Privacy Policy
This Privacy Policy describes how personal data is processed on Pianify (pianify.net), in accordance with Articles 13 and 14 of the GDPR.
1. Controller
The controller is a private individual resident in Hungary. Contact: info@pianify.net.
No data protection officer has been appointed. Article 37 GDPR does not require one for this service.
2. Data we process
You can play without an account. If you create one, we process:
- Account data: username, email address, hashed password, avatar and language preference.
- Session data: a sign-in cookie, so you stay signed in.
- Leaderboard data: scores and related play information shown on the public boards and on your profile.
- Security data: one-time codes, rate limits, bot checks, and records used to prevent abuse of accounts and leaderboards.
We do not process payment card or PayPal details. Optional tips are made on Ko-fi and PayPal after you leave this site, under their own privacy notices.
3. Purposes and legal bases
We process account, session and leaderboard data to provide the service you request, including signing in, language, profiles and leaderboards (Article 6(1)(b) GDPR).
We process security data to protect the service, prevent abuse and keep leaderboards reliable (Article 6(1)(f) GDPR). If an account is restricted, that decision is taken by a person, not solely by automated means (Article 22 GDPR).
4. What is public
Your username, avatar, join date and results are public, including on your player page. Your email address and password are not.
5. Recipients and transfers
| Processor | Role | Location | Safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, API, database and file storage, rate limiting and bot protection. | Storage in the EU; requests may be processed on Cloudflare's global network. | Standard Contractual Clauses; EU-US Data Privacy Framework |
| Resend (Plus Five Five, Inc.) | Transactional email (verification, password reset, email change). | United States | Standard Contractual Clauses; EU-US Data Privacy Framework |
They act on our instructions. Where personal data is processed outside the EEA, the transfer relies on the safeguard named above.
Ko-fi and PayPal are not our processors. They receive data only if you choose to send a tip.
6. Retention
- Account and leaderboard data: until you delete the account. Identifiers may then be kept for up to 30 days so an accidental deletion can be reversed, unless you ask us to erase them at once.
- Session cookie: 30 days, or until you sign out.
- Short-lived security checks: typically under one hour.
- Abuse-prevention records: up to 12 months.
After deletion we may keep a one-way fingerprint of the email address so that an account closed for abuse cannot be reopened immediately on the same address. It cannot be turned back into an email address and is not used for anything else.
7. Your rights
You may request access, rectification, erasure, restriction, objection and data portability by writing to info@pianify.net. We respond within one month. You can also download the data we hold on your account from your profile, and edit your username (once every 30 days), email, avatar and language there.
You may lodge a complaint with Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11, Hungary, or with the supervisory authority of your habitual residence.
9. Age
You must be at least 13 to create an account. Playing without an account does not require one. If we learn that an account belongs to someone younger, we delete it.
10. Security
Passwords are stored hashed, not in plain text. The site is served over HTTPS. Sign-in and registration are rate-limited. If a personal-data breach is likely to result in a risk to you, we will notify you and the supervisory authority as required by Articles 33 and 34 GDPR.
11. Changes
The version and date appear at the top of this page. We will notify you in the service before a material change takes effect.