Short version: we collect almost nothing.

Who we are

MidiSlayer is made by Monoglyph Ltd, a company registered in England & Wales (company number 17364027), registered office 128 City Road, London, EC1V 2NX. We are the data controller for the personal data described here. Questions, or to exercise any of your rights, email hello@monoglyph.co.uk. We are not required to appoint a Data Protection Officer and have not done so; the address above reaches the people who handle this.

This website

No cookies, no analytics, no trackers, no advertising pixels, no third-party scripts. Fonts are served from our own domain. The site runs on Cloudflare, which processes technical request data such as your IP address to serve and protect the page; we don't read it, combine it with anything, or keep our own copy. Because we set no non-essential cookies, there's no cookie banner to click.

The app itself

MidiSlayer keeps your practice data in a local database on your own device. There are no accounts, no sign-in, no cloud sync and no telemetry. We never see how or what you practise. The app talks to the network for only two things: licence checks with our licensing service (it sends your licence key and a short device label like "Mac · 3f9a", never your practice data) and update checks against our release server. Both fail quietly offline and the app keeps working.

When you buy

Purchases are sold and processed by Paddle.com Market Ltd as our merchant of record and reseller. Paddle is the seller you contract with for the purchase, is a separate data controller for the checkout, and handles all payment and card data under its own privacy policy. We never see or store your payment details.

After a sale, Paddle passes us a limited set of order data (your email address, name, billing country and the transaction/licence details), which we hold together with your licence key, its status, and your device activation labels. We use this to deliver and support your licence (our lawful basis is performance of your licence with us), and to prevent fraud and handle refunds and chargebacks (our legitimate interest in protecting the business against abuse). This data lives in our own database on a server in France (EU), backed up in encrypted form to Cloudflare R2.

Who else processes your data

We keep the list of processors short and name them:

We don't sell your data or share it with anyone for their own purposes.

Where your data lives

Your licensing data is stored in the EU (France), which the UK recognises as providing adequate protection. Some of our providers (Cloudflare, Resend, healthchecks.io) are US-based, so some data may be transferred to the United States. Those transfers are covered by appropriate safeguards: the UK Extension to the EU–US Data Privacy Framework and/or the ICO's International Data Transfer Agreement or UK Addendum to the standard contractual clauses, as set out in each provider's data processing agreement. Ask us and we'll point you to the specific safeguard in place.

How long we keep it

Your licence key and activation records: for the life of the licence. Order and transaction records: we keep these for six years to meet UK tax and accounting law, then delete or anonymise them. We don't keep anything longer than we need it.

Your rights

Under UK data protection law you can ask what we hold about you, get a copy, correct it, have it deleted, restrict or object to how we use it, ask for it in a portable form, and, where we rely on your consent, withdraw that consent at any time. Email us and we'll sort it, normally within a month. If we let you down, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this page ever needs to say more, it will say it before the change happens, not after.