Privacy Policy
Last updated : November 30, 2025
1. Introduction
At KeysBattle, we take the protection of your personal data very seriously. This privacy policy describes how we collect, use, share, and protect your information when you use our piano learning platform.
By using KeysBattle, you accept the practices described in this policy. If you do not accept these terms, please do not use our service.
2. Data Controller
The data controller for your personal data is:
- Name: KeysBattle
- Email: contact@keysbattle.com
- Address: [Your address]
3. Data collected
👤 Account data
When you create an account, we collect:
- • Email: For authentication and communication
- • Username: For your public profile
- • Password: Encrypted and securely stored
- • Creation date: To manage your account
📊 Usage data
To improve our service, we collect:
- • Scores and statistics: Your game performances
- • Game history: Songs played, practice time
- • Favorites: Songs you've marked
- • Friends: Connections with other users
- • Uploads: MIDI files you upload (if admin)
💻 Technical data
Automatically collected during your browsing:
- • IP address: For security and fraud detection
- • Browser type: For site optimization
- • Operating system: For compatibility
- • MIDI devices: Detected locally (never sent to server)
⚙️ Preference data
Stored locally on your device only:
- • Audio settings: Volume, sound profile
- • Game preferences: Note speed, color mode
- • Cookie consent: Your privacy choices
4. Purpose of processing
We use your personal data for the following purposes:
🎯 Service provision
Create and manage your account, allow you to play and save your progress.
Legal basis: Contract execution
📈 Service improvement
Analyze usage to improve user experience and fix bugs.
Legal basis: Legitimate interest
🔒 Security
Protect your account against unauthorized access and detect fraudulent activities.
Legal basis: Legitimate interest and legal obligations
📧 Communication
Send you important notifications about your account and our services.
Legal basis: Contract execution and consent (for newsletter)
🏆 Leaderboards
Display your username and scores in public leaderboards.
Legal basis: Contract execution
5. Data sharing
We never sell your personal data. We only share it in the following cases:
🔧 Service providers
- • Supabase: Database hosting and authentication (Privacy Policy)
- • Vercel/Netlify: Website hosting (depending on deployment)
These providers are contractually required to protect your data and can only use it for specified purposes.
👥 Other users
Some information is public by nature:
- • Username
- • Scores in leaderboards
- • Public statistics (if you choose to make them public)
⚖️ Legal obligations
We may disclose your data if required by law or to protect our legal rights.
6. Data retention
We retain your personal data as long as necessary:
- • Active account: As long as your account exists and is used
- • Inactive account: Automatically deleted after 3 years of inactivity
- • Cache data: 5 minutes by default
- • Technical logs: 30 days maximum
- • After deletion: Data anonymized for aggregated statistics only
7. Security
We implement technical and organizational security measures to protect your data:
🔐 Encryption
All communications are encrypted via HTTPS/TLS. Passwords are hashed with bcrypt.
🛡️ RLS Protection
Row-Level Security on the database to prevent unauthorized access.
👁️ Monitoring
24/7 monitoring to detect suspicious activities and intrusion attempts.
🔄 Backups
Regular encrypted backups to prevent data loss.
⚠️ Important: No system is completely secure. In case of a data breach, we will notify you within 72 hours in accordance with GDPR.
8. Your rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
👁️ Right of access
You can request a copy of all your personal data.
✏️ Right of rectification
You can correct your inaccurate or incomplete personal information.
🗑️ Right to erasure
You can request deletion of your data ("right to be forgotten").
🚫 Right to object
You can object to the processing of your data for marketing purposes.
📦 Right to portability
You can receive your data in a structured format and transfer it to another service.
⏸️ Right to restriction
You can request to limit the processing of your data in certain cases.
How to exercise your rights?
To exercise any of these rights, contact us at:
- • Email: contact@keysbattle.com
- • Subject: "Exercise of my GDPR rights"
We will respond to your request within one month maximum.
9. Protection of minors
KeysBattle is designed to be accessible to all ages. However:
- • Users under 16 must obtain consent from their parents or guardians
- • We do not knowingly collect data on children without parental consent
- • If we discover that a child has provided data without consent, we will delete it
10. International transfers
Your data may be transferred and stored in countries outside the European Union, particularly in the United States (Supabase servers).
For these transfers, we ensure that:
- • Providers comply with standard contractual clauses approved by the EU
- • The level of data protection is equivalent to that of the EU
- • All data is encrypted in transit and at rest
11. Changes to this policy
We may update this privacy policy from time to time. In case of significant changes, we will notify you by:
- • Email (if you have an account)
- • Banner on the site
We encourage you to review this page regularly to stay informed.
12. Contact us
For any questions about this privacy policy or the use of your data:
- • Email: contact@keysbattle.com
- • Contact page: /contact
Supervisory authority
If you believe your rights are not being respected, you can file a complaint with the CNIL:
- • CNIL (Commission Nationale de l'Informatique et des Libertés)
- • Website: www.cnil.fr
- • Address: 3 Place de Fontenoy, 75007 Paris, France