Privacy Policy
Last updated: August 11, 2026
Template — review before launch. This is a starting draft, not legal advice. Have it reviewed and tailored (especially the governing-law section) before relying on it.
RiffRep is a local-first practice player with no accounts. Your library of songs, loops, and setlists lives on your device in your browser's storage (IndexedDB). We never upload or host your audio files, and RiffRep works fully without you giving us any personal details.
What we collect
- On your device only. Your songs, loops, setlists, and practice settings stay in your browser. They are never sent to us. You can move them between devices yourself using the backup/restore tools on the Settings page.
- No account. RiffRep has no sign-in and no user accounts, so we do not collect your email address or any login information.
Service providers
RiffRep is served through Cloudflare (hosting/CDN and privacy-friendly, cookieless usage analytics) and uses Sentry to collect anonymous error and performance diagnostics so we can fix crashes. Songs you load play through the embedded YouTube player (Google). These providers process limited technical data (such as your IP address and browser type) on our behalf under their own terms.
YouTube
RiffRep uses YouTube API Services to embed and control the YouTube player. By using RiffRep you also agree to the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. RiffRep only controls playback (play, pause, speed, seek) in the embedded player; it never downloads or stores video or audio from YouTube.
Cookies and local storage
RiffRep sets no cookies of its own and uses no advertising cookies. It stores your library in your browser's local storage (IndexedDB) on your device. Cloudflare's analytics are cookieless, so RiffRep does not show a cookie-consent banner.
Your rights
Your library lives on your device, so you can view, edit, export, or delete it at any time from within RiffRep — clearing your browser storage removes it entirely. Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA), you may have additional rights over any technical data our providers process; contact us to exercise them.
Children
RiffRep is not directed to children under 13, and we do not knowingly collect their data.
Changes
We may update this policy; we'll revise the “Last updated” date above when we do.
Questions? Contact [email protected].