Your voice never leaves the browser.

The audio

When you allow the microphone, the sound is read by code running in this tab. Pitch is worked out there, on your device, and the sound is thrown away as it goes. Nothing is recorded, nothing is uploaded, and there is no server here that could receive it — the site is a set of static files.

Closing the tab ends it. Denying the microphone means you can type your two notes instead and still get a result.

What actually leaves your device

Two things, and only two:

• Anonymous usage events, if an analytics collector is configured for the build you are looking at. They record things like "a page was opened", "the microphone was allowed", "a result was shown", "the card was saved", plus your page path, referrer, browser language, screen size and a random id that lasts until you close the tab. No cookie is set, no third-party script is loaded, and your IP address is not stored by us. If your browser sends Do Not Track or Global Privacy Control, nothing is sent at all.
• An email address, if you type one into the "tell me when the setlist opens" box or go through checkout. Nothing is taken from you for simply using the test.

Result links

Your result is encoded into the share link itself, after the # sign. That part of a URL is never sent to a server, which is how a link can reproduce your card while we store nothing.

It also means the link is the result: anyone you send it to, or anyone who finds it in a screenshot, can open it and see your range. Treat it like any other link you would rather not have shared around.

Your email address, if you give us one

The notify box uses it for one message — the one telling you the setlist is open — and nothing else. No newsletter, no sequence, no selling it on, ever. If the box is not wired to a mailing endpoint yet, the address stays in your own browser and reaches nobody, and the screen says so at the time.

If you subscribe, Stripe holds your email and billing details as part of the payment. We see your email and what you paid. We never see your card number.

Who else is involved

Three services, each doing one job:

• Railway hosts the files and serves the page. Like every web host, its servers log requests, including IP addresses, for a short window so the thing can be kept running and defended.
• Stripe processes payments and holds card details, under its own privacy policy. Only subscribers touch it.
• A privacy-first analytics collector (Umami or Plausible) receives the anonymous events above, when one is configured. Neither sets cookies or builds a profile of you across sites.

Cookies

None. No tracking cookies, no advertising pixels, no consent banner to click away. The site stores a couple of things in your own browser — a random session id and, if you use the notify box, the address you typed — and those never travel to another site.

How long anything is kept

Analytics events are aggregate and anonymous, and there is no user behind them to look up. Email addresses are kept until the setlist launch message goes out, or until you ask for yours to be deleted, whichever comes first. Billing records are kept as long as tax law requires, which is generally seven years in Canada.

Your rights

Under the GDPR, PIPEDA and similar laws you can ask what we hold about you, ask for a copy, ask for it to be corrected, ask for it to be deleted, or object to it being used at all. Email hello@fiftythreenorth.co from the address in question and we will answer within 30 days.

For most people the honest answer will be "nothing" — if you took the test and never typed an email, there is no record of you to send. Where we do hold something, the lawful basis is your consent (the email box), a contract (your subscription) or our legitimate interest in knowing whether the site works at all (the anonymous counts).

If you think we have handled this badly you can complain to your data protection authority: the Office of the Privacy Commissioner of Canada, or your national authority in the EU or UK.

Children

This site is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has sent us an email address, write to us and it will be deleted.

Changes

If this policy changes, the date at the foot of the page changes with it. A change that widens what is collected will be announced on the site before it starts.

Contact

53 North, Canada. Privacy questions and deletion requests: hello@fiftythreenorth.co.