Privacy policy

Who is responsible

The company that sells Firezone is responsible for the personal data described here (the data controller):

Company

MediaMax ApS

CVR number

43055593

Address

Græsmarken 24, 4140 Borup

Email

info@mediamax.dk

What we keep

• Your account: your name, your email address, your password (only in a form that can't be read back), your language, and your two-step login and passkey settings.
• Your library: your songs and their history, your setlists, and your own key, capo and notes for each song.
• Your teams: who is a member, with which role, and the email addresses of people invited.
• Live sessions: which setlist was played, when, by which leader, and where it is in the set. For each singer's phone that joins, a random number the phone makes for itself, so the plan's limit can be counted; it is deleted 30 days after the session ends.
• Takedown requests: the name, email address and text that rights holders send us.
• Suggestions: the ideas sent with the suggestion form, on the front page or the feedback page, are kept to improve Firezone, with which part of Firezone they were sent from (such as the app or a singer's phone, never the page's address). An email address given with one is only used to answer it and is erased when the suggestion is declined or done.
• Server logs: the IP address, time, address asked for and browser of each visit, to keep Firezone secure and running.

Firezone uses a session cookie and a security token so that you can log in and send forms. It uses no advertising or tracking cookies, and no analytics. The app keeps copies of your songs on your own device so that it works without a network. A singer's phone keeps its random number, its settings (text size, light or dark, font, and whether parts are highlighted) and the set in the browser's own storage.

Singers give no name

Singers need no account, and we ask for no name. If a leader allows suggestions and messages from singers (they are off by default), the phone's random number is kept with them, and they are deleted 30 days after the session ends. The leader can clear them at any time. The set kept on a singer's phone during a session is removed when the session ends.

Where it is kept, and who helps us

• Hosting: Hetzner, on servers in Germany.
• Backups: in Germany.
• Email: Postmark sends our emails (invitations, password resets, notices). Postmark is in the United States. The legal basis for this transfer will be stated here after legal review.
• Payments: Stripe Payments Europe, in Ireland, handles subscriptions and card payments. We keep the card's type and last four digits and the subscription's status, never the full card number.

Our code is kept on GitHub, and our domain with dns.services; neither holds your data. We never sell your data.

Why we use it

We use your data to give you the service you signed up for, to keep Firezone secure (the server logs), and to handle takedown requests, which the law asks of us.

How long we keep it

• Your account and library: until you delete your account. Then they are deleted, and removed from backups as the backups are replaced.
• Server logs with IP addresses: 14 days.
• The random numbers of singers' phones, and singers' suggestions and messages: 30 days after the session ends.
• Payment records: as long as Danish bookkeeping law requires.
• Takedown requests: kept as the record of what was decided.

Your rights

You can see and export your data, correct it, and delete your account at any time in your settings. You can also ask us what we keep about you, or object to how we use it. If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency (Datatilsynet).

Questions about your data? Write to info@mediamax.dk.