Privacy Policy

Effective date: 13 June 2026

guitarexercise.com is built to collect as little personal data as possible. This page explains what we process, why, and your rights. The data controller is the operator of guitarexercise.com, a sole proprietorship based in Greece — contact: contact@guitarexercise.com.

1. Using the site without an account

You can use the free library without an account. In that case your practice progress (completed exercises, favourites, settings) is stored only in your browser's localStorage, on your device — it is never sent to us. Clearing your browser data deletes it. Our hosting provider (Hostinger) keeps standard, short-lived server logs (IP address, requested page, timestamp) for security and operations, as virtually every website does. We use Google Analytics 4 only if you allow it — the analytics script does not load (and sets no cookies) unless you accept the consent banner, and you can withdraw consent at any time via the "Cookies" link in the footer. We run no advertising trackers.

2. If you create an account

Accounts are handled by Supabase (our authentication and database provider). Signing in with Google or an email link gives us your email address and, with Google, your name and avatar. We use this to operate your account, and we store your practice data (progress, favourites, settings, BPM records) in our database so it follows you across devices. Legal basis: performance of the service you signed up for (GDPR Art. 6(1)(b)). We do not sell personal data, ever, and we do not send marketing email without your separate consent.

3. If you subscribe to Premium

Payments are handled by Paddle, our merchant of record. Paddle collects your payment and billing details under its own privacy policy; we never see your full card number. We store only your subscription status (active/cancelled, plan, period end) linked to your account, to unlock premium features.

4. Cookies and localStorage

For the Service itself we use only what is strictly necessary: localStorage for your practice state and settings, and an authentication session when you sign in. Google Analytics cookies are set only after you opt in via the consent banner (see section 1) and can be turned off again from the "Cookies" link in the footer. No third-party advertising or cross-site tracking cookies.

5. Retention and your rights

Account data is kept for as long as your account exists and deleted on request. Under the GDPR you have the right to access, correct, export and erase your data, and to object to or restrict processing — email contact@guitarexercise.com and we will act within 30 days. You may also lodge a complaint with your supervisory authority; ours is the Hellenic Data Protection Authority (dpa.gr).

6. Changes

If this policy changes materially, we will post the update here with a new effective date and, for account holders, give notice before it applies.