Loading
Sign In

Privacy Policy

Last updated: October 2026

1. Introduction

Welcome to Fretlist, a service operated by Dear John Studio, registered with the Dutch Chamber of Commerce and trading as Fretlist. I respect your privacy and am committed to protecting your personal data. This privacy policy explains how I collect, use, and safeguard your information when you use Fretlist.

2. Information I Collect

I collect the following types of information:

  • Account Information: Your email address and display name when you sign up.
  • Authentication Data: If you sign in with Google, we receive your name, email, and profile picture from Google.
  • User Content: Songs (lyrics and chords), setlists, and any other content you create within Fretlist.
  • Usage Data: Basic analytics about how you use the service to help us improve it.

3. How I Use Your Information

I use your information to:

  • Provide, maintain, and improve the Fretlist service
  • Authenticate your identity and secure your account
  • Store and sync your songs and setlists across devices
  • Communicate with you about service updates and support
  • Process payments if you subscribe to a paid plan

4. How I Store Your Data

Your data is stored securely using Supabase, a trusted cloud database provider. I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Your song content is stored securely and only accessible by you.

5. Third-Party Services

I use the following third-party services:

  • Google OAuth: For secure sign-in with your Google account.
  • Supabase: For database hosting and authentication services.
  • Stripe: For processing payments (if you subscribe to a paid plan).
  • Google Tag Manager & Analytics: For understanding how visitors use our website, subject to your consent.
  • PostHog: For understanding how people use Fretlist: on the homepage, which sections visitors read and which buttons they click, without knowing who they are; and once they are signed in, which screens they visit, where they get stuck, errors the app runs into, and recordings of sessions. If you sign up, what you did on the homepage before is linked to your new account. PostHog only runs if you consent to analytics cookies. Recordings mask all text and everything you type, so they show the layout of the screen and where you clicked, never your songs, lyrics or titles. Play Mode is never recorded. Data is stored in PostHog's EU region (Frankfurt). A few key moments (signing up, your first song, first import, first setlist and first time in Play Mode) are sent from our server with your account ID only, without your name or email.
  • Vercel Web Analytics: For counting visits to the public pages (such as the homepage, blog, docs and the sign-in page) and clicks on the sign-up buttons. It sets no cookies and stores nothing on your device. A visitor is recognized only by a hash of the request that is discarded after 24 hours, so it cannot follow you across days or sites. It does not run inside the app.
  • Meta Pixel: For measuring how well my Facebook and Instagram ads perform, and for showing ads to people who have visited the site. Only active if you consent to marketing cookies.

Each of these services has their own privacy policy governing how they handle your data.

Transfers outside the EU: my contracting party for the Meta pixel is Meta Platforms Ireland, and data collected by the pixel may be processed in the United States. Those transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework. For the pixel specifically, Meta and I are joint controllers for collecting and transmitting that data, as set out in Meta's Controller Addendum.

6. Your Rights

You have the right to:

  • Access your personal data at any time through your account
  • Export your songs and setlists
  • Request deletion of your account and all associated data
  • Update or correct your personal information

To exercise these rights, visit your account settings or contact me directly.

7. Data Retention

I retain your data for as long as your account is active. If you delete your account, I'll delete all your personal data and content immediately, except where I'm required to retain it for legal purposes.

When you delete your account, I retain a small set of anonymous aggregate statistics (such as plan type, membership duration, and activity counts like songs created or days active) for product analytics purposes. These statistics contain no personally identifiable information: no name, email address, or any data that could be used to identify you.

8. Cookies and Tracking

I use the following types of cookies:

  • Essential Cookies: Required to keep you signed in and maintain your session. These cannot be disabled.
  • Analytics Cookies: Help me understand how visitors use the website and the app. Set by Google Analytics and by PostHog, and only if you consent.
  • Marketing Cookies: Let me see which ads bring people to Fretlist, and show ads to visitors who did not sign up. Set by the Meta pixel (_fbp, _fbc), and only if you consent. The banner offers this category only while ad measurement is switched on, so you are not asked about a purpose that is not in use.

When you first visit Fretlist you will see a cookie banner. Accepting and declining are each a single click, and where more than one optional category applies you can choose between them. Nothing in the analytics or marketing categories loads before you choose.

You can change or withdraw your choice at any time through the Cookie Settings link in the footer of any page. Withdrawing marketing consent stops the pixel from sending anything further and deletes the cookies it set.

The Meta pixel runs on the public pages only. It is not active inside the signed-in app, so Meta receives nothing about your songs, your setlists, or how you use them.

I use Google Tag Manager with Consent Mode v2, which means Google receives no analytics or advertising storage until you give your consent.

9. Changes to This Policy

I may update this privacy policy from time to time. I'll notify you of any significant changes by posting a notice on the website or sending you an email.

10. Contact Me

Fretlist is operated by Dear John Studio, registered with the Dutch Chamber of Commerce and trading as Fretlist. If you have any questions about this privacy policy or how I handle your data, please contact me at hello@fretlist.com