Privacy policy

Piano Falling Notes is operated by Jasper de Winter. Questions and deletion requests can be sent to jasper@jasperdewinter.nl.

This website

This is a static information website hosted on Google Firebase Hosting. It has no account registration, advertising, embedded video players or analytics scripts. We do not set tracking cookies. Google processes technical request data needed to deliver and protect its hosting service. Links to YouTube take you to a separate service.

The private channel publishing tool

Our tool uses YouTube API Services. Only the channel operator connects an account through Google's OAuth consent screen. We never ask for or store a Google password.

The requested permissions let the tool identify the connected channel, upload tutorials and thumbnails, manage their video metadata and playlists, and read channel analytics for editorial planning. The YouTube management permission is broader than those specific actions; the tool does not use it to manage viewers' accounts. Read-only analytics access does not reveal individual viewers' identities to us.

Data and its use

We store the channel's OAuth refresh credential separately from source code, with restricted file access. Channel identifiers, upload identifiers, metadata and resumable upload receipts support publishing and prevent duplicate uploads. Where analytics are retrieved, they are used to understand which tutorials perform well and to plan future videos. OAuth credentials and private channel API data are not sent to AI model providers, sold, used for advertising or used to train general-purpose AI models.

The publishing worker runs on a private Netcup server; source compositions are held in a private GitHub repository. Access is limited to the channel operator and authorised technical administration. Google receives requests needed to perform authorised YouTube actions. Independently prepared musical analysis may use an AI provider, but YouTube authorisation credentials and private channel analytics are kept separate from that process.

Control, retention and deletion

The operator controls publication and can revoke access at any time through Google's account permissions. Revoking access prevents further authorised API calls; it does not delete videos already on YouTube. Those can be managed in YouTube Studio.

Credentials are retained while the operator uses the connection. Stored authorised API data will be deleted when the connection is retired or upon a deletion request, within seven days. Operational upload receipts are kept while needed to manage the associated videos. Contact the address above to request deletion of stored data; original compositions and public videos are separate assets and can be identified explicitly in the request.

Google and YouTube

Google's services are governed by the Google Privacy Policy and YouTube Terms of Service. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.