Privacy policy

Who runs Kumzits

Kumzits (kumzits.app) is a free chord and songbook site made and run by The3DFella. In this policy, “we” means The3DFella.

Questions about your privacy: [email protected].

If you don't sign in

We don't collect anything personal. Your lists, cover and layout settings, logo, keys, capos and chord-view settings are saved in your own browser (its local storage). They stay on that device and we can't see them.

Some features send something only when you use them:

• Make short link sends your guest link to is.gd, a free link shortener, to make the short link.
• Suggest a fix (including reporting a problem) and Request a song send us the song, your suggestion or note and, only if you fill them in, your name and email or phone, so we can review it and get back to you.
• The tuner listens on your microphone only while it's open. The sound is analysed on your device and is never recorded or sent anywhere.
• YouTube and Spotify buttons open those sites; what happens there is up to their own privacy policies.

If you sign in

Signing in is optional. You can sign in with Google or with a 6-digit code we email to you. When you do, we keep:

• Your email address — from Google, or the one you type in.
• Your name, if you sign in with Google. Google also shares your profile picture, but we don't keep it.
• Your Google account number (an ID Google gives us), so we know it's you next time.
• Your lists, with the keys and capos you picked, so they show up on every device you sign in on.
• When your account was made and when you last signed in.

We never get your Google password, and we can't see your Google contacts, email or files.

Cookies

We only use cookies to keep you signed in. There are no advertising or tracking cookies.

• sb_session keeps you signed in for up to 60 days, or until you sign out. Signing out deletes the session on our side too.
• sb_oauth is used for a few minutes while you sign in with Google, to make sure the answer really comes from Google. It is deleted right after.

If you never sign in, we set no cookies.

Sign-in codes and abuse protection

To stop people from guessing codes or flooding inboxes, we limit how many codes can be asked for or tried. For that we keep a scrambled (hashed) form of your internet address, never the address itself, next to each code request, wrong code and suggestion.

Codes work for 10 minutes. Code requests and wrong-code records are deleted after about a day. We keep sign-in codes only in scrambled form too.

If you used JGC

Kumzits can bring over your lists from JGC (jgcapp.org), so they're waiting for you the first time you sign in. For that, we copied JGC users' accounts ahead of time: email address, name, JGC account number, playlists (including copies of playlists others shared with you), favorites (as a list called “Favorites”), and the keys and capos you picked.

The copy is matched to you by email address: when you sign in with the same email you used on JGC, you'll find your lists. JGC accounts without a real email address were not copied.

Don't want your JGC data here? Email [email protected] from that address and we'll delete it, whether or not you've ever signed in.

Services we use

These companies handle data for us only to run the site:

Cloudflare

Hosts the site and its database, where accounts and lists are stored. Like any web host, it sees your internet address when you visit.

Google

Signs you in when you choose “Sign in with Google”. The site's fonts also load from Google Fonts.

Resend

Sends the email with your sign-in code.

We don't sell your data, rent it, or share it with anyone else, and we don't show ads.

How long we keep it

Your account, lists, keys and capos stay until you ask us to delete them. Sessions end after 60 days or when you sign out. Suggestions, problem reports and song requests you send are kept with the song's edit history; ask us if you'd like your name or contact removed from one.

Deleting your account or data

Email [email protected] from the address on your account and say what you'd like deleted, or ask for a copy of what we have. We'll delete your account, lists, keys and capos. Lists saved in your browser are yours to clear: clear the site's data in your browser settings.

Changes to this policy

If we change what we collect, we'll update this page and the date at the top before the change goes live.

Contact

The3DFella, Kumzits
[email protected]