Privacy Policy

Last updated March 29, 2026

Your privacy is critically important to us. We are thoughtful about the personal information we collect, we store it only as long as needed, we make it easy to control what is shared, and we are fully transparent about our practices.

This policy applies to information we collect when you use www.stringatlas.com and the String Atlas application (collectively, our “Service”).

Who We Are

String Atlas is a guitar fretboard learning tool that helps musicians explore scales, modes, keys, CAGED positions, and ear training through interactive diagrams and exercises.


Information We Collect

We only collect information if we have a reason to—to provide our Service, to communicate with you, or to make it better.

Information You Provide

Account informationEmail address, password (email sign-up), and optionally a display name. If you sign in with Google, we receive your name, email, and profile photo.

Profile & preferencesAccount tier, beta enrollment status, fretboard display options, explorer session state, quick-access favorites, and training configuration.

Training dataRound history, per-note performance statistics, and training configuration to track your progress over time.

Saved contentChord progressions you save, including names and timestamps.

Feedback & waitlistFeedback messages (with type and page context) and waitlist email addresses.

Information We Collect Automatically

AnalyticsVia Umami, a privacy-focused service that does not use cookies (see their privacy policy). We collect anonymized page views, feature interactions (scales explored, training sessions, settings changes), and basic device info (browser, screen size, OS). Signed-in users have an anonymous ID associated with their events.

Local storageSession state, preferences, and training data stored in your browser. If you are not signed in, this data stays on your device and is never sent to our servers.

Security logsIP addresses for rate limiting (e.g. waitlist submissions) and administrative audit logs.

Information from Other Sources

Google sign-inIf you sign in with Google, we receive your name, email address, and profile photo through their authentication service.


How and Why We Use Information

Provide our Service

Set up your account, sync settings and progress across devices, store saved content, and deliver fretboard exploration and training features.

Improve our Service

Understand how people use String Atlas so we can make it better—analyzing popular features and identifying friction points.

Protect our Service

Detect and prevent abuse, spam, and security incidents, including rate limiting and logging administrative actions.

Communicate with you

Respond to feedback submissions and notify waitlist members about access to the Service.


Sharing Information

We do not sell your personal information. We share it only in these limited circumstances:

Third-Party Service Providers

ServicePurpose
Google FirebaseAuthentication & data storage
UmamiPrivacy-focused analytics (privacy policy)
Cloudflare TurnstileSpam protection
VercelHosting & delivery

These services process data on our behalf and are subject to their own privacy policies.

Other Circumstances

  • Legal requirements — In response to a subpoena, court order, or other governmental request.
  • Rights & safety — When disclosure is reasonably necessary to protect the rights, property, or safety of String Atlas, our users, or the public.
  • Business transfers — In connection with a merger, sale of assets, or acquisition. This Privacy Policy would continue to apply.

Data Retention

We keep your information for as long as you have an account with us or as long as we need it to provide our Service. If you delete your account, we will delete your personal information, though some data may persist in backups for a limited time. Waitlist emails are retained until no longer needed. Analytics data is aggregated and does not contain personally identifiable information beyond anonymous user identifiers.


Security

While no online service is 100% secure, we work to protect your information against unauthorized access, use, alteration, or destruction. Authentication is managed by Google Firebase with industry-standard security measures. All data in transit is encrypted via HTTPS.


Your Choices & Rights

You have control over your information:

Use without an accountMany features work without signing up. Your data stays in your browser's local storage and is never sent to our servers.

Access & updateIf you have an account, you can access and update your profile and settings at any time through the app.

Delete your dataClear local browser data any time. For server-side account deletion, email contact@stringatlas.com.

Opt out of analyticsUmami respects "Do Not Track" browser settings. Enable it in your browser and no analytics data will be collected.

Regional Privacy Rights

If you are located in the European Economic Area, the United Kingdom, or certain US states, you may have additional rights regarding your personal information, including access, correction, and deletion. Contact us at contact@stringatlas.com to exercise these rights.


Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will take steps to delete it promptly.


Privacy Policy Changes

We may update this Privacy Policy from time to time. We encourage you to check this page periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.


Contact Us

Questions about this policy or your data? Reach us at contact@stringatlas.com.