Privacy

Last changed 2026-10-14. This page changes when the app does.

The short version

• What you hum stays on your phone. Recordings are not uploaded unless you share something on purpose.
• The app sends a usage log without audio: which buttons were tapped, what phone and browser, the measured audio delay, errors.
• No account, no cookies, no analytics service, no tracking pixels, no third-party fonts.
• The email list is double opt-in. The address is all that is stored. One tap in any mail unsubscribes.

Who is responsible

Controller in the sense of Art. 4 (7) GDPR. There is no data protection officer; one is not required for a project of this size.

Visiting this website

The pages and the app are served from a server at Render Services, Inc. (525 Brannan St, San Francisco, CA 94107, USA) in its Frankfurt region, Germany. Like every web server it receives your IP address, the time, the page requested and your browser's identification with each request, and keeps them in its logs for a short time to run the service and spot abuse. Legal basis: Art. 6 (1) (f) GDPR, the legitimate interest in running a secure website. Render acts as a processor under a data processing agreement; where Render handles data in the USA, the transfer rests on the EU standard contractual clauses or the EU-US Data Privacy Framework.

The public pages set no cookies. If the site is behind a password for a private test, one cookie remembers that you typed it and an optional name you gave; it is described on that password page.

Using the app

Microphone. The browser asks for the microphone only when you tap record. The audio is processed on your phone: the recording is stored in your browser's storage on the device and turned into notes there. It is not sent to the server. (Before 2026-10-14 the private test version did upload recordings; the friends who used it were told so. Those recordings are deleted on request.)

Your ideas. Melodies, saved ideas and settings live in your browser's storage on your device (IndexedDB and local storage). This storage is necessary for the app to work at all and keeps nothing for anyone else (§ 25 (2) TDDDG). Your browser can clear it; Safari does so after about a week without use.

Usage log. Once per app session the app sends a log to the server: a random session identifier that is not stored on your device and does not survive the session, the time, your browser's identification string, the screen size, whether the device has a touch screen, the measured audio delay, and events such as record, undo, mute, save, play, break, drop, errors and crashes, each with a small snapshot of the musical state (notes and settings, never audio). The log has no name, no account and no persistent identifier. Purpose: to see where the app breaks on phones I don't own and to improve how it reacts to what people hum. Legal basis: Art. 6 (1) (f) GDPR, the legitimate interest in making the app work; you can object at any time (see your rights below). The logs are kept while they are needed for that work and deleted on request.

"That moment". When you tap it, you choose to send the current state of the track, an optional verdict and an optional typed or spoken note to the server. A spoken note is a recording of your voice and is sent only because you tapped send. Legal basis: Art. 6 (1) (a) GDPR, your consent, given by sending; withdraw it by asking for deletion.

Who sees it. Only the person named above, to improve the app. Uploads are analysed with the help of AI tools (Anthropic's Claude, operated in the USA under its data processing terms), which means a spoken note may be processed there. Nothing is published, sold or used to train a model.

"Tell me when there's something new"

If you type your email address, the server stores the address, the time of the request and a random token, and sends you one mail with a link. Only after you tap that link is the address on the list (double opt-in). An address that is not confirmed within two days is deleted. Stored for a confirmed address: the address, the time of the request and the time of the confirmation, as proof of consent. Nothing else: no name, no tracking of opens or clicks.

Purpose: occasional mails when there is something new in Brumm. There is no schedule. Legal basis: Art. 6 (1) (a) GDPR, your consent. Every mail carries a link that takes you off the list with one tap and deletes the address; you can also write to the address above. Withdrawing consent does not affect what happened before.

Mails are sent through Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, a processor under a data processing agreement; the transfer to the USA rests on the EU standard contractual clauses or the EU-US Data Privacy Framework. The provider receives the address and the content of the mail in order to deliver it.

Discord

The "afterhour" is a link to a Discord server. Discord Inc. runs it under its own terms and privacy policy; nothing from this site is shared with Discord by following the link.

Your rights

You have the right to access the data stored about you, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, to object to processing based on legitimate interest, and to withdraw consent at any time (Art. 15 to 21 GDPR). Write to the email address above. Because the usage log has no identifier that points to you, a request about it needs something to find it by: the approximate time and the phone you used.

You can complain to a supervisory authority. The one responsible for this project is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, datenschutz-berlin.de.

There is no automated decision-making and no profiling.