Privacy

Saved work is written to browser storage first. Optional Pro sync uploads songs, set lists, saved progressions and practice-log entries as one private backup document. Appearance preferences, custom tuning labels, microphone data, credentials, current routes and transient audio state stay on the device.

You can export supported saved data from Setup → Your data. Clearing the site's browser storage removes local data. The export excludes the licence key and theme.

Email verification, account metadata and entitlement records are processed by the separate Cloudflare Worker. Cloudflare processes the D1 and R2 data and authentication email. The service can read the backup document; this is not end-to-end or zero-knowledge encryption.

Cloud writes become read-only for 30 days after Pro ends, then the copy is retained for a further 90 days with advance notice before deletion. Deleting the cloud copy or sync account is immediate; it does not delete local work.

A workspace owner deliberately publishes a separate copy of a set and its referenced song text, arrangement details and rehearsal notes. Active workspace members can read that copy according to their role. Membership never exposes unrelated songs, practice history, vocal profiles, worksheets or account data. Removing a member revokes future online access but cannot erase a copy already downloaded for offline use.

A Pro teacher can create nickname-or-initial aliases, assignments and private teacher notes. Teachers are warned not to enter a student email address, birth date, school identifier, health information or other sensitive personal information. Barre None does not create student accounts or claim school, FERPA or COPPA compliance.

A student sees only work published to the link they open. Nothing is submitted in the background: the student reviews and explicitly sends a bounded activity ID, completion time, optional attempts or score, optional self-rating and a short optional note. No microphone audio or unrelated practice library is included. Deleting an alias removes its cloud assignments, submissions and private notes without deleting the student's independent local practice history.

Microphone access begins only after a start action in a microphone feature. The signal is analysed on-device, is not recorded and is not sent off-device. Stopping, leaving the feature or an unsuccessful permission flow releases the microphone stream.

Generated playback stays local. A living chart may play a customer-selected recording from this browser or download an explicitly chosen private asset for offline use. Barre None does not fetch streaming-service URLs or start reference audio automatically.

Pedal, keyboard, Web MIDI, Wake Lock, brightness and running-show controls stay on the device. Web MIDI access begins only after the player enables it. Prepared shows and explicit recaps can be included in a manual backup, but are excluded from automatic account sync; recaps contain timing, skipped entry IDs and an optional note, never inferred attendance or location.

The preview pairs a bounded controller or read-only companion display with one running show. Pairing secrets stay in the URL fragment and are exchanged once; stored service records use hashes rather than raw pairing or feed tokens. Companion documents contain only the frozen display fields selected for the show, not account email, licence keys, private notes, audio, microphone data or the rest of the local library.

The stage device is authoritative and discards old-connection commands after a reconnect. The feature remains disabled in production until its transport and retention behavior pass the documented real-device, security and cost gates.

Program content is separate from private saved data. The catalog records an author, learning objective, accessibility text, version, provenance and rights status for each item. Plan 53 accepts original Barre None work with documented commercial-use permission; it does not include commercial tabs, lyrics, recordings or copied lesson text.

A complete free sample is available without Pro. An eligible Pro user may download selected program assets to this browser. Completion, notes and exports remain local unless the user deliberately includes supported data in a backup or sync action. Effective entitlement loss blocks new downloads and updates, while cached content may remain accessible because the app is intentionally not DRM. The app does not promise remote erasure of an offline copy.

Recoverable failures are counted only in bounded memory using a category and static call-site label. Barre None does not send error reports, URLs, messages, stacks or user content to a remote reporting service. You may copy technical details explicitly when asking for support.

Import and operating-system share actions stage selected text and files in this browser for preview. Shared payloads use a random one-time local handle; their contents never enter the URL, metadata, referrer or analytics stream. Previewing consumes the pending handle. Saving local Songbook records and uploading a source asset are separate, explicit actions.

If an eligible Pro user uploads a supported source chart, image or rehearsal recording, Cloudflare R2 stores the private bytes under a random internal key and D1 stores bounded ownership, type, size, checksum, visibility and reference metadata. Filenames, song titles, notes, lyrics, audio, signed download URLs and extracted text are excluded from logs. The first release performs no server OCR, audio transcription, virus-scanning claim or public asset sharing.

Living-chart source, stable markers, named loops, arrangement notes and authorized asset references may be included in the normal private sync document or an explicitly published workspace copy. Reference-media bytes remain in the private asset service and never enter the 5 MiB sync document.

Playback position, loop frequency and listening behavior are not sent as analytics or product telemetry. Download, workspace publication and deletion are separate explicit actions. A downloaded offline copy cannot be remotely erased from another device.

Events store the title, schedule, time zone, venue details, linked workspace, frozen set revision, member responses and bounded recap that the owner enters. Event metadata and private frozen-set documents are kept in the separate sync service when cloud sharing is enabled; prepared shows and recaps are not automatically added to account sync.

Invitations and reminders contain minimal event metadata and a random expiring response link. Links are scoped, hashed at rest and replay-aware. Barre None does not collect background location, contacts, audience or ticket data, travel history, income, contracts, SMS/push data or live presence. Calendar import/export is explicit and does not use personal-calendar OAuth.

On a configured paid build, a licence key is sent to the configured licence vendor when you activate it and at most weekly while an existing Pro licence is eligible for revalidation. The key remains in this browser's local storage. A free user's browser does not contact the licence vendor on page load.

Purchasing is not enabled in this build. Plan 59 implements a preview-gated hosted checkout; until its merchant, legal, webhook, portal and acceptance gates pass, this site has no checkout control and collects no payment details. If activated, checkout would be created by the authenticated Worker rather than by public browser configuration.

See Free and Pro and the Help center for the current preview status.

A Cloudflare Pages deployment may automatically inject Cloudflare Web Analytics for aggregate online page views and page-performance measurements. The beacon is owned by the production host, not included in local builds, and fully offline activity is not queued or replayed.

The application does not send licence keys, microphone data, user-authored songs or set lists to Web Analytics, and it has no custom product-event stream or advertising tracker. Whether analytics is enabled, and whether consent is required, is a deployment owner decision.