Privacy Policy
Effective: September 14, 2026
This Privacy Policy explains how My Pedalboard (“the Service”) handles information when you use the Service.
1. Information we handle
- Google account information: your Google user identifier, name, email address, and profile image used for authentication and account display.
- YouTube information: when you connect YouTube, the Service temporarily uses an OAuth access token to obtain your channel identifier and channel name and to verify that a submitted video belongs to that channel and is embeddable. The access token is kept in browser session storage and is not stored in the Service database.
- User content: display name, pedalboards, notes, gear information, FX Loop structure, uploaded images, YouTube URLs, public/private choices, and likes.
- Technical information: Supabase and Cloudflare may process IP addresses, browser/device information, request data, and security or diagnostic logs when providing the Service.
- Communications: information you send when contacting us or reporting content.
2. Purposes
We use information to authenticate users; create and operate accounts; save, display, search, and share boards; verify YouTube video ownership; process images and likes; prevent abuse; maintain security; troubleshoot problems; respond to inquiries and rights reports; and comply with law.
3. Public information
Your email address is not displayed publicly. If you make a board public, its display name, board content, gear information, images, YouTube video, creator display name, creation date, and like count may be visible to anyone and appear in search and public listings. If you make a board unlisted, the same board information may be visible to anyone who has the board link, but the board is not intended to appear in the Service's public listings or search. Private boards are intended to be visible only to their owner, subject to security and legal requirements.
4. Service providers and international processing
We use Supabase for authentication, database, file storage, and server functions; Cloudflare for site hosting and delivery; and Google and YouTube for authentication and YouTube verification and playback. These providers process information on our behalf or as independent service providers under their own terms and privacy policies. Information may be processed and stored outside your country, including in countries whose data-protection rules differ from those where you live.
5. Disclosure to third parties
We do not sell personal information. We do not disclose personal data to third parties without your consent except when:
- processing is entrusted to a service provider as necessary to operate, secure, or support the Service;
- you choose to make information public through the Service;
- disclosure is required or permitted by applicable law or a valid legal request;
- it is reasonably necessary to protect the life, safety, property, rights, or security of a person, the public, or the Service; or
- information is transferred as part of a merger, acquisition, reorganization, or transfer of the Service, subject to appropriate protection.
6. Google and YouTube data
The Service’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. We request YouTube read-only access only when you choose to connect YouTube, and use it only to identify the connected channel and verify ownership and embeddability of a video you submit.
You can revoke the Service’s Google/YouTube access from Google Account permissions. Signing out clears the YouTube access token stored for the browser session.
7. Browser storage
The Service uses local storage and session storage for authentication sessions, language and theme preferences, and temporary YouTube authorization. The Service does not currently use advertising cookies or third-party analytics.
8. Retention and deletion
We retain account and user content while your account exists or as needed to operate and secure the Service. You can delete individual boards and gear, or permanently delete your account and posted data from My Page. Operational logs, backups, or records required for security, dispute resolution, or legal compliance may remain for a limited period before deletion or expiration.
9. Security
We use reasonable technical and organizational measures, including authenticated access and database access controls. No internet service can guarantee absolute security.
10. Your rights and requests
Subject to applicable law, you may request access to, correction or deletion of, restriction of, or information about the handling of your personal data. Many items can be edited or deleted directly in the Service, and the account-deletion feature removes the account and posted data. For other requests, contact us at the address below. We may ask for information reasonably necessary to verify your identity and account ownership before responding.
11. Children
The Service is not directed to children under 13. If you believe a child has provided personal information without appropriate consent, contact us.
12. Changes
We may update this Policy. Material changes will be announced through the Service where reasonably practicable, and the effective date will be updated.
13. Contact
Questions about privacy or requests concerning your information: support@mypedalboard.net