Your information, treated thoughtfully

Privacy policy

Last updated 13 November 2026

Who is responsible

Piano Tutor is operated by Half Nine Ltd, company registration number 17383203. Half Nine Ltd is the controller of personal information collected through this website.

Our registered office is 66 Paul Street, London, England, United Kingdom, EC2A 4NA.

For privacy questions, to exercise your rights or to withdraw email consent, contact hello@getpianotutor.com. You can also write to our registered office. See our company details.

Early-access emails

If you choose to join our list, we collect your email address, the time and version of your consent, and the website signup source. We use these to send a confirmation email and, after you confirm, occasional Piano Tutor development and early-access updates. We rely on your consent for these emails. Joining does not create an app account or guarantee early access.

Brevo processes the email list and delivers emails on our behalf. A confirmation link verifies access to your email address. You can unsubscribe using the link in every marketing email, or contact us. Withdrawing consent does not affect processing that was lawful before withdrawal. We do not sell the list or use it for unrelated marketing.

Spam protection and security

When you submit the signup form, we use a necessary, secure browser cookie to help limit repeated requests. It contains a random identifier signed by our server, is not readable by JavaScript, and expires after 24 hours. It is separate from optional analytics permission and is not used for advertising or cross-site tracking.

Google Cloud Firestore holds short-lived rate-limit counters and keyed hashes of browser identifiers and email addresses. It does not hold the mailing list or raw signup addresses. Browser counters use 15-minute windows, shared counters use hourly and daily windows, and email cooldowns last 24 hours. Expired records stop applying immediately and are queued for automatic deletion; physical deletion may take longer. Hosting providers may process network addresses and security logs. We do not include signup addresses in application logs or analytics.

Google Analytics 4 and optional cookies

With your permission, Google Analytics 4 measures page visits, traffic sources, early-access button clicks, accepted signup requests and broad error categories. Analytics cookies are optional. We don’t load Google’s analytics script or send analytics requests before you allow it. Declining does not affect signup or use of the site.

Analytics information can include browser and device details, approximate location, visit and session identifiers stored in cookies, and the interactions described above. Your network address is involved when your browser communicates with Google. For UK visitors, Google states that it uses IP addresses to derive location information and then discards them, rather than logging or storing individual IP addresses. See Google’s information about UK analytics data.

Advertising storage, advertising user-data consent, ad personalisation and Google signals are disabled in our tag configuration. We do not send submitted email addresses, raw form fields or error messages to Google. Page URLs exclude query strings and fragments; only restricted campaign source, medium and name values are separately passed. External referrers are reduced to their origin.

Your Google Analytics preference is saved in browser local storage, separately from email signup consent. Analytics cookies are configured to expire after six months and may be renewed when you return with analytics enabled. You can change your choice through Privacy settings in the footer. Withdrawing permission disables our tag, removes its accessible analytics cookies and reloads the page without the tracker. Counts cover consenting visitors, not everyone. Accepted signup requests are not confirmed subscriptions; confirmed membership is recorded by Brevo.

Retention

We keep early-access subscription details while they are needed to send the updates you requested and maintain a record of your consent. If you unsubscribe, we stop marketing emails and retain only the information needed to respect that choice and meet applicable obligations. You can contact us to request deletion of your information.

Rate-limit records stop applying when their configured windows expire and are then eligible for automatic deletion. Analytics-cookie expiry and your controls are described above. Cookie expiry is separate from the retention of information already processed by Google Analytics.

Service providers and international processing

We use Google Firebase App Hosting to host the website, Google Cloud Firestore for rate limiting, Brevo to manage the email list and send confirmation and update emails, and Google Analytics when you allow analytics.

Our website backend and rate-limit database are configured in Google’s europe-west4 region in the Netherlands. This does not mean all processing by every provider takes place there. Providers may process information in other countries, including outside the UK.

Information about provider processing is available in Google Cloud’s privacy notice, Google’s privacy policy and Brevo’s privacy policy. For information about the arrangements and transfer safeguards applicable to your personal information, contact hello@getpianotutor.com.

Your choices and rights

You may ask to access, correct or erase your personal information, and request restriction or portability where applicable. You can withdraw email consent at any time. Contact Half Nine Ltd using the details on the contact page. You can also raise concerns with the UK Information Commissioner’s Office at ico.org.uk.

The iPad app

This notice covers the marketing website. The current development app stores learning progress locally on the device. Website signup does not sync or upload that practice history.