Privacy Policy
Last Updated: June 5, 2026
1. Introduction
Welcome to Piano Notes Master. I respect your privacy and am committed to protecting your personal data. This privacy policy explains what data I collect when you use Piano Notes Master, why I collect it, and your rights in relation to it.
Responsible for data processing: Luka Cupic, Fröttmaninger Straße 20A, 80805 München, Germany. Contact: lukacstudios@gmail.com
2. Information I Collect
Account Information
When you register with email and password, I collect your email address, display name, and a hashed password (handled by Firebase Authentication). If you sign in with Google, I receive your email address, display name, and profile photo from your Google account.
Game Data
I store your game performance data in order to show you statistics and maintain a leaderboard. This includes:
- Per-note accuracy and response times (treble and bass clef)
- High score, total games played, and last played date
- Individual game session records (clef, correct answers, total questions, time spent, mode)
Settings
Your in-app preferences (such as sound settings, piano key labels, time limits, and leaderboard visibility) are stored in your account in Firestore so they persist across devices.
Payment Information
If you subscribe, PayPal processes your payment. I never see or store your full payment details. I do store your subscription status, plan type, subscription end date, and a PayPal subscription ID in order to manage your access.
3. Analytics and Performance Monitoring
I use two Vercel services that collect data automatically when you visit the site:
- Vercel Analytics: Collects page views, referrer, country, and browser/device type to help me understand how the site is used. No personally identifiable information is stored.
- Vercel Speed Insights: Collects web performance metrics (e.g. page load times) to help me identify and fix performance issues.
Vercel's privacy policy applies to data collected by these services: vercel.com/legal/privacy-policy
4. How I Use Your Information
- To create and manage your account and provide the service.
- To display your statistics and progress over time.
- To maintain the leaderboard (only if you have opted in).
- To process and manage your subscription.
- To improve the app based on aggregated usage data.
- To comply with legal obligations.
5. Third-Party Services
I use the following third-party services that process personal data:
- Firebase (Google): Authentication, database (Firestore), and cloud functions. Data is stored in Google's infrastructure. Firebase Privacy Policy
- PayPal: Payment processing for subscriptions. PayPal Privacy Policy
- Vercel: Analytics and performance monitoring. Vercel Privacy Policy
I do not sell your personal information to third parties or share it for advertising purposes.
6. Cookies and Local Storage
Firebase Authentication uses session cookies to keep you logged in. These are essential for the service to function. I do not use any tracking or advertising cookies.
Your app settings are stored in your account (Firestore), not in local browser storage.
7. Data Retention
Your data is retained for as long as your account exists. If you delete your account, all associated data — including your profile, game sessions, statistics, and settings — is permanently deleted immediately.
Transaction records may be retained for the period required by applicable tax and accounting law.
8. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of the data I hold about you.
- Rectification: Correct inaccurate data (you can update your display name directly in the app).
- Erasure: Delete your account and all associated data via the account settings page.
- Portability: Request your data in a portable format.
- Objection: Object to processing of your data.
To exercise any of these rights, contact me at lukacstudios@gmail.com. You also have the right to lodge a complaint with your local data protection authority.
9. Children's Privacy
This service is not directed at children under the age of 13. I do not knowingly collect personal data from children under 13. If you believe a child has provided their data, please contact me and I will delete it.
10. Changes to This Policy
I may update this policy from time to time. Changes will be posted on this page with an updated date. For significant changes, I will make a reasonable effort to notify users.