Privacy

chordgen is a static website with one optional server-backed AI feature. This page explains, in plain language, what happens when you use it.

Optional Google account

Manual generation, playback and MIDI need no account. Google sign-in uses your verified Google email and provider identity. We store your email, an essential session cookie, credit balances and request status. Trial and paid credits are separate. When you use AI Composer, private server recovery records will store the text and context you submit, the original AI result and its validated version, so an interrupted request can be checked without sending it again. A successful request returns three variations and uses one credit from the selected balance. A successful result can be retrieved for 300 seconds after its first settlement. This retrieval window is not a promise of physical deletion: requests with an uncertain outcome, a funding hold or an unacknowledged recovery record may be retained longer. Provider processing and retention follow the provider’s own policies; we do not promise a provider deletion period. Prompt bodies are not written to the credit ledger; the private recovery records described here are separate. The browser tab stores a request identifier and input hash to check an unfinished request, without saving the prompt.

Manual generation, audio, and MIDI stay on your device

Manual progressions are created in your browser. Chord playback uses the Web Audio API, and MIDI files are generated in your browser when you export them. Those manual controls do not upload your chords, audio, or files.

Optional AI Composer

Nothing is sent to an AI provider until you open AI Composer, write a description, and press Create with AI. At that point, the description you entered is sent to the configured AI provider to propose a key, style, tempo, scale degrees, and a short explanation. The private recovery records described above store your submitted description and AI results. You review the result before choosing whether to apply it.

Do not include passwords, API keys, personal information, or other sensitive material in an AI prompt. The provider processes submitted prompts under its own policies.

Payments and credits

When purchases are enabled, the payment reseller processes the transaction. chordgen stores an order reference, its status, and credits granted or held so they remain associated with the signed-in account. We do not store full card details. Returning from payment does not grant credits; signed payment confirmation is required.

Optional website analytics

Optional website analytics are off by default. You can allow or withdraw them using the website analytics controls. If enabled, Google Analytics receives basic visit and device data, processes network addresses and may use analytics cookies and automatic SDK events. We send only a fixed public page address and title, with an empty referrer; URL queries, fragments, tool inputs, files and account details are excluded from our statistics commands. Advertising features are disabled. Withdrawal stops future website statistics and prevents new Google Analytics cookies or sends on this page; requests already initiated or queued before withdrawal cannot be undone. It does not delete historical Google data or unload already loaded third-party code from memory.

Google sign-in continues to use an essential session cookie.

Hosting

The site is served as plain static files from the owner's web server. Like any web server, the hosting provider may keep routine server logs (such as request times and IP addresses) as part of delivering pages and maintaining security. The AI endpoint also keeps short-lived in-memory request counters to limit abuse. These are not used to profile visitors.

Contact

For privacy questions or to request access, correction or deletion of your account or request records, contact us below. We may ask you to verify account or record ownership before acting. Records needed for service security, accounting, legal requirements or disputes may remain; retrieval expiry does not guarantee physical deletion or deletion by a provider. Write to hello@chordgen.app.

AI text safety check

When you submit an optional AI request, your musical description and the operation/model identifiers are sent to Waffo for an input text safety check before generation. The generated result text is also sent to Waffo for an output safety check before delivery. Account email, session cookies, uploaded images and local tool files are not included in these checks. Generation and delivery proceed only after the relevant check permits them. Local calculations and manual tools do not use this service.