Privacy Policy¶
Plain-language summary — under legal review
This is a plain-language summary of our privacy notice, meant to orient you. The full legal version is under review and, once published, will prevail over this page. The controller's identifying details and some formal references will be completed before the public launch.
We process personal data under the EU General Data Protection Regulation (GDPR, Reg. (EU) 2016/679). In short: we don't sell your data, we don't profile or run advertising tracking, and your data stays within the European Union.
What we process and why¶
| Data | Purpose | Legal basis |
|---|---|---|
| Account & authentication (email, identifiers) | Create and manage your account, sign-in, deliver the service | Contract |
| Your content (lead sheets and metadata) | Store, display and — at your choice — share | Contract / your choice for public content |
| Usage & technical data (logs needed to run and protect the service) | Operation, troubleshooting, abuse prevention | Legitimate interest |
| Security (Firebase App Check signals) | Protection from abuse and fraud | Legitimate interest |
| Error diagnostics (Sentry) | Detect and fix faults | Legitimate interest |
| Aggregate usage analytics (anonymous counters, no profile) | Understand feature usage and improve the service | Legitimate interest |
No tracking cookies¶
Leadsheet.app does not use profiling, tracking or marketing cookies, nor third-party analytics tools that install identifiers on your device. No prior cookie consent is therefore required.
To function, the app uses only browser local-storage technologies that are strictly necessary or tied to preferences you express: remembering the language and interface state, saving offline editor drafts so you don't lose work, keeping your session and security (Firebase), and caching app resources (PWA). None of these tracks your activity.
Usage analytics: first-party and anonymous¶
Our usage statistics are first-party and server-side: they install no cookies or identifiers on your device, do not store your user identifier and do not build profiles. Events are reduced to aggregate counters and to an anonymous log with an ephemeral session identifier (in memory, never written to your device, discarded on page reload), automatically deleted after 90 days.
Who we share data with¶
We don't sell your data. We use providers acting as data processors:
- Google / Firebase — authentication, database, hosting, security. Data stored in the
European Union (Firestore
eur3; Functions and Realtime Databaseeurope-west1). - Sentry — error reporting, configured without personal identifiers and without session replay. Processed in Germany.
Your data is stored and processed within the EU. We may disclose data where required by law or to handle copyright/abuse reports.
Your rights¶
Under the GDPR you have the right of access, rectification, erasure, restriction, objection and portability. You can export your data and delete your account directly from the application settings; we respond to requests within 30 days. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).
Retention and minors¶
We keep your data while your account is active; after deletion we remove it within a reasonable period, except routine backups and legal obligations. The service is not directed to minors below the age stated in the Terms of Service.
Contact¶
To exercise your rights or for privacy questions: privacy@leadsheet.app.