Privacy Policy
Effective July 22, 2026
This policy describes what ChartBlazer ("we", "us") collects when you use ChartBlazer: Drums, why, and the choices you have. The short version: we collect what the product needs to work, we don't run ad trackers, and we don't sell your data.
1. What we collect
- Account data: your email address, handle, and a securely hashed password (we never store the password itself), plus plan and verification status.
- Your content: the charts, setlists, markup, comments, and settings you create. Private content is visible only to you and the people you explicitly share with.
- Operational data: standard server logs (requests, errors, timestamps) used to keep the Service running and debug problems.
- Public-chart view counts: to count a view once per day without tracking you, we store a one-way hash — your account id, or for signed-out visitors a SHA-256 of IP address + browser user-agent — with the day. The raw IP and user-agent are never stored for this purpose, and the hash can't be reversed into them.
2. Cookies and device storage
We use a session cookie to keep you signed in — that's the only cookie we set. Device preferences (like your chart zoom or column widths) are kept in your browser's local storage and never sent to us. For traffic analytics we use Plausible, a privacy-focused, cookieless tool that counts aggregate page visits without setting cookies, collecting personal data, or tracking you across sites — which is why you won't see a cookie-consent banner. There are no advertising trackers on the Service.
3. Email
Account email — address verification, password resets, billing and subscription notices, and important account, security or terms changes — is part of running your account, so we send it for as long as you have one. It can't be turned off.
Product email — occasional news about new features and releases — goes to account holders by default. Every one of those messages carries an unsubscribe link, and you can switch them off any time under Settings. Turning them off never affects your account email.
We do not send you email on behalf of anyone else, and we never sell, rent or share your address with third-party advertisers. Delivery may be handled by an email service provider processing the message on our behalf.
4. Embedded players
A chart's reference track can embed a YouTube or Spotify player. The embed loads only after you choose to expand it; at that point the provider receives your request (and applies its own privacy policy). Until then, nothing loads from them.
5. Payments
Payments are processed by Stripe. Your card details go to Stripe, not to us — we receive only what's needed to manage your subscription (plan, status, and a customer reference).
6. Service providers we rely on
Running the Service takes a few third parties. Each one processes only what its job needs, acts on our instructions, and is bound to protect it — and we don't sell your data to any of them.
- Render — hosting and the database that stores your account and content. Privacy policy.
- Stripe — subscription payments (see above). Privacy policy.
- Resend — delivers the account and product email described above. Privacy policy.
- Cloudflare Turnstile — checks that sign-ups come from a person, not a bot. It sees your IP address and basic browser signals on the signup page. Privacy policy.
- Sentry — receives an error report when something breaks, which can include the page you were on, your browser, and your account id, so we can fix it. Privacy policy.
- Plausible — cookieless, aggregate traffic counts with no personal data (see §2). Privacy policy.
7. Who can see your content
- Private charts: you, plus anyone you share them with by handle/email.
- Public charts: anyone, including signed-out visitors — they can be viewed, played, printed, and cloned (see the Terms for the community license). Your handle appears as the author credit.
- Comments: visible to anyone who can see the chart they're on.
8. How long we keep things
Your content stays until you delete it. Deleting a chart removes it from the Service (clones others made from a public chart are their content and remain). To delete your account and its data, contact us at the address below; we'll complete verified requests within 30 days, except records we must keep for legal or security reasons.
9. Security
Passwords are hashed with a modern algorithm, transport is encrypted (HTTPS), and access to production data is restricted. No system is perfectly secure — if we learn of a breach affecting your data, we'll notify you as the law requires.
10. Children
The Service isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child has an account, contact us and we'll remove it.
11. Changes and contact
If this policy changes materially we'll give notice before the change takes effect. The effective date above reflects the current version. Questions or requests: support@infoblazer.com.
Also see our Terms of Service.