Privacy Policy

1. Overview and Data Controller

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this privacy policy.

The data controller responsible for processing data on this website is:
Wesley Siegel
Accessible Piano
Mittlere Kanalstraße 36
90429 Nürnberg, Germany
Email: info@accessiblepiano.com

2. Data Collection and Usage

Account Registration and Authentication

When you create an account, we collect your email address. We use a passwordless system; instead of passwords, we send a secure One-Time Passcode (OTP) to your email to authenticate your session. We store this data in our secure PostgreSQL database to grant you ongoing access to your purchased digital sheet music.

Cookies and Local Storage

Our website uses cookies to keep you logged in across devices and to remember your cart contents. These are technically necessary cookies required for the e-commerce functionality of Accessible Piano.

Microphone and MIDI Access (Interactive Practice Mode)

To provide our interactive practice features ("Mic Practice" and "MIDI Practice"), our website may request permission to access your device's microphone or connected MIDI instruments.

The processing of this data occurs exclusively locally within your browser (client-side). At no point are audio recordings, pitch data, performance metrics, or MIDI signals transmitted to our servers, saved, or shared with third parties.

The legal basis for this access is your explicit consent in accordance with Art. 6 (1)(a) GDPR, which you grant by confirming the permission request in your browser. You can revoke this permission at any time in your browser's site settings.

3. Third-Party Services

Payment Processing (Stripe)

All payment transactions are handled by Stripe. When you make a purchase, your billing data is processed securely by Stripe. We do not process or store any credit card information on our servers. Stripe acts as an independent data controller for your payment information.

Analytics and Marketing (Google Tag Manager)

We utilize Google Tag Manager to analyze website traffic and optimize our advertising. This service may collect pseudonymized data about your browsing behavior on our site to help us improve our offerings. You can opt-out of tracking via your browser settings or our cookie consent banner.

Hosting and Security (Cloudflare)

Our website's traffic is routed through Cloudflare to ensure fast loading times globally and to protect against malicious attacks. Cloudflare may process IP addresses to provide these security and performance services.

4. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to access: You can request information about your stored data at any time.
• Right to rectification: You can request the correction of inaccurate data.
• Right to erasure ("Right to be forgotten"): You can request the deletion of your account and associated data. Note that we must retain basic transaction records for tax and legal compliance.
• Right to restrict processing: You can request limits on how we use your data.

To exercise any of these rights, please contact us at support@accessiblepiano.com.