Privacy Policy

Last updated: 15 October 2026

The short version: your camera never leaves your browser. We store an email address, your entitlement, your Pro setlist, and anything you deliberately upload. You can delete all of it yourself, from inside the app, without asking us.

1. Who is responsible

Gesture Synth Weld is an independent project run by an independent developer ("we"), who is the controller for the data described here. Questions, access requests and deletions: support@gesturesynthweld.app.

2. What we store, and why

• Your email address. It is your account: it is how you sign in, and how a purchase is matched to you. (If you sign in with Google we receive your Google account identifier and email address — no other Google data.)
• Your plan and entitlement. Whether you are on Pro, in a trial, or free, and the Creem identifiers for your purchase so we can recognise you as a subscriber. We do not receive or store your card details — Creem, the reseller of record, handles payment data.
• Service records. Sign-in tokens (they expire in 15 minutes), sessions (90 days, refreshed on use), the fact that a welcome email was sent or bounced, and purchase records we are required to keep for accounting.
• Your setlist, if you are on Pro. The songs you save while signed in — each one a small settings snapshot (key, chord matrix, sound, rhythm, melody). They are stored in our database so that your setlist is there on another device you sign in on. Deleting a song removes it; free accounts keep their songs in the browser only and nothing is sent.
• Recordings you upload. Only if you use a Pro cloud page, or share a recording: that file — audio, video or skeleton data — is stored for you on Cloudflare R2 until you delete it. Local recordings never leave the browser.
• Anonymous usage analytics. Page views via Google Analytics 4, and anonymised session replays via Microsoft Clarity with personal fields masked (§5).

We do not sell your data, we do not run advertising networks, and we do not build profiles of you.

3. Camera, microphone and hand tracking

Gesture Synth Weld needs your camera to see your hands. The camera stream is processed inside the page and the video is never uploaded. The microphone is off unless you switch it on for sing-along recording; when it is on, the audio is used locally to build your recording. If you then share that recording to a cloud page, the recording (which contains your camera image and, if enabled, your voice) is uploaded — that is your choice, and you can delete it at any time.

4. Cookies and local storage

• __Host-gsw_session — the only cookie we set for the account. HttpOnly, Secure, SameSite=Lax, 90-day expiry, cleared when you sign out or delete your account.
• Local storage holds your instrument settings (key, voices, panel state, your local recordings) in your own browser. It stays on your device; clearing site data removes it.
• Google Analytics sets its own cookies (§5).

5. Analytics

We use Google Analytics 4 to count visits and understand which pages lead to a subscription. It reports aggregated traffic (pages, referrers, approximate location derived from IP, device type). It is loaded only on our own hostnames — forks and preview deployments stay silent. You can block it with any content blocker, or with Google's opt-out add-on, without affecting the instrument.

Microsoft Clarity records anonymised session replays on this site (mouse movement, clicks, scrolling and the pages you visit) so we can see where an interface or a checkout gets stuck. It is loaded under the same hostname rule as the above. Fields that carry personal data — such as the email address you type while buying — are masked and never appear in a recording. You can block it the same way, with a content blocker.

6. Who else is involved

• Cloudflare — hosting, functions, database, file storage and email routing for gesturesynthweld.app.
• Creem — the reseller of record: checkout, payments, tax, receipts, and the customer billing portal.
• Google — optional sign-in, Analytics, and the web fonts this site loads.

These providers process data on our behalf and are bound by their own agreements with us. Some of them operate globally, so data may be processed outside your country.

7. How long we keep it

• Account and entitlement data: until you delete your account.
• Your Pro setlist: until you delete the song, or your account. (A deleted song leaves an empty marker — an id and a time, no contents — so that another device still holding a copy cannot bring it back. Markers are kept only for the most recent deletions.)
• Uploaded recordings and cloud pages: until you delete them — and automatically when you delete your account.
• Sign-in tokens: 15 minutes; sessions: 90 days of inactivity.
• Purchase and tax records: kept as long as accounting law requires, even after account deletion. Creem keeps its own records as the seller.

8. Your choices and rights

• Delete everything yourself: open the instrument, click the account button, and delete the account. That removes your account, your setlist, your cloud pages and your recordings, and cancels any subscription. Individual songs have their own Delete in the Songs panel: on a Pro account that removes the song from your account too, and on a free account it was never anywhere but this browser.
• Access, correction, portability, objection: write to support@gesturesynthweld.app and we will answer within 30 days. If you are in the EU/UK you also have the right to complain to your local supervisory authority.
• Analytics: block it as in §5 — the instrument works the same.

9. Children

The service is not directed at children under 13, and we do not knowingly keep accounts for them. If you believe a child has created one, write to us and we will remove it.

10. Changes to this policy

If this policy changes, the new version is published here with a new date; material changes are announced in the app.