Privacy Policy
Last updated: September 2026 • Compliant with the Australian Privacy Act 1988 (Cth) & APPs
Chris Guitar is built for musicians. We collect only what is strictly necessary to deliver a responsive, personal songbook experience. We never sell, rent, or trade your personal data to third-party advertisers or data brokers.
1. Introduction
This Privacy Policy explains how Chris Guitar (“we”, “us”, “our”) collects, uses, discloses, and protects your personal information when you access our web application at chrisguitar.app.
We are committed to handling your personal data responsibly in compliance with the Australian Privacy Principles (APPs) established under the Privacy Act 1988 (Cth), as well as international data protection principles such as the General Data Protection Regulation (GDPR).
2. Information We Collect
Depending on how you use Chris Guitar, we may collect the following categories of information:
a. Account & Identity Data
When you sign up via Email, Google, or Apple, we collect your email address, display name, authentication user ID (UID), and verification status. If you use social sign-in, we receive the basic public profile data you authorize.
b. Songbook Interactions & Preferences
To make your songbook personal, we store your saved/favorite songs, custom transpose preferences (+/- semitones), preferred auto-scroll speeds, star ratings (1–5), and custom chord annotations.
c. Automated Health & Diagnostic Logs
To maintain platform reliability and fix bugs, our automated monitoring system captures anonymized error telemetry (e.g. browser type, operating system, page URL, and stack traces). All error reports pass through automated sanitizers that strip passwords, bearer tokens, API keys, and private lyrics before storage.
d. Payment Data
Paid subscriptions (ChordPro+ / Founding Member) are processed securely through PCI-DSS Level 1 compliant payment gateways (such as Stripe). Chris Guitar does not store, process, or have access to your full credit card number or CVV.
3. How We Use Your Information
We use your data solely for the following legitimate purposes:
- To provide, operate, and optimize the responsive chord viewer, transposer, and auto-scroller.
- To synchronize your favorite songs and practice setlists seamlessly across your laptop, tablet, and phone.
- To manage account authentication and process subscription upgrades.
- To send essential transactional notifications (email verification, password resets, and critical downtime alerts).
- To detect and remediate application errors, broken screens, and security vulnerabilities.
4. Cookies & Local Storage
Chris Guitar uses minimal, essential browser technologies:
- Authentication Cookies: Secure session cookies managed by Firebase Auth to keep you signed in securely.
- Local Storage (`localStorage`): Used to cache song chords locally on your device for instant offline practice, and to remember your preferred sharp/flat accidental display.
We do not employ cross-site tracking cookies, third-party advertising cookies, or behavioral profiling tools.
5. Third-Party Service Providers
We partner with trusted, industry-leading infrastructure providers to deliver our service:
6. Data Security & Retention
We implement robust administrative, technical, and physical security measures to safeguard your information:
- All data in transit is encrypted using modern TLS 1.3 / HTTPS encryption.
- Database records are encrypted at rest using AES-256 encryption.
- Granular Firestore security rules restrict access to user profiles and interactions strictly to the verified account owner.
We retain your personal information only for as long as your account remains active or as needed to provide you with the service.
7. Your Rights & Data Choices
Under the Australian Privacy Principles and international privacy regulations, you have clear rights regarding your personal data:
- Right to Access: You can request a copy of the personal information we hold about you.
- Right to Rectification: You can update or correct your profile details anytime via your Account page.
- Right to Deletion (“Right to be Forgotten”): You can request the permanent deletion of your account, saved interactions, and personal profile by emailing us.
- Right to Data Portability: You can export your song catalog backup as a structured JSON file directly from the platform.
8. Children's Privacy
Chris Guitar is designed for general audiences and is not directed at children under the age of 13. We do not knowingly collect personal identifiable information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it immediately.
9. Contact Us & Complaints
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy complaint, please contact our Privacy Officer:
If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.