Privacy

Data we process

We keep data to the minimum needed to run the service:

• account: name, email address and profile picture received from Google at sign-in; your optional public pseudonym; your role;
• contributions: drafts, submissions and their declarations (credits, provenance, rights status);
• community: your votes and favourites;
• reports: the details you write and, if you give it, a contact email;
• shop waiting list: your email address, if you ask to be told when the shop opens — used for that single message, then deleted;
• player videos: the link, account name, date and like count you declare when you propose a public post;
• security and counters: a salted hash of your IP address in rate-limit counters, abuse logs and the view / playback counters (one count per visitor and per hour). The IP address itself is not stored.

What stays on your device

MIDI files are read in your browser and are never uploaded. The phrase you are working on in the studio is stored in your browser's local storage. Only the notes of an excerpt you explicitly save or submit are sent to the server.

Cookies and measurement

The only cookies are those strictly necessary for sign-in and its security. Your console choice is kept in local storage. Player videos are plain links: nothing is embedded, so the networks receive nothing until you click. A song picture may be served by an external site, which then sees your IP address like any image host. We use no advertising tracker and no tracker requiring consent. Audience measurement, when enabled, is cookieless and never receives MIDI files or notes.

Purposes and legal bases

Providing the service you ask for (contract), keeping it secure and preventing abuse (legitimate interest), and handling rights requests and legal obligations.

Retention

Indicative periods by category:

• account data: until you delete your account;
• drafts and unpublished submissions: until you delete them or your account;
• published tabs: while published; without your name after account deletion, unless you withdraw them;
• votes and favourites: until you remove them or delete your account;
• reports and moderation decisions: 3 years after the decision, without contact details once the case is closed;
• rate-limit counters: a few hours; abuse logs: 12 months.

Deleting your account

From “My account” you can delete your account at any time. Sign-in data, sessions, favourites, drafts and pending submissions are erased; your votes are removed and scores corrected; your published tabs stay online without your name unless you choose to withdraw them; moderation records are kept without any link to you.

Processors

Hosting and delivery: Vercel. Database: Neon (PostgreSQL). Sign-in: Google. Data may be processed outside the European Union under the safeguards provided by these providers.

Your rights

You can access, correct, export or erase your data, and object to or restrict its processing, by writing to contact@ocarinabuttontabs.com. You can also lodge a complaint with your data protection authority.