parent or guardian creates the account on behalf of a child. We do not knowingly collect personal information directly from children under 13 without parental consent.
Data storage
Account, progress and funnel data is stored in a Cloudflare D1 database. Access is restricted through server-side authentication; the owner report is limited to the configured owner account.
Your rights
- Access: You can view your data at any time via your account
- Deletion: Email us to delete your account and all associated data
- Portability: Contact us to request a copy of your data
Cookies & tracking
We do not use advertising cookies or third-party tracking scripts. A secure, HttpOnly first-party cookie keeps signed-in users authenticated. We store a random first-party visitor identifier to measure anonymous funnel steps; it contains no name, email address, or device fingerprint.
Third-party scripts loaded
- Tone.js (cdnjs.cloudflare.com) — piano audio
- Tonal.js & abcjs (cdn.jsdelivr.net) — music theory and notation
- Salamander piano samples (tonejs.github.io) — audio files
- Google Fonts (fonts.googleapis.com) — Nunito typeface
CDN providers may log standard request metadata (IP address, timestamp) as part of normal CDN operation.
Last updated: 16 July 2026