Courtesy translation. If there is any difference, the Portuguese version prevails.
Last updated: November 3, 2026
1. Data controller
Juliano Boscariol, individual, Brazil. Contact: contato@cifraslive.com.br. Privacy contact: contato@cifraslive.com.br.
2. Summary
- Cifras Live doesn't ask you to sign up, and doesn't ask for your name, email or password.
- Your songs, setlists, singers, annotations and preferences are stored on your own device.
- Our server only receives data when you use the live room (real-time transmission, not recorded) or share a setlist by short link (kept for up to 180 days).
- When you use "key by voice", the microphone is analyzed on the device itself: nothing is recorded or sent.
- We don't use advertising trackers or sell data.
3. What data and why
| Data | Where it's kept | Purpose |
|---|---|---|
| Songs, charts, setlists, keys, arrangements, annotations and display preferences | On your device (browser storage) | To make the App work |
| Singers' names and the voice range you enter | On your device; sent to the server only if you share a setlist that includes them | Remember each singer's key; send the setlist to the team |
| Setlist shared by short link (songs, keys, arrangements, singers' names) | Server (Supabase, São Paulo region) for up to 180 days | Let the team receive the setlist |
| Live room data (room code, open song, key, screen position, arrangement) and a random device ID in the room | Pass through the server in real time; not recorded | Sync the Leader's screen with the Followers |
| Microphone audio (only when using "key by voice") | Analyzed on the device; not recorded or sent | Identify the sung note (the browser asks for permission and you can decline) |
| Technical access data (IP address, browser type, date and time) | Hosting providers' logs | Site security and operation |
4. Who we share with
We use providers that process data on our behalf, only to run the App:
- Cloudflare, Inc. — App hosting (website).
- Supabase, Inc. — live room and short link server (data in São Paulo, Brazil).
These providers may process data outside Brazil (for example, technical logs), with the safeguards required by Brazil's data protection law (LGPD).
We don't sell or share data for advertising.
5. How long we keep it
- Data on your device: until you delete it (by clearing browser data or uninstalling the App).
- Setlist short links: automatically deleted 180 days after creation, or sooner on request.
- Live room: nothing is stored; messages exist only during transmission.
- Technical logs: for the period required by Brazilian law (6 months) or the providers' retention periods.
6. Your rights
You can request: confirmation of and access to your data, correction, deletion, information about sharing and withdrawal of consent. Since almost everything is on your device, you can delete that data yourself at any time. For data on our server (for example, a setlist link), write to contato@cifraslive.com.br with the link.
7. Children
The App is not directed at children under 13 and does not knowingly collect their data.
8. Security
- The App uses an encrypted connection (https).
- The shared-setlist table on the server cannot be listed: a setlist can only be opened with the link's code.
- Even so, no system is 100% secure. Don't put sensitive information in the App that isn't needed.
9. Changes
This Policy will be updated when the App gets new features (such as user accounts, cloud sync or payments). We'll announce important changes in the App.