← Back to Glisso

Privacy Policy

Last updated: August 5, 2026

1. Information We Collect

Account information

When you create an account or sign in, we collect:

• Email address - used to identify your account and for account-related communication.
• Password - if you register with email/password, this is handled and stored securely by Google Firebase Authentication. We never see or store your raw password.
• Google account details - if you sign in with Google, we receive your name, email, and profile information from Google to create your account. See "Social/Google sign-in" below.
• Display name - the name shown to other players on our public leaderboards and to your friends. New accounts are given a neutral default name (such as "Player-1234") - we do not use your real name or email address as your display name. You can change it at any time, and any name you choose is public.

Practice and gameplay data

• High scores, practice streaks, playtime, XP and level, selected instrument, and game settings.
• Friend connections and friend codes you create or accept.
• For directors and students: class join codes and class membership.

Payment information

Subscription payments are processed entirely by Stripe. We do not collect or store your full card number or security code. We retain a Stripe customer identifier and your subscription status (plan, renewal date) so we can provide your subscription. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Social/Google sign-in

If you choose to register or log in using a third-party account such as Google, we receive certain profile information from that provider - typically your name, email address, and profile picture. We use this only for the purposes described in this policy. We do not control how the provider itself processes your information; we recommend reviewing their privacy policy.

Information stored on your device

We use your browser's local storage to remember preferences such as your theme (light/dark), keybinds, instrument and valve options, and unsaved guest progress. This stays on your device and is not used for advertising.

Sheet music you upload

Music mode lets you import your own sheet music files (MusicXML). Where those files are kept depends on your plan:

• Free accounts. Imported files are read and stored entirely on your own device, in your browser's local storage. They are not uploaded to us and not transmitted to our servers. Because they live on your device, your imported songs do not sync between browsers or devices, and clearing your browser data will remove them.
• Virtuoso accounts. So that your library follows you between devices, we also store a copy of each imported file in our database (Google Firebase), in a library attached to your account. We keep the file itself, the name you give the song, the date you added it, and, for a multi-part score, which part you chose to play.

A stored library is private. It is readable only by you, signed in to your own account, which our database security rules enforce. Glisso has no sharing or browsing feature for imported music, so no other user can see it: directors cannot see what their students import, and students cannot see each other's libraries. We do not analyze the contents of your files for advertising or profiling, and we do not sell them.

You can delete any imported song from within the app at any time, which removes it from your account and from our servers. Deleting your account removes your whole stored library. If your Virtuoso subscription ends, your songs stay on the device you uploaded them from, and we may remove the cloud copy after a reasonable period.

Information collected automatically

Like most web services, our hosting and infrastructure providers may automatically collect technical data - such as your IP address, browser and device type, operating system, referring URLs, approximate location (derived from IP), and log/usage data about how and when you use Glisso. This is used primarily to operate and secure the Services and for internal analytics.

2. How We Use Your Information

• To provide and operate the app - saving your progress, scores, friends, and settings.
• To create and manage your account and keep it secure.
• To manage your subscription, including billing, renewals, refunds, and the Director class-seat system.
• To operate our public global and daily leaderboards and friend features - your display name, scores, and related detail (such as the instrument or scale played) are shown to other players.
• To communicate with you about your account, subscription, or important service changes. This includes service emails such as verifying your email address, password resets, and billing notices. These are account-related messages, not marketing, and we do not send promotional email.
• To maintain security, prevent fraud and abuse, and comply with legal obligations.

3. Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information only when we have a valid legal basis to do so:

• Performance of a contract - to provide the Services and your subscription.
• Legitimate interests - to operate, secure, and improve Glisso, where not overridden by your rights.
• Consent - where we ask for it; you can withdraw consent at any time.
• Legal obligation - to comply with applicable laws, such as tax and accounting requirements.

