Privacy Policy

Account information. When you sign up, we collect the information provided by you or your sign-in method: your email address and, if you sign in with Google, your display name and Google account identifier. If you sign up with email and password, we collect your email address and a securely hashed password (via Firebase Authentication — we never see or store your plain-text password).

Profile and preference data. To generate recommendations, we collect the musical profile you build in the app, including your skill level (Henle difficulty level), learning goals, target direction, and your liked/disliked periods, composers, moods, forms, and technical tags.

Repertoire activity. We store the pieces you interact with — pieces marked as learned, interested, or not for you — along with timestamps and any difficulty feedback you provide, so we can track your progress and improve future recommendations.

Usage data. We use Vercel Analytics and Google Analytics to collect usage data (such as page views, general traffic patterns, approximate location derived from your IP address, and device/browser information) to understand how the Service is used. Vercel Analytics is aggregated and privacy-friendly and does not use cookies; Google Analytics uses cookies as described in Section 4.

Error and diagnostic data. When something goes wrong in the app, we use Sentry to automatically collect a report of the error so we can find and fix it. An error report may include technical details such as the error message and stack trace, the page you were on, your browser and device type, and — only when an error occurs — a visual reconstruction of your recent interactions with the page (a "session replay") in which text you typed and media are masked before leaving your browser. We use this data solely to diagnose and fix problems with the Service.

Guest use. You can preview sample recommendations without creating an account. In guest mode we do not create a persistent profile tied to you; guest interactions are not stored beyond your current session.

We use the information described above to:

• Provide, operate, and maintain the Service, including your account and saved repertoire;
• Generate personalized piano piece recommendations and AI-written explanations, using your profile and repertoire activity;
• Improve the quality and relevance of recommendations over time;
• Diagnose technical issues and maintain the security and reliability of the Service;
• Communicate with you about your account or the Service, if necessary.

We do not use your data for advertising, and we do not sell your personal information to anyone.

We rely on the following third-party service providers to operate Répertoire:

• Firebase (Google) — used for authentication and for storing your account, profile, and repertoire data in Firestore. See Google's Privacy Policy.
• Google Gemini API — used to generate AI-powered recommendation explanations. Relevant profile and piece data (not your email or name) may be sent to this API to generate explanations.
• Vercel — hosts the Service and provides Vercel Analytics for aggregated usage statistics. See Vercel's Privacy Policy.
• Google Analytics — used to measure traffic and understand how visitors use the Service. See Google's Privacy Policy.
• Sentry (Functional Software, Inc.) — used for error monitoring and application diagnostics, as described in Section 1. See Sentry's Privacy Policy.
• YouTube (Google) — we link to and embed publicly available YouTube performance videos alongside pieces. We do not connect this to your YouTube account.
• IMSLP — we link out to free public-domain sheet music on IMSLP. We do not share your data with IMSLP.

These providers process data on our behalf under their own privacy and security practices, and only to the extent necessary to provide the Service.

We use essential cookies and browser storage (such as local storage) to keep you signed in and to remember your interface preferences, like light/dark theme. Google Analytics sets cookies to distinguish visitors and measure traffic, as described in Section 3. We do not use advertising cookies or tracking pixels.

We retain your account and profile data for as long as your account remains active, so that your repertoire and preferences persist between sessions. If you would like your account and associated data deleted, contact us at support@repertoire.app and we will delete your data within a reasonable time, except where retention is required by law.

We use industry-standard security practices, including Firebase Authentication and Firestore security rules, to protect your data from unauthorized access. No method of transmission or storage is 100% secure, but we work to protect your information using commercially reasonable safeguards.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:

• Update your profile and preferences at any time from within the app;
• Request a copy of your data by contacting us;
• Request deletion of your account and data by contacting us;
• Stop using the Service and revoke Google sign-in access via your Google Account settings.

To exercise any of these rights, email support@repertoire.app.

Répertoire is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Répertoire is operated from, and our service providers may process data in, the United States and other countries. By using the Service, you consent to the transfer and processing of your information in these locations, which may have different data protection laws than your country of residence.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

This section applies specifically to the "Repertoire: YouTube Tracker" browser extension available on the Chrome Web Store. It supplements, and should be read alongside, the general Privacy Policy above, which governs Répertoire.

What the extension does

Repertoire: YouTube Tracker lets you save YouTube videos to a personal practice list directly from the YouTube watch page, and view/manage that list from the extension's side panel.

Information we collect

The extension collects and stores only the following information, and only for videos you explicitly choose to save:

• The YouTube video ID and title
• The date/time you added the video and last updated it
• The practice status you assign to it (e.g. "Wanna Learn," "Learning," "Mastered")

The extension does not collect your name, email address, browsing history, YouTube account information, IP address, analytics/usage data, or any information beyond what is listed above.

Where your information is stored

All data is stored locally on your device, using the browser's built-in chrome.storage.local API. The extension:

• Does not transmit any data to our servers, Répertoire, or any third party
• Does not use any remote analytics, tracking, or advertising services
• Does not make any network requests of any kind

Your saved list exists only in your local browser storage. If you uninstall the extension or clear your browser's extension data, this information is permanently deleted. Because the extension does not sync data to us, saved songs are not automatically linked to any account you may have on Répertoire — if the extension later adds an import/sync feature, this policy will be updated to describe what is transmitted and how.

Permissions the extension requests, and why

The extension only runs on youtube.com pages and does not read or interact with any other websites.

Data sharing and sale

We do not sell, rent, trade, or share any data collected by this extension with any third party, because no data ever leaves your device.

Children's privacy

The extension does not knowingly collect information from children, as it does not collect any personal information at all — only locally stored, self-selected video metadata.

Changes to this section

If a future version of the extension adds features that transmit data off your device (e.g. cloud sync, account login), we will update this section to disclose exactly what is collected, why, and how it's transmitted, before that version is published.

Contact

Questions about this extension's privacy practices can be directed to support@repertoire.app, the same contact listed in our general Privacy Policy above.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@repertoire.app.