Privacy Policy
Last updated 31 August 2026
Ultimate Pianist is a piano game at app.ultimatepianist.com. This page explains what we collect, why, and how to get rid of it. It is written to be read, not to be survived.
We are Musical Basics. For anything on this page, write to support@musicalbasics.com.
What we collect
Your account
Signing up gives us an email address and a display name. If you sign in with Google, we receive your email address, name and profile picture from Google, and no password ever reaches us. Accounts and passwords are handled by Clerk; we never see or store your password.
What you do in the game
Your progress: pieces played, scores, accuracy, grades, coins, items, achievements, quests, and the settings you choose. We also keep replays: the timing and velocity of the notes you played, so runs can be watched back, re-scored and verified. A replay is a stream of note events. It contains no audio and no video.
Things you write and share
Chat messages, private messages, gallery notes, forum-style board posts, compositions you write in the Composer's Desk, and pieces you submit. Bug reports, including any screenshots you attach.
Usage analytics
Pages viewed, features used, session length, referring site, and device information (browser, operating system, screen size, language, whether a MIDI device is present). We use this to find what is broken and what nobody can find.
This includes your IP address. We store it two ways: truncated (the last part removed) for ordinary analytics, and precise for a short window to catch abuse and automated traffic. The precise address is deleted automatically after 30 days by a scheduled job.
What we deliberately do not collect
- Your camera and screen recordings. The webcam window and “Record run” write to your own device's storage and are saved with your browser's file picker. Nothing is uploaded, and we cannot see them. If you never save a clip, it is discarded.
- Microphone audio. When you play using your microphone, the audio is analysed inside your browser to work out which notes you played. The sound itself is never recorded, never sent to us, and never leaves the page.
- Payment card details. We do not take card payments on the site.
- Anything sold to advertisers. We do not sell personal information, and we do not run third-party advertising or tracking pixels.
What other people can see
Some of the game is social by design. These are public to other players:
- Your display name, avatar, level and rank on leaderboards and player profiles
- Scores and replays you set on public leaderboards
- Pieces you hang in your gallery, and performances you feature there
- Messages you send in zone or market chat
- Pieces you submit publicly, credited to your name
Private messages and whispers are visible only to you and the person you sent them to. Pieces you mark private are visible only to you.
One thing worth knowing: screenshots attached to bug reports are stored at a public web address so our team can view them. The address is not listed anywhere and is impractical to guess, but it is not access-controlled. Please do not attach a screenshot containing anything you would not want seen.
Who processes your data
We use a small number of services to run the game. They act on our instructions:
- Clerk: accounts, sign-in and passwords
- Supabase: the database holding your progress, and file storage
- Vercel: hosting and delivery of the site
- Resend: sending email
- Google: sign-in with Google, if you use it. Separately, if you ask the Composer's Desk assistant a question, your question and the relevant part of the score you are writing are sent to Google's Gemini API to answer it. Nothing else in your account is sent, and your score is not used to train anyone's model.
Cookies and browser storage
We use cookies for one thing: keeping you signed in. We also use your browser's local storage to remember settings, your progress while signed out, and which screen you were on. None of it is advertising, and there is nothing to consent to beyond using the site. Clearing your browser data clears all of it.
How long we keep things
- Account and progress: until you delete your account
- Precise IP addresses: 30 days, then deleted automatically
- Analytics events and truncated IPs: retained for long-range analysis
- Backups: 60 days, then overwritten
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. Email support@musicalbasics.com and we will do it. We do not require a reason.
You can turn off marketing email at any time using the unsubscribe link at the bottom of any email we send, or from the notification settings in the game. Email about your own account, such as a piece you submitted being published or a reply to your bug report, is not marketing and is not covered by that.
Depending on where you live, you may have additional rights under the GDPR, UK GDPR or CCPA, including the right to object to processing and to complain to your data protection authority. The same email address reaches us for all of it.
Children
People of every age learn the piano, and children are welcome to play. The game has chat and messaging, so an account is intended for players aged 13 and over. If you are under 13, please ask a parent or guardian to set the account up and stay involved. If you believe a child under 13 has created an account, write to us and we will remove it.
Where your data is held
Our providers operate in the United States and the European Union, so your information may be processed in a country other than your own. Transfers out of the UK and EEA rely on the standard contractual clauses those providers offer.
Changes
If this policy changes in a way that matters, we will update the date at the top and, for anything significant, tell you in the game.