Privacy Policy

Your song library is made of files in a folder you choose. chordlist does not upload that library to a developer-operated account, server, or sync service. Optional analytics and chord contributions, adverts shown to free users, explicit website imports, feature requests, purchases, chordlink orders and notifications, support emails, and visits to this website are handled as described below, together with the legal basis for each and how long the data is kept.

chordlist is operated by makerer studio, the controller responsible for the processing described here. Privacy questions can be sent to support@chordlist.app.

The postal address is listed in the imprint.

The app reads and writes Markdown files in a folder you select through Apple's Files interface. Those files can contain titles, artists, chord progressions, tags, lyrics, and play information.

chordlist does not automatically upload or sync these files. If you choose a folder managed by iCloud Drive or another file provider, that provider may store or sync the files under its own terms and your device settings.

Files are retained until you edit or delete them, remove them using another file-management app, or change the selected folder. Deleting the app does not necessarily delete files stored outside its app container.

Analytics are off by default. After onboarding, chordlist asks whether you want to allow usage analytics. No analytics are sent unless you choose “Allow Analytics”. You can change the choice at any time in the app's Settings.

The app stores your choice and the version of the consent notice on your device. Declining analytics does not limit the app's features.

When enabled, chordlist uses TelemetryDeck to send app interaction events such as viewing the song list, shuffling, transposing, creating, or editing a song. Song files, lyrics, titles, artists, and chord data are not included in usage analytics.

TelemetryDeck may process an anonymized installation identifier, the event, an hour-level timestamp, and device or app metadata such as device type, operating-system version, app version, and build information. TelemetryDeck states that it does not store IP addresses or personally identifiable information for app analytics.

Analytics are based on your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw it at any time by turning analytics off in Settings; this stops all further events and does not affect processing that happened before.

Learn more in the TelemetryDeck privacy FAQ.

A separate setting lets you choose to contribute chord data. It is off by default and works only while anonymous analytics are also enabled.

When you add or change chords with this option enabled, the song title, artist, key, capo, tuning, section names and their chords, a random contribution identifier, a one-way hash of the song's local identifier, and the app version are sent to TelemetryDeck as part of an analytics event. Lyrics, tags, and notes are never included. Turning off anonymous analytics also turns off chord data contribution.

makerer studio then copies these contributions from TelemetryDeck into the chordlist chord database, hosted by Supabase in its Ireland region, to compare independent contributions and suggest chords. Before a contribution is stored, TelemetryDeck's anonymized installation identifier is hashed again with a secret key held only by makerer studio, and the original identifier is discarded. Contributions are reviewed and can be removed during moderation.

Contributions are based on your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by turning the setting off, which stops all further contributions. Stored contributions are kept for as long as the chord database is operated. Because they cannot be linked back to you, your Apple account, or your device, we cannot find your earlier contributions on request (Art. 11 GDPR).

If you ask the app to import a song from a URL, your device requests that page from the selected website and processes the returned content to create a song. The website may receive standard request information such as your IP address and device user-agent under its own privacy policy. The import is initiated only when you provide a URL; makerer studio does not receive the fetched page through a separate import server.

Until the unlimited-song unlock is purchased, chordlist shows a small advert for another independent app at the end of the song list and of each song. Adverts are provided by Kickstart Exchange, operated by Hudson Heavy Industries Ltd in the United Kingdom, which decides independently how it processes this data.

To show and count adverts, Kickstart Exchange receives your App Store country and records which advert was shown or tapped. According to Kickstart Exchange, it does not collect IP addresses, device identifiers, the advertising identifier, or cookies, does not track you across apps or build profiles, and keeps advert records for about 30 days before keeping only daily totals. Its network provider, Cloudflare, carries the connection; Kickstart Exchange states that it does not retain IP addresses.

makerer studio shows these adverts on the basis of its legitimate interest in financing the free version of chordlist (Art. 6(1)(f) GDPR). Buying the unlimited-song unlock removes the adverts. The European Commission has recognized the United Kingdom as providing an adequate level of data protection.

Kickstart Exchange describes its handling of this data in its privacy notice.

