Privacy policy

Last updated: 22 October 2026. This is a translation, the German version is the binding one.

In short: you don’t need an account here, there are no ads, no tracking cookies and no content from other providers. We count visits ourselves, without cookies and without storing who you are. Here is exactly what happens.

Who is responsible

floating pixels GmbH
Wieblinger Weg 17
69123 Heidelberg
Germany
represented by Stefan Krüger
Email: info@floatingpixels.com

Serving the website

The website runs on Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. With every request, Cloudflare processes the data your browser sends along for technical reasons: your IP address, the date and time, the address requested, the page you came from, and your browser’s identification (user agent). Without them the site can’t be delivered or protected against attacks. For troubleshooting, Cloudflare keeps logs of these requests for at most three days.

The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare processes the data on our behalf (Art. 28 GDPR) and may also process it in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which the European Commission has found to provide adequate protection (Art. 45 GDPR). More in Cloudflare’s privacy policy.

Visit count without cookies

To understand which lessons and tools are used, and to improve the site, we count visits ourselves, without analytics services from other providers. We count:

  • which page was opened, in which language, and in which order during a visit,
  • how long a page was in front, that is visible in the active window (time on page),
  • whether sound was played on a page (piano, guitar or metronome), and whether its controls and tools were used, for example the root note picker or the note trainer. We count only that they were used, not what you chose or answered,
  • the address of a page that doesn’t exist, if you open one,
  • on arrival, which website you came from (its domain only), or a campaign tag in the link (utm_source or ref),
  • your country, which Cloudflare derives from the IP address,
  • your browser’s preferred language, which it sends with every request (the language only, for example Spanish),
  • the kind of device (phone, tablet or computer), your browser and your operating system, roughly derived from the user agent.

So that we count a visitor only once a day, our server makes a checksum (hash) from the IP address, the user agent, a random value for the day and a secret key only our server knows. The IP address and the user agent are not stored. The day’s value is deleted an hour after the day ends, and from our service provider’s backups after seven days at the latest. From then on the checksum can practically no longer be linked to anyone, not even by us, and visits on different days can’t be linked to each other.

Cloudflare stores the individual counts for us (Workers Analytics Engine) and deletes them automatically after three months. From them we compute daily totals, for example a page’s views on a day. These contain no checksums and nothing about individual visitors, and we keep them indefinitely.

Nothing is stored on your device for the count: no cookies, no local storage, no fingerprinting. The page only notes what happens on it while it is open, as listed above, and has your browser send this to our server. We consider this strictly necessary to provide the site as a learning service (Section 25(2) no. 2 TDDDG): only we count, only in totals, and for no other purpose than developing the lessons and tools. The legal basis for processing the data is our legitimate interest in developing the site for its readers (Art. 6(1)(f) GDPR).

If your browser sends the Global Privacy Control or Do Not Track signal, we don’t count your visit. Since we can’t recognise individual visitors, this is how you object to the count (Art. 21 GDPR). Most browsers offer one of these settings.

Cookies and browser storage

The site stores exactly two things in your browser, both only so that features work the way you use them (Section 25(2) no. 2 TDDDG, the German law on storage in browsers). They are not used for the count and not analysed.

  • The cookie i18n_locale remembers the site’s language, so you see it in your language on your next visit. It expires after a year.
  • The local storage entry nuxt-color-mode remembers whether the site is shown light or dark. It stays until you delete it in your browser.

Fonts, icons and links

We serve fonts and icons ourselves. Opening a page sends no data to other providers such as Google. The “Buy Me a Coffee” button on the home page is a plain link: only when you click it do you go to Buy Me a Coffee, where their privacy policy applies. The same goes for every other link to another website.

Contact by email

If you write to us, we process your email address and your message to answer you (Art. 6(1)(f) GDPR, or (b) for questions about a contract). We delete them once your request is dealt with, unless the law requires us to keep them.

Your rights

You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing (Art. 21). To use them, write to info@floatingpixels.com.

You can also complain to a data protection authority (Art. 77 GDPR). Ours is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.