Privacy

The short version

• What you sing, play or drop into a tool is read in your browser. It is not sent anywhere.
• The server counts visits: the page, the site you came from, the country, and a code that changes every night. Nothing on your phone, no cookie.
• No account, no cookies, no analytics service, no tracking pixels, no third-party fonts.

Who is responsible

Daniel Breyer, Mariendorfer Weg 35, 12051 Berlin, Germany. Email: hello@brumm.ai. Controller in the sense of Art. 4 (7) GDPR. There is no data protection officer; one is not required for a project of this size.

Visiting this website

The pages are served from a server at Render Services, Inc. (525 Brannan St, San Francisco, CA 94107, USA) in its Frankfurt region, Germany. Like every web server it receives your IP address, the time, the page requested and your browser's identification with each request, and keeps them in its logs for a short time to run the service and spot abuse. The server also holds your address in memory for up to an hour to limit abuse. Legal basis: Art. 6 (1) (f) GDPR, the legitimate interest in running a secure website. Render acts as a processor under a data processing agreement; where Render handles data in the USA, the transfer rests on the EU standard contractual clauses or the EU-US Data Privacy Framework.

The count. When the server sends you a page it also writes one line: the time, the page, that it was brumm.club, the site you came from (never the full address), whether the request looks automated, and the country your network address points to, looked up in a copy of DB-IP's free country database on our own server (IP Geolocation by DB-IP); your address itself is not written down. To tell one person from ten the server also keeps a 12-character code made from your address and your browser's identification with a secret key that lives only in the server's memory and is replaced every night and on every restart: the same phone gets the same code on the same day, a different one the next day, and once the key is gone nobody, including us, can turn a code back into a person. Until the key is replaced that code is personal data in the legal sense, so: legal basis Art. 6 (1) (f) GDPR, our interest in knowing how many people use the tools and from where, without cookies or a tracking service; you can object (Art. 21), but a request about the count cannot be answered because we have nothing to find you by (Art. 11). A tool's first tap loads the part that reads sound, and that load is counted the same way, once per person, page and day; the 432 vs 440 test counts its final score, a number from 0 to 10. Nothing runs on your phone for the count.

Was that right? Under a tool's result two taps ask whether it was right. A tap sends the page's address, the result as the page showed it (a note and its cents, a tempo), phone or laptop, the time and, after No, the line you wrote, if you wrote one. Never your voice, nothing about you or your phone. We read it to fix the tools. Legal basis: Art. 6 (1) (f) GDPR, our interest in tools that read right.

Asking for a tool. On Ask Mika the server keeps what you wrote, the page's language and address, the time and, if you gave one, the address to tell you it's built; nothing about you or your phone. If you gave an address, Mika writes once when the tool is built; no other mail, ever. Once your ask is answered it is deleted. Legal basis: Art. 6 (1) (b) and (f) GDPR, answering you.

Writing to us. Mail to hello@brumm.ai passes through ImprovMX (improvmx.com), an email forwarding service, and lands in Daniel's Gmail inbox (Google). We keep what you write only as long as the conversation needs it; ask, and it is deleted. Legal basis: Art. 6 (1) (b) and (f) GDPR, answering you.

Using the tools

A tool asks the browser for the microphone only when you tap it and closes it when it is done. The sound is read in your browser and nothing is kept or sent. A file you pick is read in the tab, not uploaded. A file a tool makes (a MIDI file, a WAV) is made in the tab and saved by your browser.

The app

The app at brumm.club/app is Brumm's app, the same as on the sister site. For the app, its share links, the charts and playing together, the privacy text of brumm.ai applies word for word (brumm.ai/privacy).

Your rights

You have the right to access the data stored about you, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, to object to processing based on legitimate interest, and to withdraw consent at any time (Art. 15 to 21 GDPR). Write to the email address above. You can complain to a supervisory authority; the one responsible for this project is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, datenschutz-berlin.de.

There is no automated decision-making and no profiling.