The optional unlimited-song unlock is processed by Apple through StoreKit. Apple handles the App Store account and payment method. The app receives product and transaction information needed to determine whether the unlock is available; makerer studio does not receive your payment-card or bank-account details.

chordlist uses RevenueCat to manage purchases and verify entitlements. RevenueCat processes an anonymous app user identifier it generates, purchase and receipt information from Apple, and device or app metadata such as platform, app version, and country. It does not receive your payment-card or bank-account details, and chordlist does not send it your song library.

RevenueCat processes this data on our behalf. It is based in the United States, so the data is transferred outside the European Union under the standard contractual clauses in RevenueCat's data-processing addendum. Purchase processing is necessary to provide what you bought (Art. 6(1)(b) GDPR).

Apple's handling of App Store data is covered by the App Store privacy information.

RevenueCat's handling of that data is described in its privacy policy.

When chordlink sales open, Stripe will process the checkout, buyer email, payment, and German delivery address. makerer studio will use that information to fulfill the physical order and send the individual Apple offer-code redemption link. Payment-card and bank-account details remain with Stripe.

The private chordlink inventory stores only the Stripe Checkout Session reference, the unit's public number and edition metadata, fulfillment state, an optional operator note, and its assigned Apple offer code. The public NFC number is not used as an entitlement secret. Buyer email and delivery address are not copied into the chordlist database.

That inventory is a Postgres database hosted by Supabase, which stores and processes it as a service provider on behalf of makerer studio and under its instructions. Supabase may also process the connection, request, and security information needed to operate the database and the functions that read it.

The database is located in Supabase's Ireland region, so these records are stored in the European Union. Supabase is a company based in the United States, and it may access stored data from outside the European Union where that is necessary to operate, secure, and support the service, under the terms and transfer safeguards of its data-processing agreement.

If you use the online chordlink withdrawal function, Brevo sends your declaration to makerer studio and immediately emails you a confirmation containing its content, date, and time. Brevo processes the name, order identifier, confirmation email address, and withdrawal record only to receive and document the withdrawal and to meet legal obligations.

Individual /link/ URLs redirect to a shared setup page without carrying the unit number into page analytics. Hosting infrastructure may still process the requested URL in ordinary security and delivery logs.

When you scan a chordlink in the app, the app sends the chordlink's public number, the secret setup code stored in the tag, and a random claim identifier created by the app to the chordlist chordlink service at Supabase. The setup code and claim identifier are stored only as one-way hashes, so the same app installation can retrieve its offer again and no other installation can claim it. No name, Apple account, or device identifier is sent.

Checkout, fulfilment, and offer delivery are necessary to perform the purchase contract (Art. 6(1)(b) GDPR). Withdrawal records and order and invoice records are kept to meet legal obligations (Art. 6(1)(c) GDPR): order, invoice, and accounting records for the periods required by German commercial and tax law, generally up to ten years (§ 147 AO, § 257 HGB), and withdrawal records until the end of the regular three-year limitation period.

Stripe describes its handling of checkout data in its privacy policy.

Supabase describes its handling of data it stores for its customers in its privacy policy.

While chordlink is not on sale, the product page offers to notify you by email when it becomes available. Giving your address is voluntary and is never required to read the site or use the app. makerer studio uses it for that one purpose and does not sell, rent, or share it for anyone else's marketing.

The list uses confirmed opt-in: submitting the form sends one confirmation email, and you are added only when you select the link in it. An address that is never confirmed is never written to again. Every message includes an unsubscribe link, and unsubscribing removes you from the list.

The list is operated by Brevo, a company based in France, which sends the confirmation and later messages, records the confirmation as proof of consent, and handles unsubscribes. It stores the email address, the language the form was submitted in, whether you signed up before the first sale or after it sold out, and the technical record of your confirmation. Brevo stores this data on servers in the European Union and processes it as a service provider on behalf of makerer studio.

The notification list is kept separate from the chordlink order inventory: an address given here is not added to the order database, and buying a chordlink does not add you to this list.

The list is based on your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time through the unsubscribe link in every message or by emailing support@chordlist.app; this does not affect messages sent before. After you unsubscribe, Brevo keeps your address only on a suppression list so you are not emailed again, together with the record of your original confirmation as proof of consent. The whole list is deleted once chordlink is no longer offered.

