Privacy

Your settings (like your sound and keyboard size) are saved in your browser, on your computer. melo also counts how it’s used, anonymously (see How melo counts its use).

melo reads the notes from your MIDI keyboard in your browser. They aren’t sent anywhere, except as part of a session you record with an account.

• Your email address and password, to sign you in. Passwords are stored scrambled (hashed), so no one can read them, us included.
• Your name, if you give one.
• Your sessions: the notes you recorded, their timing, and their names, so they’re in your account on any computer. A copy stays in your browser too.
• Your plan (everything is free for now).

Google tells melo your name, your email address, and the address of your profile picture. melo uses them only to create your account and sign you in. It asks Google for nothing else: not your contacts, files or anything in your Google account.

melo’s use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements. melo doesn’t sell it, share it, or use it for ads.

melo emails you to confirm your account and to reset your password. If you choose to join the mailing list (when you sign up, or on the home page, and only once you confirm), you’ll also get occasional news about melo. Every one of those has a link to stop them.

melo records what happens in it, not who it happens to: a page opened, a drill started, a session recorded, a sign-up step reached. Each event notes the page, your country and region, your time zone, whether you’re on a computer, tablet or phone, and the site that sent you here, if any.

• No cookies and nothing saved in your browser for it.
• No IP addresses are kept. Visitors are told apart for one day only, by a code made from your IP address and browser that changes every day and can’t be turned back into either.
• If you’re signed in, events are linked to your account, so we can see how melo is used over time.
• If your browser sends Do Not Track or Global Privacy Control, nothing is counted.

melo uses cookies only to keep you signed in, and one for ten minutes while you sign in with Google. No advertising or tracking cookies. Your browser also keeps your settings, your sessions, and the instrument sounds, so melo starts quickly and works offline.

melo runs on a few services, which hold data for melo and nothing else:

• Supabase: accounts, sessions and usage counts, in the United States.
• Vercel: runs the website.
• Cloudflare: the domain, and the instrument sounds.
• Resend: sends melo’s emails and keeps the mailing list.
• Google: only if you sign in with it.

• Download your sessions any time, as MIDI files, from the Sessions panel.
• Delete a session, and it’s removed from your account.
• Delete your account and everything in it: email support@playmelo.app, and we’ll do it.
• Leave the mailing list with the link in any of its emails.
• Remove melo’s copies from a computer you share, from your account page.

Accounts are for people 13 and older. Younger players are welcome to use melo without an account.

If melo starts keeping something new, this page will say so first, with a new date at the top.

Write to support@playmelo.app. A person reads every email.