The whole thing in five lines
- This website sets no cookies and runs no analytics.
- It makes no requests to any other company — the fonts and every image are served from this domain.
- The application sends nothing while you play. No telemetry, no usage data, no crash reports.
- The only thing it ever sends is your licence key, to check it is valid.
- Your playing, your recordings and your exported files never leave your computer.
1. Who is responsible
Downtown Piano Lab, MBP. Žadeikos g. 9-29, LT-06324 Vilnius, Lithuania
Company registration code: 307070328
[email protected]
We are the data controller for this website and for the licence check inside the application. We have not appointed a data protection officer; there is no threshold here that requires one, and the address above reaches a person.
2. This website
There is no cookie banner on this site because there is nothing to consent to. No cookies are set, no local storage is used except to remember whether you chose English or Lithuanian, and nothing is loaded from a third party — no hosted fonts, no tag manager, no embedded video, no chat widget, no payment script.
The site is hosted on Cloudflare Pages. Like any web server, Cloudflare's edge records the technical detail of each request — IP address, time, the file requested, browser user agent — in short-lived operational logs used to serve the page and to stop attacks. We do not build profiles from these, and we do not receive an analytics dashboard about you.
Legal basis: our legitimate interest in delivering a working, secure website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor. Details of their handling are in Cloudflare's privacy policy.
3. The application on your computer
Cadenza is a desktop application, not a service. It reads your MIDI keyboard, works out chord and scale names on your machine, and writes files to your disk.
What never leaves your computer: the notes you play, your recorded takes, your exported MusicXML, MIDI and PNG files, your favourites, your chord history, your practice results, your settings, and your recordings shelf. These live in the application's own folder on your disk and are never uploaded anywhere. There is no account, no cloud sync, and no way for us to see any of it.
What does leave your computer: exactly one thing. When you activate a licence, and periodically afterwards to confirm it is still valid, the application sends your licence key and a short identifier for the machine to Lemon Squeezy's licensing service. The machine identifier is a one-way hash of your computer's name, operating system and architecture — it is used only to count how many machines a key is active on, and it cannot be turned back into your computer's name.
During the fourteen-day trial there is no licence to check, so the application makes no network requests at all.
4. When you buy
The purchase is handled by Lemon Squeezy as merchant of record. You enter your payment details on their systems, not ours. We never see your card number, and no payment data ever touches this website.
From a completed order we receive your email address, name or company name, country, and the order details — what we need to send your licence key, issue support, and honour a refund. Lemon Squeezy is an independent controller for the sale; see their privacy policy.
Legal basis: performance of the contract with you (Art. 6(1)(a) and (b) GDPR) and, for keeping order records, our legal obligation under accounting and tax law.
5. When you write to us
If you send an email, we keep it — your address and what you wrote — so that we can answer, and so that the next person with the same problem gets a better answer. Support mail is kept in our mailbox, hosted by Google Workspace, and is deleted when it is no longer useful.
There is no newsletter and no mailing list. Writing to us does not subscribe you to anything.
6. How long things are kept
| What | How long | Why |
|---|---|---|
| Server request logs | Days, at Cloudflare | Serving pages, blocking attacks |
| Order and invoice records | 10 years | Lithuanian accounting and tax law |
| Licence key and its activations | While the licence exists | So the key keeps working and can be moved |
| Support email | Until it stops being useful | Answering you, and the next person |
| Language choice on this site | In your browser, until you clear it | Not showing you the wrong language twice |
7. Your rights
Under the GDPR you may ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. You may withdraw consent where consent is what we relied on.
Write to [email protected]. We will answer within one month, and normally much sooner — this is one person reading the mail, not a queue.
If you think we have handled your data badly and we have not fixed it, you may complain to your national supervisory authority. In Lithuania that is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).
8. Transfers outside the EU
Cloudflare and Lemon Squeezy are US companies with EU infrastructure. Where data reaches the United States, those transfers rely on the European Commission's standard contractual clauses and the EU–US Data Privacy Framework. We use no other processors.
9. Children
Cadenza is a tool for musicians of any age, and a teacher may well sit a child in front of it. Nothing in it collects data from the person playing. We do not knowingly sell licences to children — the purchase is made by whoever holds the card.
10. Changes
If this policy changes, the new version appears here with a new date. If a change is material — if we ever start collecting something we do not collect today — it will be said plainly at the top, not buried in a clause.
See also: Terms and licence · Refunds and cancellation