Privacy Policy

1. Who runs GuitarZone

GuitarZone is operated by Giacomo Gaggiotti as a non-commercial project. For any questions about your data or this policy, use the contact form at https://guitar-zone.com/contact/.

2. What we collect

When you sign in with Google we receive:

• Your name and email address
• Your Google profile avatar URL

As you use the app we store your activity: songs you save, custom practice videos you add, and basic usage data (pages visited, features used).

If you subscribe to our monthly newsletter, we also store your email address, the date and time you gave consent, and your subscription status.

3. How we use it

Your data is used only to:

• Provide and personalise the service (saved songs, practice history)
• Improve features based on how people use the app
• Send essential service emails (account, security)
• Send our monthly newsletter, if you've subscribed

We do not use your data for advertising. We do not sell it. We do not share it with third parties for marketing.

4. Legal basis for processing

Under GDPR, we rely on the following legal bases:

• Account and service data: necessary to provide the service you've signed up for (Art. 6.1.b)
• Usage analytics: our legitimate interest in improving the product (Art. 6.1.f)
• Newsletter: your explicit consent, given when you subscribe (Art. 6.1.a)

5. Cookies and analytics

We use a session cookie to keep you logged in. We may collect anonymous usage metrics (page views, feature clicks) through our own infrastructure to understand what's working. No third-party ad trackers or behavioural profiling.

6. Newsletter

If you subscribe to our monthly newsletter:

• Subscription is voluntary and free
• You confirm your email through a double opt-in process
• You can unsubscribe at any time using the link at the bottom of every email
• Your email is processed through Brevo (Sendinblue SAS, Paris, France), which acts as our data processor under a Data Processing Agreement. Brevo's servers are located in the European Union.

7. Service providers we use

We share data only with infrastructure providers that operate strictly on our behalf:

• Google (sign-in, authentication) — data may be processed in the United States under Standard Contractual Clauses and the EU-US Data Privacy Framework
• Cloudflare (hosting, CDN) — EU and global infrastructure
• Brevo (newsletter delivery, if subscribed) — EU servers

All providers operate under confidentiality and data processing agreements.

8. Data retention

• Account data: kept while your account is active. Deleted on request.
• Usage analytics: kept in aggregated, anonymous form indefinitely.
• Newsletter subscription: kept until you unsubscribe.

If you want your account and all associated data permanently deleted, contact us through the form at https://guitar-zone.com/contact/ and we'll take care of it within 30 days.

9. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time (for newsletter, just unsubscribe)
• Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) or your local supervisory authority

To exercise any of these rights, contact us through https://guitar-zone.com/contact/.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Significant changes will be communicated to registered users by email.

11. Governing law

This policy is governed by Italian law and EU Regulation 2016/679 (GDPR).