Privacy Policy
1. Who the controller is
The controller of your personal data is AUDIO PARTNER s.r.o., Company ID 27114147, registered office Mezi Vodami 2044/23, Modřany, 143 00 Prague 4, Czech Republic, registered with the Municipal Court in Prague, file C 97288 (“we”). We operate the Akordy.kytary.cz service (the “Service”).
For any privacy matter, reach us through the contact form or at abuse@akordy.kytary.cz.
2. What we process and why
2.1 Account and providing the Service
When you register, we process your e-mail address, username, password (stored only as a hash) and account preferences (language, notation, date format). Your account carries the content you create in the Service: your own entries, songbooks and favourites. The legal basis is performance of a contract — an account cannot exist without this data. We send an activation message and transactional e-mails (such as password reset) to the address you provide.
2.2 Playing history and recommendations
The Service remembers what you opened using a cookie with a random identifier (valid 180 days) so it can show your history on the Recently played page and recommend further content. History belongs to the browser, not to the account — signing out does not remove it. You can clear it at any time with the button on the history page; that deletes the identifier in your browser and detaches the records from your account. The legal basis is our legitimate interest in showing you your history and recommending content.
2.3 Traffic statistics and security
For operational reasons we record the IP address, browser type and visited pages (internal traffic statistics) and keep technical logs, including browser security-policy reports. The legal basis is our legitimate interest in operating, measuring and securing the Service. The sign-up and contact forms are protected by Google reCAPTCHA.
2.4 Third-party analytics
We use Google Analytics, configured without advertising personalisation. Google processes cookie identifiers and approximate location for this purpose.
2.5 Linking with Kytary.cz services and personalisation
The same company also operates the Kytary.cz online shop and stores and Hudební bazar (hudebnibazar.cz). If you use those services under the same e-mail address, we link data about your use of the Service with your account – songs you open, favourite songs and artists, songbooks, instruments you look up chords for and the estimate of your playing level derived from them – with data from our other services into a single customer profile. We use the profile:
- to understand how you use our services and to improve them;
- to personalise content and offers on our websites – for example recommending instruments and accessories based on what you play, and a personal overview of your history with us (favourite songs, purchases, listings).
The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in relevant offers and in developing our services. Only data about your use of our services is processed, not the content of your own songs; we do not pass the data to other companies and make no decisions with legal or similarly significant effects based on it. You may object to this processing at any time via the contact form or at komunikace@kytary.cz – we will then stop using data from the Service for these purposes and remove it from the profile. We send commercial communications based on data from the Service only with your consent.
3. Cookies
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
| PHPSESSID | sign-in and session | 14 days | essential |
| _nss | form protection (CSRF) | session | essential |
| dDarkMode, dCon, dCol, dFont, dTrans, dInstrument | your display choices (dark mode, notation, columns, font, transposition, instrument) | up to 1 year | preference |
| schas, schas_all | anonymous identifier for playing history and recommendations | 180 days | analytics / personalisation |
| scgb | random key to My songbook in this browser; created only when you add the first song, removed after you sign in and the songs move to your account | 1 year | essential (functional) |
| _ga and related | Google Analytics | up to 2 years | analytics (third party) |
4. Microphone and singing recognition
The follow-the-lyrics feature uses the microphone only after you explicitly allow it in the browser. The default recognition engine runs entirely on your device — microphone audio is never sent anywhere or stored. If you pick the cloud engine (the speech recognition built into your browser), the browser may send audio to its vendor (such as Google); the Service warns you before that engine starts. We never store recordings in any mode.
5. Third-party content and services
Song pages may embed the YouTube and Spotify players and link to Apple Music; those services process data under their own policies when displayed. Fonts come from Google Fonts. Product recommendations load from our own dynrs.kytary.cz service. Lyrics timing comes from the LRCLIB service (queried by our servers, not by your browser).
6. Recipients and transfers
We process data on our own infrastructure; the customer profile (section 2.5) is kept in our own customer data platform on servers in the EU and only authorised staff of our company can access it. The processors or independent controllers involved are the providers listed in section 5 (in particular Google Ireland Ltd.); Google may transfer data to the USA under the EU–U.S. Data Privacy Framework or standard contractual clauses. We may disclose data to public authorities where the law requires it.
7. Retention
Account data is kept for as long as the account exists; after cancellation we delete or anonymise it without undue delay, except where the law requires longer retention. The history identifier expires at the latest 180 days after your last visit, or when you clear it. Data from the Service in the customer profile (section 2.5) is kept while the account exists, at most 3 years after your last activity in our services; after cancellation or an objection we remove it from the profile. Technical logs are kept for the time needed to secure the operation.
8. Your rights
You have the right of access, rectification, erasure, restriction, data portability and the right to object to processing based on legitimate interest, including the linking with Kytary.cz services (section 2.5). Where consent is the basis, you may withdraw it at any time. You may also lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz). Requests are handled through the contact form.
9. Changes to this policy
Material changes will be announced on this page; the document always carries a version and effective date. Previous version: policy effective from 1 November 2016 (PDF).