Privacy notice

Last updated: 19 October 2026

Solfaboard is designed to collect as little as possible. There are no accounts, no analytics and no tracking scripts of our own. The site is in several languages; this notice is in English.

Who is responsible

This site is run by Roger Mir Abella, who you can contact at [email protected].

Your board stays in your browser

What you draw, your settings (language, sound, note names, zoom) and the board width are saved in your browser's local storage on your own device, under the names solfaboard-board-v1 and solfaboard-prefs-v1. They are never sent to us. They are not cookies. To remove them, use Clear the board or clear this site's data in your browser settings.

Live MIDI keyboard

If you open the MIDI keyboard page, your browser asks whether this site may use MIDI devices. The notes you play are processed only inside the page and are never sent anywhere.

Hosting

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical data such as your IP address and browser type to deliver pages and protect the service from attacks. See the Cloudflare privacy policy.

Bug reports and suggestions

If you send a message with the Report a bug / suggestion box, we store: the text you wrote, whether it is a bug or a suggestion, the page and board language, and the date and time. We do not ask for your name or email, and the message is never shown publicly. Messages are kept for up to 12 months and then deleted automatically. Please do not write personal details in the message.

To stop automated spam, the box uses Cloudflare Turnstile, which is loaded only when you open the box. To limit how many messages one connection can send, we keep a one-way scrambled (hashed) form of your IP address for about two hours; it cannot be turned back into the address and is not stored with your message. The legal basis is our legitimate interest in receiving feedback and keeping the service free of abuse.

Lesson enquiries (contact form on /lessons)

If you write through the form on the private lessons page, Roger Mir Abella receives: your name, your email address, how you prefer to be answered (email, WhatsApp or WeChat) and, if you give it, your WhatsApp number or WeChat ID, what you would like to learn, your level, whether you prefer online or in-person lessons, whether you want a free trial class or have a question, the page language, and the date and time.

• Purpose: to answer you and, if you wish, to arrange a trial class and lessons. Your details are not used for anything else, not added to any mailing list and not shared with anyone else.
• Legal basis: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
• Where it goes: the enquiry is stored in Cloudflare KV and sent once by email (Cloudflare Email Routing) to Roger's own mailbox, which is hosted by Google (Gmail). The reply comes from that mailbox, or by WhatsApp or WeChat if you asked for that (then those services' own privacy terms apply). Cloudflare and Google act as service providers; they may process data outside the EU under the EU-US Data Privacy Framework and standard contractual clauses.
• How long: the stored copy is deleted automatically after 12 months. The email is kept only as long as needed to handle your enquiry and any lessons that follow; ask and it will be deleted sooner.
• Spam protection: the same Cloudflare Turnstile check and two-hour hashed-IP limit described above (three messages per hour).

Giving these details is voluntary, but without a name and an email address it is not possible to answer you.

Advertising

Advertising is currently switched on.

When advertising is switched on, ads are provided by Google AdSense in a space below the board, never on top of it. Google and its partners may use cookies or similar technologies to show and measure ads. In the European Economic Area, the United Kingdom and Switzerland, you are asked first through Google's consent message, and personalised ads are only shown if you agree; you can change your choice at any time with Privacy and cookie settings at the bottom of each page (shown while ads are on). Learn more in How Google uses information from sites that use its services. The site works the same with ads blocked.

Your rights

Under the GDPR you can ask to access, correct or delete personal data, object to processing, and complain to your data protection authority (in Spain, the AEPD). Because we store no names, emails or readable IP addresses, we usually cannot link a message to a person; if you tell us roughly when you sent it and what it said, we will delete it.

Changes

If this notice changes, the date at the top changes too.