Who we are
“Swung”, “we” and “us” mean the team that runs swung.app. You can reach us at support@swung.app about anything on this page.
If you use Swung without an account
You can play the patterns, the genres, the beat maker and the free lessons without signing in. We don't ask who you are. Your lesson progress and your colour theme are saved in your own browser (local storage) and are not sent to us. Beats you share live in the link itself, after the “#”, which browsers don't send to our servers.
Like every website, our host receives standard request information: your IP address, browser type, the page asked for and the time. It is used to deliver the site, keep it secure and fix errors.
We use Google Analytics to count visits and see which pages and lessons work. It records the pages you view, your device and browser, roughly where you are (country and city, worked out from your IP address, which Google Analytics doesn’t store), and steps such as playing a grid, finishing a lesson, signing in or starting a plan. It never gets your name or email. Google signals and ad personalisation are off, so this data isn’t used for advertising. You can block it with your browser’s tracking protection or Google’s opt-out add-on.
If you sign in with Google
When you choose “Continue with Google”, Google asks for your permission and then shares with us your name, your email address, your Google account ID and your profile picture address. We use them only to:
- sign you in and recognise your account on later visits;
- link your account to your subscription, if you buy one;
- write to you about your account or subscription, and answer you when you write to us.
We don't use Google account data for advertising, we don't sell it, and we don't share it except with the service providers listed below, as needed to run Swung. Swung’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Swung’s access at any time in your Google account’s permissions.
If you subscribe
Payments are handled by Stripe. You enter your card details on Stripe’s checkout page; we never see or store your full card number. Stripe tells us your customer ID, your plan, whether the subscription is active or in a trial, and when it renews or ends. Stripe keeps the payment records that the law requires. Its own privacy policy is at stripe.com/privacy.
Cookies and local storage
Apart from Google Analytics, we use only what the site needs to work. There are no advertising cookies.
| Name | What it does | How long |
|---|---|---|
| swung_session | Keeps you signed in. It is signed so it can't be forged. | 30 days |
| swung_user | Holds your first name, so pages show the signed-in view straight away. | 30 days |
| swung_oauth | Protects the sign-in step with Google. | 10 minutes |
| swung_signed_in | Marks that you just signed in, so we can count sign-ups. | 1 minute |
| _ga, _ga_* | Google Analytics: tells visits apart, so returning visitors are counted once. | 2 years |
| swung-progress, swung-theme | Local storage in your browser: lesson progress and colour theme. Never sent to us. | Until you clear them |
Stripe sets its own cookies on its checkout and billing pages to prevent fraud.
Who processes data for us
- Vercel hosts the site and processes request information.
- Google provides sign-in and, through Google Analytics, visit statistics.
- Stripe processes payments and subscriptions.
They may process data in the United States and other countries, under their own safeguards for international transfers. We share data with others only if the law requires it.
How long we keep it
Google Analytics keeps visit data for 14 months, then deletes it. We keep your account details while you have an account. If you ask us to delete your account, we delete your details within 30 days, apart from payment records that Stripe and we must keep by law.
Your choices and rights
You can ask us for a copy of your data, to correct it, or to delete your account: write to support@swung.app from the email address on your account. You can cancel a subscription at any time from your account page. Depending on where you live, you may also have the right to object to some uses of your data and to complain to your data protection authority.
Children
Swung is not aimed at children under 13, and we don't knowingly collect data from them. If you think a child has given us their details, write to us and we will delete them.
Security
The site is served only over HTTPS. Sign-in cookies are signed and can't be read by scripts on the page. No system is perfectly secure, but we keep what we hold small, so there is little to lose.
Changes
If we change this policy, we will update the date at the top. If a change matters to how we use your data, we will tell signed-in users before it takes effect.