Privacy Policy
Last updated: October 31, 2026
Armonia is a music study archive with an AI assistant. This page explains what data we process, why, who we share it with, and how you can control it. In short: we collect only what is needed to make your account work, we do no advertising or profiling, and you can export or delete everything whenever you like.
Who the controller is
The data controller is the site operator. For any privacy request, write to ….
What data we process and why
| Data | What it is used for | Legal basis |
|---|---|---|
| Email address | Identifying your account and letting you sign in. We do not send you emails. | Performance of the service you requested (Art. 6.1.b GDPR) |
| If you sign in with Google or Apple: your account identifier at that service and the email it gives us (with Apple this may be an anonymous relay address) | Recognizing you when you sign in with that service. We do not receive your password, photo, or contacts. | Performance of the service |
| Password | We never receive it: your browser transforms it with a slow algorithm (PBKDF2, 600,000 iterations) and we store only a fingerprint of that result. The same applies to the recovery code. | Performance of the service |
| Content you create or upload: projects, notes, cards, patterns, images, audio, PDFs, and their indexed text | Storing it and showing it to you. It is visible only to your account. | Performance of the service |
| Text and images you send to the assistant | Getting the response from the AI model provider (see below). Images are sent only after you have given consent in the chat. | Performance of the service |
| Usage counters: number of requests per day, tokens, and estimated monthly cost per account | Enforcing the free plan limits and the monthly spending cap. | Performance of the service and legitimate interest in keeping the service sustainable (Art. 6.1.f) |
| Requests and reports you send to the operator (type, title, description, and the section of the site you were in, if you choose to include it) | Reading them, replying to you, and improving the service. Only you and the site operator can see them. | Performance of the service and legitimate interest in improving it (Art. 6.1.f) |
| Anonymous visit statistics: how many times per day each section is opened, country (derived from Cloudflare), device type (computer, tablet, phone), and the site visitors come from; the days on which each account opens the site | Understanding how the site is used and improving it. Visit statistics are totals only: no cookies, no IP address, no link to your account. The sign-in days stay linked to the account and are deleted along with it. | Legitimate interest in improving the service (Art. 6.1.f) |
| Encrypted fingerprint of the IP address (never the IP in clear text) | Limiting repeated sign-in attempts and sign-ups. | Legitimate interest in security (Art. 6.1.f) |
| Only when you create an account with email and password: technical signals from the browser and the IP address, analyzed by the Cloudflare Turnstile anti-bot check | Blocking automated sign-ups. The result only tells us “passed” or “not passed”; we do not store this data. | Legitimate interest in security (Art. 6.1.f) |
We do not ask for your name, date of birth, address, or payment details. We do not sell data and we do not use it for advertising.
Personal key (Anthropic)
If you enter your own Anthropic API key, it stays saved only in your browser. With each request to the assistant it passes through our server solely to be forwarded to Anthropic: we do not store or log it. Requests made with your key are governed by your agreement with Anthropic. When you sign out of your account, the key is removed from the browser.
Providers that process data on our behalf
- Cloudflare, Inc. (USA): hosts the site, the database, the files, and the abuse protections, including the Turnstile anti-bot check shown when you create an account with email. Data may be stored on or transit through servers outside the European Union.
- Google LLC and Apple Inc. (USA), only if you choose “Continue with Google” or “Continue with Apple”: they verify your identity on their own sites and give us your identifier and email, in accordance with their privacy notices.
- Anthropic PBC (USA): generates the assistant’s responses from the text and images you send.
- Google: the site loads its fonts from Google Fonts, which receives your IP address. If you open a YouTube video inside the site, the player (domain youtube-nocookie.com) is loaded by YouTube/Google under its own rules. When you paste a YouTube link, our server asks YouTube only for the video title, without any data about you.
Donations go through PayPal (PayPal.me page, outside this site): PayPal processes the payment data as an independent controller under its privacy notice. Donors may be able to see the name of the account holder; we receive from PayPal only the standard payment information and do not link it to your account on the site.
Transfers to the United States take place with the safeguards provided for by the GDPR that these providers have adopted (EU-US Data Privacy Framework or standard contractual clauses, depending on the provider).
How long we keep it
- Account and content: until you delete the account. Deletion immediately erases your email, password and code fingerprints, Google and Apple links, content, files, books, requests and reports, sessions, and daily counters.
- Requests and reports: until you delete the account (you can withdraw those not yet taken up).
- Sign-in sessions: 30 days from the last renewal, then they expire.
- Days on which an account opened the site: 13 months, then they are deleted (immediately, if you delete the account). Anonymous visit statistics remain as totals.
- Sign-in attempt counters: valid for windows of one hour at most and periodically deleted after they expire.
- Monthly totals of assistant spending: kept as accounting data linked only to a random identifier; after the account is deleted it can no longer be linked to your email.
Cookies and data in the browser
We use two technical cookies, which do not require consent: arm_s keeps you signed in to your account; arm_o exists only for a few minutes while you sign in with Google or Apple and is used to verify that the return from that service belongs to your browser. In the browser (localStorage and IndexedDB) we keep the theme, interface preferences, the offline copy of your data and, if you entered it, your personal key. When you sign out of your account we delete everything except the theme and menu. The Cloudflare Turnstile anti-bot box, loaded only in the “Create account” form, is a security service that does not use advertising cookies or track you across different sites. We do not use profiling cookies or advertising tools.
Security
Encrypted connection (HTTPS), passwords never received in clear text, protection against requests from other sites, limits on sign-in attempts. No system is perfect: if you suspect unauthorized access, change your password and write to us.
Your rights
You can access and export your data (“Export archive” button), correct it, delete it (“Account” → “Delete account”), restrict or object to processing based on legitimate interest, and request portability by writing to …. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (garanteprivacy.it).
Minimum age
The service is reserved for people who are at least 14 years old.
Changes
If we change this policy we update the date at the top; for important changes we announce it on the site.