4. How We Share Information

We do not sell or rent your personal information, and we do not share it for targeted advertising. We share data only with service providers who help us run Glisso, and in limited situations below:

• Google Firebase (Authentication, Firestore database, Hosting, Cloud Functions) - stores your account and app data, including the sheet music library of a Virtuoso account. See Firebase's privacy information.
• Stripe - processes subscription payments.
• Resend - delivers account and billing emails on our behalf. Resend receives your email address and the contents of that message. See Resend's Privacy Policy.
• Other players - Glisso has public global and daily leaderboards visible to all signed-in users. Your display name, score, and related detail (such as the instrument or scale played) appear there, as well as on friend leaderboards and friend lists.
• Business transfers - if Glisso is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal - we may disclose information if required by law or to protect the rights, safety, or property of Glisso and its users.

5. Children's Privacy

Glisso is used by music students, including in school band settings through our Director plan. We take children's privacy seriously.

• Glisso is intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13 without appropriate consent.
• When a band director or school uses Glisso with students, the director/school is responsible for providing any notices to and obtaining any consents from parents or guardians that are required by law (for example, under COPPA's school-authorization provisions or applicable student-privacy laws), and represents that they have the authority to do so.
• We collect only the limited information needed for a student to use the app (such as an email/display name and practice data) and do not use student information for advertising.
• Public leaderboards. Display names appear on Glisso's public leaderboards, which are visible to all signed-in users. New accounts receive a neutral default name (such as "Player-1234") rather than a real name or email address, and students can change their name at any time. We recommend that students not use their full real name as a display name, and directors, parents, and guardians are responsible for supervising the names students choose.
• If you believe a child has provided us personal information without proper consent, contact us at [email protected] and we will delete it.

6. Data Retention

We keep your account and practice data for as long as your account is active. If you delete your account or ask us to remove your data, we will delete or anonymize it, except where we must retain certain records (for example, billing records) to meet legal, tax, or accounting obligations.

You can delete your account yourself at any time from your profile page in the app. Deleting your account cancels any active subscription, removes you from the public leaderboards, and deletes your practice data, friendships, display name and friend code, any sheet music stored in your library, and your class seat - or, if you are a director, your class and every seat in it. For your security, you will be asked to confirm your password (or re-confirm with Google) first. Account deletion is permanent and cannot be undone.

7. Security

We rely on Google Firebase and Stripe, which provide industry-standard security including encryption in transit. No method of transmission or storage is completely secure, but we take reasonable technical and organizational measures to protect your information.

8. Your Privacy Rights

Everyone

You may review or change your account information at any time, and you can manage or cancel your subscription through the billing portal in the app. You can delete your account and its data yourself from your profile page (see "Data Retention" above). To request access to, correction of, or deletion of your personal information by other means, email [email protected].

EEA, UK, Switzerland, and Canada

Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.

United States (California and other states)

If you are a resident of a US state with a comprehensive privacy law (such as California, Colorado, Connecticut, Texas, Virginia, and others), you may have the right to:

• Know whether we process your personal information, and access it;
• Correct inaccuracies in your personal information;
• Request a copy of, or deletion of, your personal information;
• Opt out of the sale of personal information or targeted advertising - note that we do not sell your personal information or use it for targeted advertising; and
• Not be discriminated against for exercising your rights.

To exercise these rights, email [email protected]. We will verify your request before acting on it. If we decline your request, you may appeal by replying to our response; depending on your state, you may also contact your state attorney general.

9. Do-Not-Track

Most browsers offer a "Do-Not-Track" (DNT) setting. Because there is no consistent industry or legal standard for responding to DNT signals, we do not currently respond to them. If a standard is adopted, we will update this policy.

10. International Users

Glisso is operated using infrastructure that may store and process data in the United States and other countries. By using Glisso, you understand your information may be processed in countries with different data protection laws than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for significant changes, provide a more prominent notice. Continued use of Glisso after changes take effect means you accept the updated policy.

12. Contact Us

Questions about this policy or your data? Reach us at [email protected].