Privacy policy
Strum by Strum is a small app for writing, arranging, and playing songs with your band. This page says what we keep about you, why, and how to get rid of it. Effective September 12, 2026.
What we collect
Your account. An email address and a display name. If you sign in with Google or Spotify, we receive the name, email address, and profile picture that provider shares. We use them only to create or find your account and to show you to your band mates. We never see your Google or Spotify password.
What you make. Songs, chord charts, lyrics, setlists, bands, and comments you create in the app, along with a revision history so edits can be undone. Anything you share with a band is visible to that band's members.
Spotify connection. If you connect Spotify for playback, we store the access and refresh tokens Spotify issues so the player keeps working. We use them only to play music in the app and to read the track details you ask for.
Usage and logs. Page views and performance timings through Vercel Analytics, which does not use cookies or track you across sites. Our servers keep ordinary request logs (IP address, browser, pages requested) for a short time to diagnose problems.
Sign-in cookies. A session cookie keeps you logged in. If you download a setlist for offline use, its songs are stored in your own browser and never leave your device.
How we use it
- To run the app: sign you in, show your songs, sync with your band.
- To send you the emails you ask for: login links, password resets, invitations.
- To find and fix problems.
We do not sell your data, show ads, or use your content to train models. We do not send marketing email.
Google user data
When you sign in with Google we request only your basic profile (name, email address, picture). Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. That data is used to identify you and nothing else. You can revoke access at any time from your Google account's connected apps page.
Who else sees it
Your data is stored and processed by services we rely on to run the app, each under its own privacy terms:
- Supabase hosts the database and handles sign-in.
- Vercel serves the app and provides analytics.
- Resend delivers the emails we send you.
- Google and Spotify, only if you choose to sign in or connect with them.
We don't share your information with anyone else.
Keeping and deleting it
We keep your account and content until you ask us to delete them. Email hello@strumbystrum.com from the address on your account and we will remove your account, your Spotify tokens, and the content only you own. Songs you shared with a band stay with the band unless you delete them first.
Changes and contact
If this policy changes in a way that matters, we'll note it here with a new effective date. Questions go to hello@strumbystrum.com.