Privacy Policy

When you create an account we store your email address, display name, and a hashed version of your password. If you sign in with Google we store the identifier that Google provides instead of a password. We also record when you last signed in and whether your email has been verified.

If you choose to fill them in, we store optional profile details: an avatar image, a cover image, a short bio, and social handles. Avatar and cover images are uploaded to Amazon S3.

As you play, we record gameplay data used for scoring and progression, including scores, accuracy, streaks, note timing measurements, session duration, rounds completed, rank progress, and achievements.

When you sign in from our mobile app we record device and connection details in an access log. This includes your IP address, device model, operating system, app version, locale, timezone, and — where your device or network reports them — mobile carrier, approximate city, region, country, and coordinates.

We display advertising supplied by Google AdSense. Google and its partners use cookies and similar technologies to serve ads and, where permitted, to personalize those ads based on your prior visits to this and other websites.

You can review and adjust the ads you see through Google's My Ad Center. More detail on how Google uses data from sites that use its services is available at policies.google.com/technologies/partner-sites.

We do not currently operate a consent management platform. Google therefore restricts traffic from the European Economic Area, the United Kingdom, and Switzerland to non-personalized or limited ads, which are served without using cookies to build an advertising profile of you. If that changes we will ask for your consent first and update this policy.

We use Segment to understand how features are used. Analytics events are sent from our servers rather than from your browser, and are associated with your account identifier.

If you enable notifications we store the push token or browser subscription needed to deliver them, along with your per-category notification preferences and any quiet hours you configure. You can disable notifications at any time from your account settings.

• To operate your account and keep you signed in
• To save progress, scores, ranks, and achievements
• To display leaderboards, which show your display name and scores publicly
• To send notifications you have opted into, and email verification messages
• To detect and investigate abuse or suspicious account access
• To display advertising that funds the service

We do not sell your personal information. We share data with the service providers that operate the product on our behalf: Google (advertising and sign-in), Segment (analytics), Amazon Web Services (image storage), MongoDB (database hosting), and Gmail (transactional email). Browser push notifications are delivered directly by your browser vendor’s push service.

Your display name, scores, and accuracy appear on public leaderboards.

You can update or remove your profile details and notification preferences from your account settings. To request access to or deletion of your account data, contact us at the address below.

instrument.games is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Questions about this policy, and requests to access or delete your data, can be sent to joshstovall@gmail.com. The contact page says the same thing in more detail.