Privacy Policy

Last updated: 29 October 2026

We have no user accounts and no user database. Nothing you do in MIDIMIDI is stored on our servers — your songs, recordings, practice history, profiles and settings live in your own browser. There is nothing to sign up for, and no password, profile or practice record for us to hold, lose or be asked to hand over.

1. What we store about you

Nothing. We keep no user records of any kind. MIDIMIDI has no accounts, no sign-in and no user database.

The only way any personal information reaches us is if you choose to send feedback, which is covered in section 3.

2. What stays on your device

Everything you create or import lives in your browser's local storage and IndexedDB, on your own computer:

• MIDI files you upload, and any songs you edit or record
• MP3s you convert — the AI transcription runs locally in your browser, and your audio is never uploaded anywhere
• All practice history, accuracy statistics, streaks and time tracking
• Your profiles, themes, and every setting

None of this is transmitted to us and we have no copy of it. That also means we cannot recover it for you — see the backup note in our Terms of Use.

3. Feedback you send us

If you use Settings → Send feedback, your message is emailed to us. Nothing else in the app sends anything anywhere.

• Your message — delivered to our support inbox and kept there while we deal with it, like any email.
• A reply address, only if you type one. The field is optional. If you leave it blank the message arrives with no way to identify you; if you fill it in, it is used as the reply-to address on that one email and is not stored anywhere else.
• Your IP address — held briefly in the memory of the small function that relays the form, to stop it being used to send floods of email, and discarded automatically. It is not written to any database, because we do not have one.

4. Cookies

We set no cookies at all. None for sign-in, because there is no sign-in; none for advertising, analytics or tracking, because we run none of those. The app stores its settings in your browser's local storage, which never leaves your device and is not sent with requests the way a cookie would be.

5. Third parties

The app makes no third-party requests while you use it. Fonts, piano samples and all code are served from our own domain — including the typeface, which is self-hosted specifically so that loading MIDIMIDI does not disclose your IP address to a font provider. The only third parties involved in the service at all are:

• Cloudflare — hosting, and the function that relays feedback. Like any web host, their infrastructure logs the IP addresses of requests.
• Resend — delivers feedback emails, and only if you send one. They process the message and any reply address you chose to give.
• Ko-fi — only if you choose to donate. Payment happens entirely on their site under their own privacy policy, and we never see your card or bank details. We do receive the name and email address you give when donating, and their payment provider (PayPal or Stripe) may pass on further details of the transaction — that is how any payment works. None of it is connected to anything you did in the app, because the app has no accounts and records nothing about you.

We have never sold or shared personal data, and we do not use it for advertising or profiling.

6. How long we keep things

There is no account record to keep or delete. Feedback emails stay in our support inbox while they are useful, and you can ask us to delete yours. Donation records stay in Ko-fi and in the payment provider's account for as long as those services and our tax obligations require. Rate-limiting data is discarded automatically. Server logs are retained by our host under their own policy.

7. Your rights

Depending on where you live you may have rights under the GDPR, the UK GDPR, the CCPA, or Mexico's Ley Federal de Protección de Datos Personales — to access, correct, export or delete personal data we hold about you. In practice we hold almost nothing: unless you have emailed us, there is no record of you to produce or erase. If you have, write to us and we will find and delete it.

Your practice data needs no request at all. It is already on your device: you can export it at any time from Settings → Backup, and clearing the site's browser data erases it completely.

8. Children

MIDIMIDI is not directed at children under 13. Since we collect no personal information and have no accounts, there is nothing for a child to sign up for and nothing of theirs for us to collect. If a child sends us feedback containing personal details, contact us and we will delete the message.

9. Changes to this policy

If we change how we handle your data, we will update this page and change the date above before the change takes effect. If a future version ever stores your work on our servers — optional sync between devices, for instance — it will be opt-in and disclosed here first.

10. Contact

Questions about privacy or your data: [email protected]