Privacy

Music Charts Tools is a browser-based set of utilities for working with Clone Hero charts. Most of what the tools do — scanning your local songs folder, viewing sheet music, transcribing drums, aligning lyrics — runs entirely in your browser. Files you load never leave your device.

Where Google Analytics runs

We use Google Analytics 4 (measurement ID G-LEE7EDJH14) only for visitors outsidethe EEA, UK, and Switzerland. The classification happens at the edge: our proxy reads Vercel's x-vercel-ip-country header on the first request and writes a gaRegion=eea|other cookie. For visitors classified as eea, the page does not load gtag.js or any other analytics script — there is no analytics processing happening, so there is nothing to consent to. The IP itself is not stored or sent to Google Analytics; only the coarse country label is used to gate the script.

What GA receives (for tracked visitors)

• Standard pageviews (URL path, referrer, browser, device type).
• Approximate location derived from IP at country level.
• Custom events for feature usage and conversion funnels — e.g. "a chart was downloaded from Find Music", "a sheet-music viewer was opened", "a lyric was manually moved before export". The full list lives in lib/analytics/track.ts in the source repo.
• When a chart is exported from the chart editor: the charter credit written in that chart's song.ini — the name a charter publishes with their own work — plus which tools were used on it. This is how we know which charters the editing tools are useful to.
• With that export, a short checksum of the song's artist and title, so that exporting the same chart twice can be counted once. The artist and title themselves are never sent. The checksum is not a secret: it cannot be unscrambled on its own, but someone holding both it and a list of songs could confirm which one it matches.
• For signed-in users, your Supabase user ID (a UUID) so a session can be stitched across devices. No email or other PII is sent.

Error reporting

We report errors to Sentry to help improve the reliability of the site.

What we don't collect

• No advertising identifiers; we run no ads.
• No third-party trackers beyond Google Analytics and the error reporting above.
• No content of files you load: audio, charts, lyrics, and Spotify history all stay in your browser's storage (OPFS / SQLocal / localStorage). The one exception is the export event described above, which sends the charter credit and a hash of the song's identity — never notes, audio, lyrics, or the song title.

Retention

Google Analytics retains event-level data for 14 months by default; we have not changed that retention. Aggregated reports remain available indefinitely.

Opting out (visitors outside the EEA/UK/CH)

Visitors classified as other (i.e. outside EEA/UK/CH) who want to opt out of Google Analytics can use any of the standard tools:

• Google's official browser opt-out add-on: tools.google.com/dlpage/gaoptout.
• Browser tracking-protection features: uBlock Origin, Brave's shields, Firefox's Enhanced Tracking Protection, Safari's Intelligent Tracking Prevention. All of these block gtag.js by default or on demand.

Contact

Questions about this policy can go to the project's GitHub repository: github.com/elicwhite/spotify-clonehero.