Privacy Policy

What we collect

• Practice settings and saved loops are stored only in your browser on your device. They are not sent to us. You can remove them by clearing this site’s data in your browser.
• Microphone (tuner only): the tuner uses your microphone only when you turn it on and your browser asks your permission. Sound is analysed on your device, moment by moment, to find the pitch. It is not recorded, stored or uploaded. Turning the tuner off releases the microphone, and you can withdraw permission anytime in your browser settings.
• Account details: if you create an account, we store your email address and, if you use a third-party sign-in such as Google, the basic profile details it shares (such as your name and email).
• Subscription details: if you subscribe, we store your plan, subscription status, billing dates and the customer and subscription identifiers Paddle gives us. We never receive or store your card or bank details.
• Emails: we send sign-in links and essential account notices; our email provider keeps delivery records (recipient, time, delivery status). If you email support, we keep that correspondence.
• Technical data: our hosting provider processes standard request information (such as IP address and browser type) to deliver the site, keep it secure and prevent abuse.

We don’t sell your data, we don’t run advertising, and we don’t use analytics or advertising cookies.

Why we use it

• To sign you in and keep you signed in, and to provide the Pro features you’ve paid for on any device (to perform our contract with you).
• To send emails you need, such as sign-in links and important account or billing notices (contract).
• To answer support requests (contract and legitimate interests).
• To keep the Service secure and working (legitimate interests), and to meet legal obligations such as tax and accounting records.

Who handles your data

Service providers working for us (they process data on our instructions):

• Supabase: account sign-in and our subscription records. The sign-in code is delivered from the jsDelivr content network.
• Cloudflare: website hosting, security and our support-email forwarding.
• Resend: sends sign-in and account emails. See Resend’s privacy policy.

Independent services (they handle data under their own privacy policies):

• Paddle: our reseller and Merchant of Record. Paddle sells the subscription to you, takes payment, handles tax and invoices, and is responsible for that data. See Paddle’s privacy notice.
• Google: our support mailbox is hosted on Gmail, so emails you send to [email protected] (and our replies) are stored there. Google also handles sign-in if you choose “Sign in with Google”, and serves the site’s fonts (Google Fonts): when any page loads, your browser requests the font files from Google’s servers, which receive your IP address and browser details. Google states this font data is not used to build advertising profiles. See Google’s privacy policy.

These providers may process data in the United States and other countries. For international transfers we rely on the safeguards each provider offers in its own terms and data processing agreements (for example, Standard Contractual Clauses where they apply). Ask us and we’ll point you to the relevant provider terms.

Cookies and local storage

We use your browser’s local storage to remember your practice settings and to keep you signed in. Paddle’s checkout may set cookies needed to process payments and prevent fraud. We don’t use advertising or analytics cookies.

How long we keep it

• Account and subscription records: while your account exists. When you ask us to delete your account, we cancel any active subscription first and remove your account data, normally within 30 days.
• Billing and tax records: kept as long as the law requires (Paddle also keeps its own transaction records as the seller).
• Support emails (in our Gmail support mailbox): we delete them within 2 years after the conversation ends, unless we need them longer for a dispute.
• Email delivery and hosting logs: kept by our providers under their own retention policies, which we don’t control. We don’t keep separate copies.
• Settings stored in your browser: stay on your device until you clear them; deleting your account doesn’t remove them.

Your choices and rights

You can ask to see, correct, export or delete your personal data, or object to or ask us to restrict how we use it, by emailing [email protected]. Depending on where you live (for example the EU, UK or California), you may have additional rights, including the right to complain to your data protection authority. We’ll respond within 30 days.

Children

ChordCurrent isn’t directed at children under 13, and we don’t knowingly collect their personal data. If you believe a child has created an account, contact us and we’ll delete it.

Changes

We’ll update this page if our practices change and revise the date above. For significant changes, we’ll give notice on the site or by email.