Privacy policy
What we collect when you use All Good Tones, why, who helps us run the site, and your rights.
Last updated
Visiting without an account
- Analytics. We use an EU-hosted analytics service. By default it uses no cookies: it counts page views, clicks and errors under an identifier it makes from your IP address and browser plus a secret that changes daily, so it can't recognise you from one day to the next. If you press Accept in the cookie notice, it sets a first-party cookie instead. Change your choice any time with Cookie settings in the footer.
- Your country. We read your approximate country from your IP address, as reported by our host, to show stores that ship to you. We don't store the IP address.
- Store links. A click on a store link records the product, the store, where on the page it was and your country. No IP address, no account. The store and affiliate networks may set their own cookies; their policies apply. See Affiliate links.
With an account
- What we keep: your email address; the name, username, bio, photo, currency, country, units and time zone you add; your player profile (instruments, genres, level); your Want / Own / Had gear, collections and what you paid (private, only you see it); your reviews and helpful votes; and gear you submit.
- Public: your reviews, shown with your username or name. Collections only if you make them public. Everything else is private.
- Sign-in: we email you a one-time link (sent by an email delivery service). It works once and expires after 5 minutes. A session record (session token, browser, IP address) keeps you signed in for 7 days. The session cookie is needed for the site to work.
- Emails: sign-in links, a welcome message, a message when gear you added is approved or turned down, and a confirmation when you delete your account. If you tick email updates at sign-up we may send news about the site; you can withdraw that by writing to us.
- Why: to run the service you signed up for (GDPR art. 6(1)(b)); to keep the site working, secure and improving (art. 6(1)(f)); analytics cookies and email updates only with your consent (art. 6(1)(a)).
Who helps us run the site
We use service providers for hosting, our database, file storage, email delivery, analytics and catalogue content. They process data only on our behalf. Where one of them handles data outside the EU/EEA, it relies on the EU's standard contractual clauses or the EU–US Data Privacy Framework.
Deleting your account
Account → Profile → Delete account. We email a confirmation link; nothing is deleted until you open it and confirm. You choose whether your reviews stay (as "Former member", without your name or photo) or go with the account. Either way your profile, gear, collections, player profile, sessions and uploaded photos are deleted, and your analytics events are deleted from our analytics service within a few weeks. Gear we already accepted into the catalogue stays, without your name. Database restore history is kept for 6 hours.
How long we keep things
Account data until you delete it. Sessions 7 days. Store-click records contain no personal data and are kept. Analytics events and email logs are kept for the period our providers set.
Your rights
You can ask to see, correct, export or delete your data, or object to how it is used. Deleting you can do yourself (above). For the rest write to contact@allgoodtones.com; we reply within 30 days and send a copy only to the email address on the account.