RhythmicBall
Launch Studio
DATA PRIVACY

Privacy Policy

Last Updated: September 30, 2026 • Effective Date: September 30, 2026

1. Introduction

Metricball ("we", "us", or "our") operates RhythmicBall. We take your personal privacy seriously. This Privacy Policy describes how we collect, store, process, and protect your information when you visit rhythmicball.com or use our web-based music visualization studio.

We adhere to global privacy principles, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

2. Information We Collect

We only collect information necessary to provide and improve the Service:

  • Account Data: When you register an account, we collect your email address and basic profile identifier.
  • Musical Projects & Compositions: Score notation data, custom rhythm combinations, tempo settings, and saved project drafts that you intentionally store to your cloud workspace.
  • Usage & Telemetry Data: Anonymous or aggregated interaction data such as browser type, device information, operating system, and feature usage patterns to diagnose errors and enhance playback stability.
  • Cookies & Local Storage: We use browser localStorage and essential cookies to maintain your active login session, remember guest drafts, and store your preferred audio volume, tempo, and theme settings.

3. Payment Information and Paddle

We Never Store or Touch Your Credit Card Information: All billing, invoicing, and subscription payment transactions are handled exclusively by Paddle.com Market Ltd ("Paddle"), who acts as our Merchant of Record.

When you purchase a RhythmicBall Pro subscription, your payment details (credit card numbers, PayPal, or Apple Pay credentials) are collected directly by Paddle over encrypted SSL connections. Paddle is certified as a PCI-DSS Level 1 Service Provider. RhythmicBall only receives confirmation tokens, customer IDs, and subscription status flags (e.g. active, cancelled) to unlock Pro entitlements.

4. How We Use Your Data

We use your information exclusively to:

  • Provide, maintain, and personalize the RhythmicBall music studio.
  • Sync your music projects securely across your authorized browsers and devices.
  • Authenticate your account and grant appropriate feature tier access (Free vs Pro).
  • Deliver transactional account notices, password reset links, or important service updates.
  • Respond to customer support requests and troubleshoot technical issues.

We never sell, rent, or trade your personal data to third parties or advertising brokers.

5. Storage and Security

We implement industry-standard technical and organizational security measures to protect your data:

  • Supabase Database & Row-Level Security (RLS): User accounts, profiles, and music projects are stored in secure cloud infrastructure managed by Supabase. Strict database Row-Level Security (RLS) policies guarantee that each user can only read and write their own private projects and data.
  • Encrypted Transit: All data transmissions between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
  • Edge Protection: Content delivery, DDoS mitigation, and edge caching are secured via Cloudflare.

6. Third-Party Service Providers

We partner with reputable infrastructure providers to operate the application:

  • Paddle.com: Payment processing, invoicing, tax collection, and Merchant of Record services.
  • Supabase Inc.: User authentication, secure database storage, and Row-Level Security enforcement.
  • Cloudflare Inc.: DNS routing, SSL certificates, edge asset delivery, and DDoS protection.

7. User Data Rights (GDPR & CCPA)

Regardless of your geographic location, you possess comprehensive rights over your personal data:

  • Access & Export: You can access your saved projects at any time or request a complete export of your stored account data.
  • Correction: You have the right to update or rectify inaccurate profile information.
  • Deletion ("Right to be Forgotten"): You may request complete deletion of your account and all associated music projects by contacting support@rhythmicball.com. Upon verification, your data will be permanently wiped from our production database within 30 days.
  • Subscription Management: You can manage or revoke recurring billing permissions at any time via the Paddle customer portal.

8. Children's Privacy

RhythmicBall does not knowingly collect personally identifiable information from children under the age of 13. If you believe a child has provided us with personal information without parental consent, please contact us immediately, and we will promptly take steps to delete such data.

9. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect technological improvements or regulatory developments. When updates are published, the revised date will be displayed at the top of this page.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact:

  • Email: support@rhythmicball.com
  • Operator: Metricball, operating as a sole proprietor
  • Merchant of Record: Paddle.com Market Ltd, Judd House, 18 Britton Street, London, EC1M 5NW, United Kingdom