Privacy policy

Scope

This policy covers the L.May Ocarina Library website and the L.May Ocarina Practice Android app (package com.lmay.ocarinapractice). The sections below identify which product each practice applies to. The Practice app does not require an account and does not sync your practice history with the website.

Data handled by the Library website

Data used for comments

Reading articles and comments does not require an account. To post, edit, or delete a comment, we use Google Sign-In through Firebase Authentication. We receive the account identifier and the public profile name and photo. We do not receive or store your Google password.

Cloud Firestore stores the published text, related article, source language, creation and update dates, and the public authorship data needed to display and manage the comment.

Purpose and visibility

This data is used only to authenticate authors, display the conversation, let each person manage their own content, prevent abuse, and moderate the service. Comments, names, and photos are public. The internal account identifier is not displayed in the interface.

Translations of the same article share one conversation. The language in which a comment was submitted is retained only as metadata.

Authenticated profile and sessions

When a Google account signs in, we keep a private administrative profile containing its identifier, name, email, photo, provider, email verification, and first and last activity dates. We also record an approximate number of authenticated sessions, treating activity after at least thirty minutes as a new session. The profile does not contain a list of pages visited.

These profiles are visible only to administrators and are used to operate the service, provide support, manage restricted-content access, and enable the floating music tools. Because counting starts in the browser, it is an operational reference rather than an audit record.

Ebook preferences

Font size, theme, reading position, and ebook bookmarks are stored only in this device's browser. They are not sent to Firebase and can be cleared from the reader interface.

Notifications

New-article notifications are optional. If you enable them, Firebase Cloud Messaging and your browser store a technical device identifier so alerts can be delivered. You can unsubscribe using the control in the Library footer or revoke permission in your browser or Android settings. Invalid or unsubscribed identifiers are removed from the sending list. To limit automated signups, we keep a daily hash of the network connection without storing the IP address in plain text. The retention policy removes these records after their expiration time.

To administer comments, the Library keeps an internal entry linked to the comment, with its author, text, time, source page, and the admin's read state for each admin account. Editing a comment updates its entry; deleting it also removes the internal entry. Admin devices receive comment push alerts only after you explicitly subscribe while signed in to an active admin account. The full comment text is not included in the system notification.

Storage and security

Google processes authentication and database data as the Firebase provider. Firebase Authentication may process data in the United States, while Firestore uses the location selected for the project. Security rules restrict posting to Google accounts and editing or deletion to the author.

See the official information about privacy and security in Firebase and the Google Privacy Policy.

Retention and control

Comments remain published until deleted by their author or removed through moderation. Authors can edit or delete their own comments while signed in to the same account. Data-related requests may also be sent to the maintainer at contato@barretolopes.com.

Analytics and advertising

When an article is opened, the Library updates its aggregated view counter. We count at most one opening per article in each browser tab session. The server stores only the running total; a temporary marker in the tab prevents duplicates until it is closed.

The site does not enable Google Analytics, behavioral advertising, or the sale of personal data. Some pages may display sponsored partner promotions. In those cases, we record in aggregate when a promotion was viewed and when its link was activated, so the Library can evaluate the performance of the promotion.

These metrics do not require a name, email address, or login, and the site does not receive the contents of a purchase made on the external site. A click only means that the visitor left the Library for the partner; sales and commissions are external information recorded administratively when confirmed.

Authentication state may be retained in the browser so the user stays signed in. The administrative activity described above records only approximate authenticated sessions.

L.May Ocarina Practice Android app

Microphone and audio

The app requests microphone permission when you use features that need to listen to your ocarina, such as the tuner and instrument-response modes. Audio is analyzed in real time on your device to detect the note and evaluate your response. Practice does not record or send captured audio to our servers. Capture stops when the feature is stopped or is no longer active.

Progress and preferences

The app stores usage preferences (such as language and tool settings), local notice-read status, and a history of up to 100 completed sessions in Android's private app storage. Session history may include the tool and mode used, date, duration, correct answers, streak, and average tuning or rhythm metrics. These data are not associated with an account, and the app does not send them for remote syncing or analytics.

Android may include these data in backup or device-to-device transfers, depending on the backup features and settings for your account and device. Android/Google manages that backup; we cannot access it. You can manage it in Android backup settings. You can erase local app data from Android's app storage settings or uninstall the app; any existing backup must be managed separately in your account settings.

Notices and external connections

While the app is open, it periodically requests a public notice file hosted by GitHub Pages over HTTPS. The app does not send your practice history, account identifier, or microphone content in that request. As with any visit to GitHub Pages, GitHub may log your IP address and other technical connection data for security, as described in the GitHub Privacy Statement.

Links to the Library and informational pages open in your external browser. When you visit those addresses, the browser connects to the website and the website practices described above apply. The app purchase is processed by Google Play; Practice does not access card details or payment credentials. See also the Google Privacy Policy.

The app does not use Firebase, sign-in, advertising, analytics, or its own crash-reporting tools. Notice content may be cached on the device for viewing and use in the message inbox; read and archive status is also stored locally.

Contact

For questions or privacy-related requests, email contato@barretolopes.com.