Go to the app!

Privacy Policy

Last updated: 12/10/2026

1. Who processes your data

The data controller is Stefano Corradi, author of GEN – Music Exercises Generator, based at Viale Giovanni da Cermenate 18, Milan, Italy. This policy covers the site musicexercisesgenerator.com and the app app.musicexercisesgenerator.com, and follows Regulation (EU) 2016/679 (GDPR).

For any question about your data you can write to info@musicexercisesgenerator.com.

2. What data we process

2.1 Account

When you sign up, with email and password or with your Google account, we process:

  • first and last name
  • email address
  • sign-up date and date of last sign-in
  • the devices you have linked to the account and the passkeys you have created
  • your profile photo, if you choose to upload one
  • the licence type (DEMO or PRO), its expiry date and any promotional code used

We never see or store your password: the authentication service handles it, in encrypted form.

2.2 Content you create in the app

The exercises, chord progressions and playlists you save, your tags, notes and the practice tempos you use to track progress. App settings stay in your browser.

2.3 Payments

The PRO version is paid through Stripe. You enter your card details on Stripe's pages and they never reach us: we only receive your email, the outcome of the payment and the subscription identifier, which we need to activate and renew the licence.

2.4 Contacts and sharing between users

If you invite another user as a contact, or share an exercise or a playlist with them, that user sees your name and email. The email of the person you invite is stored so that the invitation can reach them.

2.5 Contact form

Name, email, topic and message reach us by email and are used only to answer you; the site keeps no copy. To limit abuse, the server computes an anonymous fingerprint of your IP address and keeps it in memory for a few minutes.

2.6 Access statistics and technical data

We count visits with Vercel Web Analytics, which uses no cookies and does not recognise you from one day to the next: we only see aggregate numbers (pages viewed, referring site, country, type of device and browser). Like every site, the hosting service briefly records the technical data of each request (IP address, date and time, browser) to run and protect the service.

3. Why we process it

  • to give you the service you asked for: account, licence, saving your exercises, sharing, payments (performance of the contract)
  • to answer the messages you send us (steps taken at your request)
  • to comply with legal obligations, such as accounting and tax rules
  • to understand how the site is used, through aggregate statistics, and to protect it from abuse (legitimate interest)

We do not use your data for advertising or profiling, we do not sell it and we do not send you promotional messages.

4. Cookies and browser storage

We only use technical cookies, needed for the service to work: that is why there is no consent banner. There are no profiling or third-party cookies.

  • language (site, 1 year): remembers the language you chose
  • noteNames (site, 1 year): remembers how you want note names written
  • authCookie (site, 5 days): keeps you signed in
  • gen-locale (app, 1 year): remembers the language you chose

The app also stores your settings and your sign-in session in the browser (localStorage and IndexedDB). You can delete cookies and stored data from your browser settings: you will need to sign in and choose your preferences again.

5. Who receives the data

Data is processed by the providers we need to run the site and the app, each for its own part:

  • Google (Firebase): authentication and the database holding accounts and content; sign-in with Google, if you choose it
  • Vercel: hosting of the site and the app, access statistics
  • Stripe: payments and subscriptions
  • Cloudinary: profile photos
  • our email provider: messages from the contact form

We may also disclose data to authorities when the law requires it.

6. Transfers outside the European Union

Some of these providers are based in the United States or use servers outside the European Union. Transfers take place under the safeguards of the GDPR: the provider's participation in the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

7. How long we keep it

  • account data and content: as long as the account exists; we delete them when you ask for the account to be removed
  • payment data: for the time required by accounting and tax rules
  • contact form messages: for the time needed to answer you and follow up on the request
  • technical request data: for the short period set by the hosting service

8. Security

Connections are encrypted and each user can read and change only their own data. No system is completely secure, though: should a breach affecting you occur, we will inform you as the law requires.

9. Your rights

At any time you can ask us to:

  • access your data and receive a copy
  • correct or update it
  • delete it, together with your account
  • restrict its processing or object to it
  • receive it in a format another service can read (portability)

You can change your name, photo and devices yourself in the account settings. For anything else write to info@musicexercisesgenerator.com: we answer within one month. You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it) or with the authority of your country.

10. Changes to this policy

If the service changes, we update this page and the date at the top. We notify registered users of important changes.

11. Contact

For questions about this policy or your data:

Stefano Corradi – Music Exercises Generator
Viale Giovanni da Cermenate 18 - Milano
info@musicexercisesgenerator.com
+39 327 353 4462