Privacy Policy
Last updated 6 September 2026
Music Garage is a set of music games and tools that run entirely in your web browser. There are no accounts, no cookies, and no server that receives your data. This policy explains what is stored, where it is stored, and the few cases in which your browser contacts someone else.
The short version: we do not collect your personal information, and no audio, video, or file you produce or upload is ever sent to us or to anyone else.
1. Information We Collect
We do not collect personal information. We have no accounts, no sign-in, and no database. We never ask for your name, email address, or payment details.
Information stored on your device
The site saves your settings and your work in your own browser so they survive a reload. This data stays on your device and is never uploaded. It is stored in your browser’s localStorage under these keys:
- music-garage:music:settings stores player names, turn order, strike counts, word, and tolerance for MUSIC
- music-garage:musical-wavelength:settings stores the dial’s answer mode and range
- music-garage:pitch-math:settings stores instrument transposition and label length
- music-garage:reg:settings and music-garage:reg:selection store the filter box’s position and size, and which excerpts are selected
- loop-station:settings and the legacy loop-station:delay-ms store default track delay, volume, reverb, and your latency calibration
Player names in MUSIC are the only place the site holds anything resembling a personal detail, and they are whatever you choose to type. They never leave your device.
The Loop Station’s Save button writes your loops, their audio, and the whole mix to an IndexedDB database named loop-station, so your session is there when you return. Audio recorded in MUSIC and Pitch Math is held in memory only and is gone when you close the page.
Camera and microphone
Several games use your microphone, and the Random Excerpt Generator can use your camera. Your browser asks your permission first, and you can revoke it at any time in your browser’s site settings.
These streams are processed in your browser and then discarded. Pitch detection reads the waveform to identify the note you are playing; face tracking reads the video frame to locate your head. We do not upload, record, or retain your camera or microphone input.
The camera filter is off by default and must be switched on each session. If you leave it off, the game never requests your camera.
Files you upload
The Random Excerpt Generator lets you import images of musical excerpts. These are stored in your browser’s Origin Private File System, in a private directory named reg. No other site can read it, and neither can we. The site asks your browser to keep this storage persistent so routine cleanup does not remove your library; your browser decides whether to honor that request.
Information collected automatically
Like most websites, our hosting provider processes basic technical data needed to deliver pages to you, including your IP address. We use Cloudflare Web Analytics to count page views. It is cookieless, does not fingerprint your browser, and does not track you across other websites. It reports aggregate figures such as how many people visited a page and roughly which country and browser they used. It cannot identify you.
2. How We Use Your Information
The data stored on your device is used only to run the site: to restore your settings, keep your saved loops, and remember your excerpt library between visits. Aggregate analytics are used to understand how much the site is being used. We do not build profiles, and there is no personal information for us to use for anything else.
3. How We Share Information
We do not sell or rent your information, and we do not share it for advertising. We have no personal information to share. Your recordings, uploads, and settings never leave your device, so there is nothing for us to disclose to anyone, including in response to a legal request.
4. Third-Party Services
Two providers are involved in delivering the site:
- Cloudflare hosts Music Garage and provides its analytics.
- jsDelivr and Google Cloud Storage serve the face-tracking software used by the Random Excerpt Generator’s camera filter.
When you turn on the camera filter, your browser downloads that software from cdn.jsdelivr.net and storage.googleapis.com. As with any request to any server, this reveals your IP address and browser user agent to those providers. The requests are plain downloads of two public files and carry nothing about you, your library, or what your camera sees. All face tracking then runs in your browser.
This is the only time the site contacts anyone other than its own host. If you would prefer not to make these requests, leave the camera filter off. Your use of those services is governed by their own policies: Cloudflare, jsDelivr, and Google.
5. Children’s Privacy
Music Garage is not directed to children under 13, and we do not knowingly collect personal information from anyone, of any age. There are no accounts to create and nothing a child could submit that would reach us. Because we collect nothing, there is no information about a child for us to disclose or delete.
If you are a parent or guardian, the practical points are these: several games request microphone access and one can request camera access, all of it processed on the device and none of it recorded anywhere. Anything the site saves stays on that device and can be removed by clearing the browser’s site data.
6. Data Retention
We do not retain your data, because we never receive it. Everything the site saves is kept in your browser until you remove it. Aggregate analytics are retained by Cloudflare according to their own retention schedule and contain no information that identifies you.
7. Security
The site is served over HTTPS and sends a strict Content Security Policy along with other security headers. Because your recordings and files stay in your browser, they are protected by your browser’s own isolation between sites: no other website can read them.
Anyone with access to your device and browser profile can open the site and see what it has saved. If you share a computer, clear the site data when you are done. To report a security issue, see SECURITY.md.
8. Your Privacy Rights
Privacy laws in many places give you rights to access, correct, export, or delete the personal information a service holds about you. We hold none, so there is nothing for us to produce or erase on request.
You remain in full control of what the site has saved on your device:
- Delete everything by clearing site data for this domain in your browser settings. This removes your settings, saved loops, and excerpt library together.
- Delete your excerpt library using the delete control in the Random Excerpt Generator’s settings panel.
- Delete a saved loop by holding the Loop Station’s Save button until it fills.
- Revoke camera or microphone access in your browser’s site permission settings.
9. Do-Not-Track
Most browsers offer a Do-Not-Track (DNT) setting. We do not track you across websites under any setting, so there is no behavior for DNT to change.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page shows when it last changed.
11. Contact Us
Questions about this policy? Reach us through our issue tracker. It is public, so please do not post anything private there.