Privacy Policy

Hosting and server logs

This website is hosted on AWS Amplify, a service of Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, 1855 Luxembourg), and delivered through Amazon’s content delivery network. To send you a page, the server has to process the request your browser makes, and it writes each request to an access log:

• your IP address;
• the date and time of the request;
• the page or file requested, the status of the answer and the amount of data sent;
• the page you came from (the referrer);
• your browser and operating system, as your browser names them (the user agent).

We need this to deliver the website and to keep it stable and secure (Art. 6(1)(f) GDPR). We read the logs only to look into a fault or an attack. AWS Amplify keeps its access logs for as long as the website is hosted there; it offers no shorter period.

Visitor statistics

To learn how many people visit, where they come from and how many reach a download button, we use PostHog (PostHog Inc., USA) in its EU Cloud, on servers in Frankfurt, Germany. It works without a cookie and stores nothing in your browser. PostHog records:

• each page shown, with its address, the page you came from and a campaign’s parameters in the address (such as utm_source);
• how far you scrolled a page and how long it was shown;
• clicks on links and buttons, with their text and, for a link, its address; for a download button, also where on the page it stands;
• how fast the page loaded;
• your browser and its version, your operating system, the kind of device, the size of your screen, your browser’s language and your time zone.

To count visitors, PostHog makes an id on its servers from your IP address, your browser’s name, the website and a random value that it replaces every day and then deletes. So you count as one visitor for a day, and nothing links one day’s visit to the next. The IP address itself is not stored, and no country or city is derived from it.

Never recorded: your name or email address, anything you type, a recording of your screen, a profile of you. Nothing links a visit to a TabTunix installation.

The legal basis is our legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR). You can object at any time: switch on “Do Not Track” or Global Privacy Control in your browser, and the website records nothing and does not even load PostHog’s script. PostHog keeps the recorded events for up to seven years, the period fixed for our plan.

Cookies

This website sets no cookies and stores nothing in your browser’s local storage. That is why it shows no cookie banner.

Downloading TabTunix

The download comes from our update server, which Amazon CloudFront (Amazon Web Services EMEA SARL) delivers. Your IP address is processed to send you the file you asked for (Art. 6(1)(f) GDPR). We keep no log of downloads.

Email

If you write to us, we process your email address, your name if you give it, and what you write, in order to answer you (Art. 6(1)(f) GDPR). Our mailbox is provided by Microsoft Ireland Operations Limited (Microsoft 365). We delete your message once the matter is settled, unless the law obliges us to keep it longer.

What stays on your computer

TabTunix needs no account. Your library (tabs, exercises, routines, chord progressions and presets), your practice history and your settings are stored on your computer and are not sent to us.

Updates

TabTunix keeps itself up to date. Ten seconds after it starts, and every 24 hours while it runs, it asks our update server whether a newer version exists, and downloads it if so. Amazon CloudFront delivers that server; the request reaches it with your IP address, as every request on the internet does. We keep no log of these requests. The legal basis is our legitimate interest in keeping every installed TabTunix working and secure (Art. 6(1)(f) GDPR).

Error reports, only if you switch them on

At its first start TabTunix asks whether it may send error reports. The switch “Send error reports” is off until you turn it on, and you can change it at any time in Settings › Privacy. While it is on, TabTunix reports an error it could not handle, and a crash of its last run. A report holds:

• what failed: the kind of error, its message and its place in the code; for a crash, also the part of the system’s crash report that describes it;
• TabTunix’s version, the version of your operating system, and your computer’s model, chip and memory;
• your audio output with its sample rate and buffer size, and the app’s language;
• the last 100 lines of TabTunix’s log;
• a random id of this installation (see “The installation id” below).

The log and the report never hold your name, your computer’s name, a serial number or a hardware id. Your home folder is written as “~”, and a device named after you, such as “Anna’s AirPods”, appears with the name replaced by “…”. In the lines TabTunix writes itself, your tabs and exercises are named by their kind, not by their title or file name; the text of an error is logged as it comes. Times are in UTC, so a report does not tell your time zone.

Reports go to PostHog (EU Cloud, Frankfurt). PostHog does not store the IP address a report comes from, derives no place from it, and keeps no profile of the installation. It keeps reports for up to seven years.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You withdraw it by turning the switch off; reports still waiting on your computer are deleted then.

Usage statistics, only if you switch them on

The second switch, “Send usage statistics”, works the same way: off until you turn it on, and independent of the first. While it is on, TabTunix records events from a fixed list:

• that TabTunix started and quit, how long it ran, and how the run before ended (as usual or in a crash);
• how many tabs, exercises, routines, presets, chord progressions and folders your library holds: the numbers only;
• which screen was shown, and for how long;
• what you played (a tab, an exercise, the metronome, a chord progression), for how long, at which tempo, and with count-in, loop, click and tempo ramp on or off;
• how you rated an exercise, and whether a routine was finished or abandoned;
• the format of a file you imported, and whether the import worked;
• which control you used, and how: by its button, its key or its menu item.

Each event carries its time in UTC, the installation’s id, an id of the run, TabTunix’s version and the version of your operating system; the event at the start also your computer’s model, chip and memory and the app’s language.

Never recorded: the title of a tab, an exercise, a routine, a preset, a chord progression or a folder; the name or path of a file; anything you type, such as a search term or notes; the name of an audio device, a sound pack or a track; anything of a tab’s content.

Events go to PostHog as error reports do: no IP address stored, no place, no profile, kept for up to seven years. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Turning the switch off also deletes the events still waiting on your computer.

The installation id

Error reports and usage statistics carry one random id, made on your computer when you first turn a switch on. It stands for the installation, not for you: it is not made from your hardware, your name or an account. When both switches are off it is deleted, and a later yes makes a new one.

Problem reports

Help › Report a Problem… sends a report when you click “Send”, each time, and never by itself. It holds:

• your description, and your email address if you enter one for an answer;
• the last 200 lines of TabTunix’s log;
• TabTunix’s settings, and the name and settings of what is open, such as a tab’s speed, loop and track volumes, or an exercise’s progress;
• your computer’s model, chip, cores and memory, your operating system, your displays and your audio devices;
• the open tab’s file, if you leave its box ticked;
• after a crash, the crash’s description;
• a random id of this installation. It is another id than the one above, so a report with your email address is never joined to error reports or usage statistics.

Before you send, “Show” in the sheet shows what goes along. Not sent: the rest of your library, your name, your computer’s name, a serial number.

The report goes to our server at Amazon Web Services in Frankfurt. The server files it as a confidential issue in our project at GitLab, which only we can read, and notifies us by email with a link to the issue. GitLab.com is run by GitLab Inc., USA, and hosted in the United States; GitLab Inc. is certified under the EU–U.S. Data Privacy Framework. An attached file stays on our server in Frankfurt and is deleted after 14 days. To limit misuse, the server counts the reports an installation id sends in a day and deletes the count after two days.

We process a report to find and fix the problem and to answer you (Art. 6(1)(f) GDPR). We keep the issue for as long as we need it for that, and delete it earlier if you ask us to.

Feature requests

“Request a Feature” sends, when you click “Send”: your text, your email address if you enter one, the versions of TabTunix and your operating system, and the installation id that problem reports carry. Nothing of your log, your settings, your computer or your library goes along. A request takes the same way as a problem report: our server in Frankfurt, a confidential issue at GitLab, an email to us (Art. 6(1)(f) GDPR).