Privacy Policy
1. Who the controller is
The controller of your personal data is AUDIO PARTNER s.r.o., Company ID 27114147, registered office Mezi Vodami 2044/23, Modřany, 143 00 Prague 4, Czech Republic, registered with the Municipal Court in Prague, file C 97288 (“we”). We operate the Akordy.kytary.cz service (the “Service”).
For any privacy matter, reach us through the contact form or at abuse@akordy.kytary.cz.
2. What we process and why
2.1 Account and providing the Service
When you register, we process your e-mail address, username, password (stored only as a hash) and account preferences (language, notation, date format). Your account carries the content you create in the Service: your own entries, songbooks and favourites. The legal basis is performance of a contract — an account cannot exist without this data. We send an activation message and transactional e-mails (such as password reset) to the address you provide.
2.2 Playing history and recommendations
The Service remembers what you opened using a cookie with a random identifier (valid 180 days) so it can show your history on the Recently played page and recommend further content. History belongs to the browser, not to the account — signing out does not remove it. You can clear it at any time with the button on the history page; that deletes the identifier in your browser and detaches the records from your account.
2.3 Traffic statistics and security
For operational reasons we record the IP address, browser type and visited pages (internal traffic statistics) and keep technical logs, including browser security-policy reports. The legal basis is our legitimate interest in operating, measuring and securing the Service. The sign-up and contact forms are protected by Google reCAPTCHA.
2.4 Third-party analytics
We use Google Analytics, configured without advertising personalisation. Google processes cookie identifiers and approximate location for this purpose.
3. Cookies
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
| PHPSESSID | sign-in and session | 14 days | essential |
| _nss | form protection (CSRF) | session | essential |
| dDarkMode, dCon, dCol, dFont, dTrans, dInstrument | your display choices (dark mode, notation, columns, font, transposition, instrument) | up to 1 year | preference |
| schas, schas_all | anonymous identifier for playing history and recommendations | 180 days | analytics / personalisation |
| _ga and related | Google Analytics | up to 2 years | analytics (third party) |
4. Microphone and singing recognition
The follow-the-lyrics feature uses the microphone only after you explicitly allow it in the browser. The default recognition engine runs entirely on your device — microphone audio is never sent anywhere or stored. If you pick the cloud engine (the speech recognition built into your browser), the browser may send audio to its vendor (such as Google); the Service warns you before that engine starts. We never store recordings in any mode.
5. Third-party content and services
Song pages may embed the YouTube and Spotify players and link to Apple Music; those services process data under their own policies when displayed. Fonts come from Google Fonts. Product recommendations load from our own dynrs.kytary.cz service. Lyrics timing comes from the LRCLIB service (queried by our servers, not by your browser).
6. Recipients and transfers
We process data on our own infrastructure. The processors or independent controllers involved are the providers listed in section 5 (in particular Google Ireland Ltd.); Google may transfer data to the USA under the EU–U.S. Data Privacy Framework or standard contractual clauses. We may disclose data to public authorities where the law requires it.
7. Retention
Account data is kept for as long as the account exists; after cancellation we delete or anonymise it without undue delay, except where the law requires longer retention. The history identifier expires at the latest 180 days after your last visit, or when you clear it. Technical logs are kept for the time needed to secure the operation.
8. Your rights
You have the right of access, rectification, erasure, restriction, data portability and the right to object to processing based on legitimate interest. Where consent is the basis, you may withdraw it at any time. You may also lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz). Requests are handled through the contact form.
9. Changes to this policy
Material changes will be announced on this page; the document always carries a version and effective date. Previous version: policy effective from 1 November 2016 (PDF).