Privacy Policy
Effective October 20, 2026 ยท Version 2026-10-20
This policy covers MusicTheory.Work at https://musictheory.work and its installed web app. Criston Jackson, in Arkansas, United States, is responsible for the personal information described here. Contact: jacksoncris44@gmail.com.
Information we use
- Google sign-in: account identifier, name, email address, and profile image if provided. Google handles your password; the app does not receive it.
- Learning data: lesson completion and scores, skill mastery and review schedules, checkpoints, placement results, recent activity, and your last lesson.
- Preferences: theme, text size, motion, volume, and other device settings stored in your browser.
- Agreement records: Terms and Privacy Policy versions, your confirmation of the 13+ account and guardian requirements (not your birthdate or exact age), and an account-linked server timestamp when you continue through Google sign-in.
- Technical information: hosting and infrastructure providers process IP addresses, browser and device information, requests, timestamps, authentication and security signals, and operational logs to deliver and protect the service.
- Correspondence: information you choose to include in support, privacy, or legal requests.
Local storage and cloud sync
Guest progress and preferences are saved in localStorage. Cached browser resources may also remain on your device. Signing in imports guest progress from the current browser and merges it with account progress, retaining completed learning and best scores. Account progress is cached separately for offline saving. Signing out switches back to guest storage; it does not delete account data or device caches.
These storage technologies support requested features, authentication, preferences, offline use, and security. We do not include advertising cookies or cross-site advertising trackers. Clearing browser data removes local copies and preferences; browser storage is not a guaranteed backup.
Why we process information
We use information to provide the requested app, authenticate accounts, save and synchronize your work or learning, remember choices, maintain security, respond to requests, record agreements, and comply with legal obligations. Where applicable data protection law requires a lawful basis, these purposes rely on performance of our service agreement, our legitimate interests in a secure and functioning service, compliance with legal duties, and consent where required. You can decline optional features or withdraw browser permissions. Withdrawal does not undo prior lawful processing.
Who receives information
Netlify hosts the website. Google Firebase provides authentication and Firestore storage. Their infrastructure processes data to operate and protect these features. Authorized operator access may be necessary for support, security, legal duties, and verified privacy requests; owner-only app rules do not prevent authorized service administration. We may disclose information when required by law, to protect rights and security, or in a business transfer subject to applicable privacy safeguards. We do not sell personal information, share it for cross-context behavioral advertising, or run targeted advertising. Links to the other app do not automatically transfer your account or content.
Retention and security
Cloud account data is retained while needed to provide your account and the features you use, until you delete applicable items or request deletion, subject to legal, security, and dispute requirements. Agreement records and necessary security records may remain where needed to document compliance or resolve claims. Provider logs and backups follow provider retention schedules; removal from those systems may not be immediate. Local copies remain until you clear them or use available deletion controls. We use encrypted network transport, Google authentication, and account-scoped database rules. No storage or transmission system is completely secure.
Your choices and privacy rights
You can use local features without Google sign-in, sign out, change settings and browser permissions, export supported work or progress, and clear local browser data. To request access, correction, a portable copy, restriction, objection, withdrawal of consent, or deletion of your cloud account and data, email jacksoncris44@gmail.com. Rights vary by location. We will verify your identity with information reasonably necessary to protect your data, respond within applicable legal deadlines, and explain any lawful exceptions. You may use an authorized agent where permitted. You will not be penalized for exercising privacy rights. If we deny a request, reply to ask for a review or appeal; you may also complain to your local data protection regulator.
Signing out or removing the installed web app does not delete cloud data. Export work you need before deletion. Google account controls and provider policies apply separately to information Google processes in its own capacity.
International processing
The operator is located in Arkansas, United States. Firebase, Netlify, and other infrastructure may process information in the United States and other countries where they operate, which may have different privacy laws. Where required, applicable transfer safeguards, such as provider contractual commitments and standard contractual clauses, apply. Contact us for information about the safeguards relevant to your data.
Children
Guest lessons are available to all ages. Cloud accounts are for people 13 or older; users under 18 must have a parent or guardian review and agree to the Terms with them. We do not request or store a birthdate or exact age. We do not knowingly collect account data from children under 13 or any higher age requiring parental permission under applicable law. Do not submit personal information about a child under 13. Guest lessons can be used without an account; learning data stays on that browser unless you choose to sign in under the account eligibility requirements. If you believe a child has provided personal information, contact us so we can investigate and remove it where required.
Policy updates
We will post updates with the effective date on this page. Material changes to account-related practices will be brought to your attention and acknowledged at a later sign-in. We will seek any additional consent required by law before using information for a materially different purpose.