Privacy Policy

ChordFlow — chordflow.rocks
Last Updated: February 14, 2026
Effective Date: February 14, 2026

ChordFlow is operated by ChordFlow ("we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

Information You Provide

• Email address — collected by LemonSqueezy when you purchase a subscription.
• License key — generated at purchase and used to activate your subscription within the app.

Information Collected Automatically

• IP address and basic server logs — collected by Vercel (our hosting provider) as part of normal web hosting. We do not separately log or store IP addresses.
• Local storage data — your preferences (theme, metronome BPM, tuner settings, etc.) are stored locally in your browser. This data never leaves your device.

Information We Do NOT Collect

• We do not use Google Analytics or any invasive tracking.
• We do not use tracking cookies or third-party advertising pixels.
• We do not collect names, phone numbers, physical addresses, or payment card details (LemonSqueezy handles all payment processing).
• We do not host user accounts or passwords — access is via license key only.
• There is no user-generated content, social features, or community functionality.

2. How We Use Your Information

• Email address: To deliver your license key, send purchase receipts, and communicate subscription-related updates (renewal reminders, cancellation confirmations).
• License key: To verify your active subscription and grant access to paid features.
• Server logs (Vercel): For security, debugging, and basic operational purposes.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services:

LemonSqueezy acts as the Merchant of Record for all transactions. They collect and process your payment information directly — we never see or store your credit card or payment details.

4. Cookies and Local Storage

• Cookies: ChordFlow does not set tracking cookies. Any cookies present are strictly functional (e.g., set by Vercel for infrastructure purposes).
• Local storage: We use your browser's local storage to save your preferences (such as selected instrument, metronome tempo, theme). This data stays on your device and is not transmitted to us.

5. Data Retention

• Email and license key data is retained by LemonSqueezy for as long as your subscription is active and as required by their legal and financial obligations.
• Vercel server logs are retained according to Vercel's standard retention policies.
• Local storage data persists in your browser until you clear it.

6. Your Rights

All Users

You may request:

• A copy of any personal data we hold about you.
• Deletion of your personal data.
• Correction of inaccurate data.

To make a request, contact us at [email protected].

California Residents (CalOPPA)

In accordance with the California Online Privacy Protection Act:

• This Privacy Policy is accessible from our homepage.
• We will notify users of material changes by updating the "Last Updated" date on this page.
• We honor Do Not Track (DNT) signals — we do not track you in the first place.
• We do not allow third-party behavioral tracking on our site.

European Economic Area (GDPR)

If you are in the EU/EEA:

• Lawful basis for processing: We process your email and license key data based on contractual necessity (to fulfill your subscription) and legitimate interest (to operate and secure the service).
• Data subject rights: You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact us to exercise these rights.
• Data transfers: Your data may be processed in the United States by Vercel and LemonSqueezy. Both services maintain appropriate safeguards for international data transfers.
• Complaints: You have the right to lodge a complaint with your local data protection authority.

7. Children's Privacy (COPPA)

ChordFlow is a general-audience service. It is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of ChordFlow after changes constitutes acceptance of the revised policy.

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights:

Email: [email protected]
Developer: ChordFlow
Website: chordflow.rocks