Privacy Policy

Introduction

This website hosts a custom port of BassoonTracker, a JavaScript-based music tracker application. We highly respect your digital privacy. This policy outlines how data is handled when you use this version of the tracker.

1. Overview of Data Collection

This port is designed to minimize data footprint. Virtually all application processing occurs entirely inside your local web browser. We do not run automated trackers, analytics scripts, or data-monetization schemes on this site.

Key Principle: Your music files, hardware settings, and audio configurations remain locally on your machine and under your complete control.

2. Local Data Storage

The application relies on your browser's local storage to save your workspace preferences. This information does not leave your device unless you manually authorize a cloud synchronization feature.

Data Stored Locally (Browser localStorage):

Data Item	Purpose	Duration
`bassoonTrackerSettings`	Application preferences, MIDI configurations, layout options, and Dropbox token visibility states.	Until browser data is cleared
Music Tracks & Modules	MOD and XM audio projects created or uploaded by the user.	Until manually deleted
Audio Samples	Sound assets used to compose music modules.	Until manually deleted
Playlist Data	Your saved lists of tracker modules and personal favorites.	Until manually deleted
Recent Files	Shortcuts referencing local files recently opened in the session.	Until browser data is cleared

This data is sandboxed locally within your individual browser instance and is never automatically transmitted to any backend database owned by this site.

3. Dropbox Integration (Optional)

This port includes optional integration with Dropbox to allow you to back up and sync your music projects directly to the cloud. This behavior is entirely opt-in.

When Connecting to Dropbox:

Authentication happens directly on Dropbox's official, secure platform.
Upon authorization, the application is granted scoped access only to a dedicated app folder: /BassoonTracker.
An OAuth 2.0 security token is stored inside your browser's localStorage under the key __dbat to remember your session.
This token enables the browser app to upload and download files straight to your designated folder.

Dropbox Access Scope:

The application cannot view, modify, or interact with any files outside of its specific app sandbox directory.
No personal account details from your profile are requested or retained.
You can immediately sever this connection via your Dropbox Connected Apps management console.

Important Note: File storage on Dropbox is bound by their specific platform infrastructure. Please consult the Dropbox Privacy Policy for information regarding how they secure their cloud storage.

4. Dropbox Configuration Storage

The site stores a non-sensitive identifier under the key bassoonDropboxClientId within your local storage. This purely helps direct the browser application to communicate with the correct OAuth endpoint upon login requests.

5. Data Handling & Hosting Logs

The tracker application itself does not monitor behavior, drop tracking cookies, or build user profiles. However, users should be aware of the following basic web functionalities:

Hosting Infrastructure: This site is hosted using Neocities. Like virtually all standard web hosts, the underlying Neocities server infrastructure may automatically process standard server log data (such as temporary IP addresses, browser types, and access timestamps) strictly to deliver the website files and maintain server stability.
Hardware Permissions: Web Audio APIs, Web MIDI access, and local file pickers operate purely client-side to make the music playback function. No hardware data is recorded or transmitted.

6. External Repositories

If you choose to stream or pull classic music modules directly from external web resources (like ModArchive or Modules.pl), your browser connects directly to those third-party services. Those connections are subject to the privacy terms of those external domains.

7. Open Source Architecture

The code architecture powering this application runs transparently in the browser environment. Users can inspect the client-side JavaScript assets directly through native web browser tools to confirm exactly how data is handled.

8. Your Controls & Data Removal

Because you own your workspace data, managing it is completely straightforward:

Data Deletion

You can instantly wipe all local preferences, custom tracking lists, and stored tracks by clearing your web browser’s cache and site cookies or deleting site storage via your browser's built-in developer options.

Revoking Cloud Access

To disconnect the app from your storage account, disconnect "BassoonTracker" inside your Dropbox Connected Apps panel and manually clear out the local __dbat string value from your browser storage settings.

9. Security Considerations

Because data storage is decentralized, your workspace protection rests on standard web safety hygiene: maintaining the security of your physical machine from malware, running a secure modern web browser, and connecting via a secure, encrypted HTTPS link.

10. Framework Privacy Design (GDPR & CCPA Alignment)

While this is a personal, non-commercial portfolio web asset, its client-side design inherently mirrors strong modern privacy frameworks:

Data Minimization: No user registration or account sign-ups are required to run the tracker.
Inherent Erasure & Access: Since you maintain the physical location of the files inside your browser storage, your rights to access, change, or destroy the data are directly managed by you at all times.
No Data Brokering: No personal details are gathered, sold, shared, or traded to marketing networks.

11. Contact & Repositories

To explore the baseline source framework or report structural application questions, you can reach out via the following open hubs: