← Back to app

Privacy Policy

Last updated: March 27, 2026

The short version

Your audio never leaves your device. temperat.io processes all microphone and MIDI input locally in your browser using the Web Audio API and on-device ML models. We do not record, transmit, store, or have access to any audio you play. There are no accounts, no analytics trackers, no ads, and no cookies beyond what your browser stores locally for your preferences (theme, A4 frequency, etc).

Audio & Microphone Data

When you grant microphone permission, your browser sends the audio stream directly to temperat.io's JavaScript running on your device. The audio is analyzed in real-time for pitch, chord, and rhythm detection. No audio data is ever sent to any server.

The pitch detection model (Basic Pitch, from Spotify Research) runs as a local ONNX model in your browser via Web Workers. The model weights are cached locally by your browser's service worker for offline use.

MIDI keyboard input is processed identically — locally and in real-time, with no server communication.

Local Storage

temperat.io uses your browser's localStorage to save your preferences:

  • Theme preference (dark/light)
  • A4 reference frequency
  • Time signature and BPM settings
  • Whether you've seen the onboarding walkthrough
  • PWA install prompt dismissal

This data stays in your browser and is never transmitted. You can clear it at any time through your browser settings.

Analytics & Tracking

temperat.io does not use Google Analytics, Facebook Pixel, or any third-party tracking scripts. We do not collect usage data, fingerprint your browser, or track you across the web. The only network requests are to load the app itself and cache it for offline use.

Cookies

temperat.io does not set any cookies. Session state is managed entirely through browser localStorage.

Third-Party Services

temperat.io is hosted on Vercel. Vercel may collect standard web server logs (IP address, user agent, page requested) as part of normal HTTPS hosting. We do not access or analyze these logs.

If you sign in (optional), you can use Google OAuth or email/password. With Google, we receive only your name and email — never your Google password. Email/password authentication is handled securely through Supabase Auth; passwords are hashed and never stored in plain text. We do not share your login credentials with any third party.

Children's Privacy

temperat.io does not knowingly collect personal information from children under 13. Since we don't collect personal information from anyone, this is inherently satisfied.

Changes to This Policy

If we ever change how data is handled, we'll update this page with a new date at the top. Since temperat.io processes everything locally, significant changes are unlikely.

Contact

Questions about this policy? Email hello@temperat.io.