Skip to main content
StringPalStringPal

Privacy Policy

Last updated: March 4, 2026

Overview

StringPal is a music learning platform. This policy explains what data we collect, how we use it, and your rights. We keep things simple: we collect only what we need, we never sell your data, and we never use it for advertising.

What We Collect

Account Information

When you create an account, we store your email address and display name. If you sign in via Google or GitHub, we receive your name and email from that provider. You can also use StringPal anonymously without providing any personal information.

User-Generated Content

Content you create on the platform (practice notes, saved loops, metronome settings, practice routines) is stored in your account so you can access it across sessions.

Feedback Submissions

When you submit feedback (from the web app or Chrome extension), we store your message, the source it came from, and your email address if you choose to provide it. Providing your email is entirely optional and is only used to respond to your feedback.

How We Use Your Data

  • To provide and maintain the StringPal platform
  • To save your practice content and preferences
  • To respond to your feedback when you provide an email address
  • To improve the platform based on aggregate, anonymized usage patterns

We do not use your data for advertising, marketing emails, or any purpose beyond what is described here. We will never send you unsolicited emails unless you explicitly opt in to a mailing list (which we do not currently offer).

Who We Share Data With

We do not sell, rent, or share your personal data with third parties. Your data is only accessible to the StringPal team for the purposes described in this policy. We use the following infrastructure providers to operate the service:

  • Database hosting — to store your account and content
  • Web hosting — to serve the application

These providers process data on our behalf and are bound by their own privacy policies.

Data Storage & Security

Your data is stored in a PostgreSQL database. All data transmission between your browser and our servers uses HTTPS encryption. We follow industry-standard security practices to protect your information.

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data

To exercise any of these rights, email [email protected] and we will respond within 30 days.

Cookies

StringPal uses minimal cookies:

On the web app (stringpal.com):

  • Authentication cookies: Required to keep you logged in securely (essential)
  • Analytics cookies: PostHog uses cookies to track anonymous usage patterns to help us improve the platform (non-essential, can be blocked)

On the Chrome extension (LoopHearO):

  • No cookies: The extension uses Chrome's local storage (not cookies) to save preferences and a random anonymous identifier for usage analytics

No third-party advertising cookies are used anywhere in StringPal.

Analytics

Web App: StringPal uses PostHog (a privacy-focused analytics service) on stringpal.com to understand how users interact with the platform and identify issues.

What PostHog collects on the web app:

  • Page views and navigation patterns
  • Error logs and exceptions (to help us fix bugs)
  • Anonymous usage statistics (aggregated, not tied to your account)

What PostHog does NOT collect:

  • Your personal content (practice notes, loops, routines)
  • Passwords or authentication credentials
  • Payment information
  • Browsing history outside StringPal

Chrome Extension: The LoopHearO extension collects anonymous feature usage data (e.g. which features you use and how you configure them) to help us understand what's working and what to improve. Events are sent to our self-hosted analytics endpoint at stringpal.com, proxied to PostHog (EU-hosted). A random anonymous identifier is stored locally to group events — it is not linked to your identity, account, or any personal information.

Data hosting: PostHog data is hosted in the EU (eu.posthog.com) with industry-standard encryption.

Opting out: You can block analytics by using browser extensions like uBlock Origin or Privacy Badger.

Chrome Extension (LoopHearO)

The LoopHearO Chrome extension adds loop, pitch, and speed controls to YouTube. Here is exactly what the extension does and does not do with your data:

What the extension collects

  • Anonymous usage analytics: Which features you use and how you configure them (e.g. toggling loop, changing speed or pitch). Each event includes a random anonymous identifier, your extension version, and browser user agent (for compatibility). This data is not linked to your identity.
  • Feedback submissions: Your feedback message, the source it came from, and your email address if you choose to provide it. Providing email is optional and used solely to respond.

What the extension does NOT collect

  • Browsing history or URLs you visit
  • Any data from pages outside YouTube
  • Personal information, passwords, or payment data

Local storage

The extension uses Chrome's local storage to save your loop markers, pitch, and speed settings per video, as well as the random anonymous identifier used for analytics. This data stays on your device. You can reset the anonymous identifier at any time by clearing extension data or reinstalling.

Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the platform. The "Last updated" date at the top reflects the most recent revision.

Chrome Web Store Compliance

StringPal's Chrome extension (LoopHearO) complies with all Chrome Web Store User Data Policies:

  • Minimal permissions: The extension only requests access to YouTube pages and stringpal.com
  • Anonymous analytics only: The extension collects anonymous feature usage data to improve the product. No personal information is collected or linked to analytics events.
  • No data sales: We never sell, rent, or share your data with advertisers or data brokers
  • Secure transmission: All data is transmitted over HTTPS with encryption
  • Limited use: Data is used only to provide and improve the extension's stated features

For questions about data handling, contact: [email protected]

Contact

Questions about this policy? Email [email protected].