Privacy Policy

Last updated: June 26, 2026

This Privacy Policy explains what information Glisso ("Glisso", "we", "us") collects when you use our website and app at glisso.net, how we use it, who we share it with, and the choices you have. By using Glisso, you agree to this policy. If you do not agree, please do not use Glisso.

1. Information We Collect

Account information

When you create an account or sign in, we collect:

Email address — used to identify your account and for account-related communication.
Password — if you register with email/password, this is handled and stored securely by Google Firebase Authentication. We never see or store your raw password.
Google account details — if you sign in with Google, we receive your name, email, and profile information from Google to create your account. See "Social/Google sign-in" below.
Display name — the name shown to other players on our public leaderboards and to your friends. New accounts are given a neutral default name (such as "Player-1234") — we do not use your real name or email address as your display name. You can change it at any time, and any name you choose is public.

Practice and gameplay data

High scores, practice streaks, playtime, XP and level, selected instrument, and game settings.
Friend connections and friend codes you create or accept.
For directors and students: class join codes and class membership.

Payment information

Subscription payments are processed entirely by Stripe. We do not collect or store your full card number or security code. We retain a Stripe customer identifier and your subscription status (plan, renewal date, trial status) so we can provide your subscription. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Social/Google sign-in

If you choose to register or log in using a third-party account such as Google, we receive certain profile information from that provider — typically your name, email address, and profile picture. We use this only for the purposes described in this policy. We do not control how the provider itself processes your information; we recommend reviewing their privacy policy.

Information stored on your device

We use your browser's local storage to remember preferences such as your theme (light/dark), keybinds, and unsaved guest progress. This stays on your device and is not used for advertising.

Information collected automatically

Like most web services, our hosting and infrastructure providers may automatically collect technical data — such as your IP address, browser and device type, operating system, referring URLs, approximate location (derived from IP), and log/usage data about how and when you use Glisso. This is used primarily to operate and secure the Services and for internal analytics.

2. How We Use Your Information

To provide and operate the app — saving your progress, scores, friends, and settings.
To create and manage your account and keep it secure.
To manage your subscription, including billing, renewals, trials, and the Director class-seat system.
To operate our public global and daily leaderboards and friend features — your display name, scores, and related detail (such as the instrument or scale played) are shown to other players.
To communicate with you about your account, subscription, or important service changes.
To maintain security, prevent fraud and abuse, and comply with legal obligations.

3. Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information only when we have a valid legal basis to do so:

Performance of a contract — to provide the Services and your subscription.
Legitimate interests — to operate, secure, and improve Glisso, where not overridden by your rights.
Consent — where we ask for it; you can withdraw consent at any time.
Legal obligation — to comply with applicable laws, such as tax and accounting requirements.

4. How We Share Information

We do not sell or rent your personal information, and we do not share it for targeted advertising. We share data only with service providers who help us run Glisso, and in limited situations below:

Google Firebase (Authentication, Firestore database, Hosting, Cloud Functions) — stores your account and app data. See Firebase's privacy information.
Stripe — processes subscription payments.
Other players — Glisso has public global and daily leaderboards visible to all signed-in users. Your display name, score, and related detail (such as the instrument or scale played) appear there, as well as on friend leaderboards and friend lists.
Business transfers — if Glisso is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Legal — we may disclose information if required by law or to protect the rights, safety, or property of Glisso and its users.

5. Children's Privacy

Glisso is used by music students, including in school band settings through our Director plan. We take children's privacy seriously.

Glisso is intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13 without appropriate consent.
When a band director or school uses Glisso with students, the director/school is responsible for providing any notices to and obtaining any consents from parents or guardians that are required by law (for example, under COPPA's school-authorization provisions or applicable student-privacy laws), and represents that they have the authority to do so.
We collect only the limited information needed for a student to use the app (such as an email/display name and practice data) and do not use student information for advertising.
Public leaderboards. Display names appear on Glisso's public leaderboards, which are visible to all signed-in users. New accounts receive a neutral default name (such as "Player-1234") rather than a real name or email address, and students can change their name at any time. We recommend that students not use their full real name as a display name, and directors, parents, and guardians are responsible for supervising the names students choose.
If you believe a child has provided us personal information without proper consent, contact us at [email protected] and we will delete it.

6. Data Retention

We keep your account and practice data for as long as your account is active. If you delete your account or ask us to remove your data, we will delete or anonymize it, except where we must retain certain records (for example, billing records) to meet legal, tax, or accounting obligations.

7. Security

We rely on Google Firebase and Stripe, which provide industry-standard security including encryption in transit. No method of transmission or storage is completely secure, but we take reasonable technical and organizational measures to protect your information.

8. Your Privacy Rights

Everyone

You may review or change your account information at any time, and you can manage or cancel your subscription through the billing portal in the app. To request access to, correction of, or deletion of your personal information, email [email protected].

EEA, UK, Switzerland, and Canada

Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.

United States (California and other states)

If you are a resident of a US state with a comprehensive privacy law (such as California, Colorado, Connecticut, Texas, Virginia, and others), you may have the right to:

Know whether we process your personal information, and access it;
Correct inaccuracies in your personal information;
Request a copy of, or deletion of, your personal information;
Opt out of the sale of personal information or targeted advertising — note that we do not sell your personal information or use it for targeted advertising; and
Not be discriminated against for exercising your rights.

To exercise these rights, email [email protected]. We will verify your request before acting on it. If we decline your request, you may appeal by replying to our response; depending on your state, you may also contact your state attorney general.

9. Do-Not-Track

Most browsers offer a "Do-Not-Track" (DNT) setting. Because there is no consistent industry or legal standard for responding to DNT signals, we do not currently respond to them. If a standard is adopted, we will update this policy.

10. International Users

Glisso is operated using infrastructure that may store and process data in the United States and other countries. By using Glisso, you understand your information may be processed in countries with different data protection laws than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for significant changes, provide a more prominent notice. Continued use of Glisso after changes take effect means you accept the updated policy.

12. Contact Us

Questions about this policy or your data? Reach us at [email protected].