Privacy Policy — Music Maestro

      Short version: Music Maestro collects only what's needed to run accounts, understand the product funnel and process payments. We don't sell your data or run ads. Cloudflare hosts the service and Stripe processes payments.
    

Who we are

Music Maestro is an interactive music theory learning app. The service is operated by an individual developer. Questions: use the feedback link at the bottom of the app.

What data we collect

If you create an account (optional):

Email address and a salted password hash (the original password is not stored)
Display name (if you provide one)
Whether your account has paid access (yes/no)
Your practice progress per module and concept (correct/wrong counts)
Selected grade level

If you pay (Grade 2 & 3 access):

Payment is processed entirely by Stripe — we never see or store your card details
Stripe provides us with a customer ID to match your payment to your account
Stripe's Privacy Policy: stripe.com/privacy

Without an account (guest mode):

Game progress and scores are stored in your browser's localStorage
A random identifier and limited events (such as landing visit or upgrade view) may be sent without your name or email

How we use your data

To authenticate you and sync your progress across devices
To verify that your account has paid access
To measure privacy-safe visits, signups, upgrade views, checkout starts and payment outcomes
We do not use your data for advertising or behavioural profiling
We do not sell or share your data with third parties (except Stripe for payment processing)

Children's privacy

Music Maestro is designed for use by children under parental supervision. We recommend that a parent or guardian creates the account on behalf of a child. We do not knowingly collect personal information directly from children under 13 without parental consent.

Data storage

Account, progress and funnel data is stored in a Cloudflare D1 database. Access is restricted through server-side authentication; the owner report is limited to the configured owner account.

Your rights

Access: You can view your data at any time via your account
Deletion: Email us to delete your account and all associated data
Portability: Contact us to request a copy of your data

Cookies & tracking

We do not use advertising cookies or third-party tracking scripts. A secure, HttpOnly first-party cookie keeps signed-in users authenticated. We store a random first-party visitor identifier to measure anonymous funnel steps; it contains no name, email address, or device fingerprint.

Third-party scripts loaded

None. As of 17 August 2026, every script this app runs — Tone.js (piano audio), Tonal.js and abcjs (music theory and notation), and the Salamander piano samples — is hosted on our own domain, not fetched from a third-party CDN. (Previously Tone.js, Tonal.js, abcjs and the Salamander samples were loaded from cdnjs.cloudflare.com, cdn.jsdelivr.net and tonejs.github.io respectively; those CDN providers no longer see any request from this app.) Lesson pages in the Theory Lessons section may embed a YouTube video; loading that page tells Google/YouTube you visited, per YouTube's own privacy policy.

Last updated: 17 August 2026