Privacy policy

Effective: 4. 10. 2026 · Terms of Service

1. Controller

The controller of personal data is Tomáš Kňáva, DiS., company ID: 88906396, Mostecká 3855, 430 01 Chomutov. Contact for all questions and requests: info@strumit.online.

2. What data we process

Account: first and last name, e-mail, password (stored only as a hash, never readable), language, country derived from the IP address, IP address and registration date, plan and, if you add one, your profile photo.

Content: songs, lyrics and chords, playlists, favourites, notifications.

Login: technical session data (session identifier, IP address, time).

Live sessions: the name a guest enters, a random identifier of the guest's browser and the time of joining. The host and the other guests of that session can see them.

Payments: GoPay processes the payment. We keep the payment and subscription identifiers, the subscription status, periods, amounts and receipt numbers. We never see or store your card number.

E-mail: we send account messages through an e-mail service provider.

3. Why and on what basis

Running your account and providing the service including payments: performance of the contract. Security and protection against abuse and bots (for example the Cloudflare Turnstile check at sign-up and login): legitimate interest. Tax and accounting documents: legal obligation. Optional settings in the browser (for example font size): for your convenience, stored only on your device.

4. How long we keep it

We keep account data and content while the account exists. After you close it we delete them, except data we must keep by law (for example accounting documents for the period set by law). Guest names in live sessions are deleted when the session ends. Technical session records are kept only as long as necessary.

5. Who receives the data

Only providers that help us run the service: the hosting provider, the payment provider GoPay, the e-mail service provider and Cloudflare (bot protection). We do not sell data and do not use it for advertising. Some providers (for example the payment provider or Cloudflare) may process data outside the EU on the basis of standard contractual clauses or other GDPR safeguards.

6. Cookies and local storage

We use one technically necessary session cookie, without which logging in would not work. We also use the browser's local storage for your choices (for example the transposition of a song, font size, chord visibility, a guest's name in a session). We use no advertising or tracking cookies.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, portability (you get a copy of your songs through the songbook export, part of the Premium plan, or on request) and the right to object. Send your request to info@strumit.online. You may also complain to the Czech Office for Personal Data Protection (www.uoou.cz).

8. Security

The connection is encrypted (HTTPS), passwords are stored as hashes and payment data is processed by GoPay. No system can be made absolutely secure; if a breach that puts you at risk occurs, we will inform you.

9. Children

The service is for people aged 15 or more.

10. Changes

We may update this policy; the current version is always on this page.