Brevo describes its handling of this data in its privacy policy.

Choosing “Send Feedback” opens an email draft. If you send it, the message can include the content you write plus app-version and iOS details included in the draft. Your email provider and ours process that message; our support mailbox is hosted by Apple through iCloud Mail. Support correspondence is retained only as long as reasonably needed to respond, keep support records, or meet legal obligations.

Answering your message is based on our legitimate interest in providing support (Art. 6(1)(f) GDPR), or is necessary for the contract when it concerns a purchase or chordlink order (Art. 6(1)(b) GDPR).

“Feature Requests” in the app's Settings opens a board where you can suggest features, vote for suggestions, and comment on them. The board is provided by Kickstart Signal, operated by Hudson Heavy Industries Ltd in the United Kingdom. Opening and reading the board is anonymous; nothing about you is sent beyond what is needed to load it.

When you vote, suggest a feature, or comment, Kickstart Signal receives what you write, your vote, and a random installation identifier that the app creates on your device the first time you do so. The identifier is not derived from you, your Apple account, or your device; it only lets your vote be counted once and undone later. To confirm the request comes from a genuine copy of chordlist, the app may send Apple's signed record of the app installation, which Kickstart Signal checks and then discards. chordlist does not tell Kickstart Signal whether you have bought the unlimited-song unlock. According to Kickstart Signal, it uses IP addresses only temporarily to prevent abuse and does not store them, does not use feedback for advertising or tracking, and does not build profiles of app users. Its network provider, Cloudflare, carries the connection.

Suggestions and comments stay private until makerer studio reviews them. Approved ones are shown to everyone who opens the board in the app, and may be edited for clarity or merged with similar requests, so please do not include personal information. They are kept for as long as the board exists. Because Kickstart Signal cannot tell who wrote a submission, ask us at support@chordlist.app if you want one of yours changed or removed.

The board is based on our legitimate interest in learning which features people want (Art. 6(1)(f) GDPR). Storing the installation identifier on your device is necessary to provide the vote or submission you asked for (§ 25(2) no. 2 TDDDG). The European Commission has recognized the United Kingdom as providing an adequate level of data protection.

Kickstart Signal describes its handling of this data in its privacy notice.

This website is hosted by Vercel. Like other hosting providers, Vercel may process request and technical information needed to deliver and secure the site.

The production website also uses Vercel Web Analytics for aggregate traffic statistics. Vercel states that Web Analytics does not use third-party cookies, does not associate page views with personal identifiers, and uses a daily-changing hash rather than a persistent cross-site identifier. Data points can include the page visited, referrer, filtered query parameters, approximate location, device type, operating system, browser, and timestamp.

Delivering and securing the site and measuring aggregate traffic are based on our legitimate interest in operating a reliable, secure website and understanding which pages are useful (Art. 6(1)(f) GDPR). Vercel is based in the United States, so this data may be processed outside the European Union.

See Vercel's Web Analytics privacy and compliance information.

makerer studio does not sell your song library or personal information. Data is shared only when you initiate an action, enable an optional feature described above, when adverts are shown to free users as described above, or when a service provider needs it to operate the app, website, purchase, or support channel. Information may also be disclosed when required by law or necessary to protect rights, safety, and service integrity.

• Disable anonymous analytics in the app's Settings.
• Leave optional chord-data contribution disabled or turn it off at any time.
• Choose, move, edit, export, or delete your song files using compatible file-management tools.
• Unsubscribe from chordlink notifications through the link in any message.
• Ask us to change or remove a feature request or comment you submitted.
• Withdraw any consent at any time, with effect for the future.
• Object to processing based on our legitimate interest, including adverts, for reasons arising from your particular situation (Art. 21 GDPR).
• Ask for access to, correction, deletion, restriction, or a portable copy of personal data we hold about you (Art. 15–20 GDPR).
• Complain to a data-protection supervisory authority, in particular the one where you live or where we are established.

Send requests to support@chordlist.app.

This policy may be updated when the app, website, or service providers change. Material changes will be reflected here with a new “Last updated” date.