← Play It Back

Privacy Policy

Last updated: October 2026

In short: When you open this page, the web server logs technically necessary data, including your IP address. Your practice data is stored by the app on your own device and never reaches me. Beyond that, I process personal data only if you write to me yourself. This website sets no cookies, embeds no third-party content and does not analyse your behaviour.

1. Controller

The controller within the meaning of Art. 4(7) GDPR for the processing of personal data on this website is:

Pia Steuck
Stuttgarter Str. 106
70736 Fellbach
Germany
Email: contact@piasteuck.com

No data protection officer has been appointed, as the statutory conditions requiring one are not met.

2. Hosting and server log files

This website is hosted by an external service provider:

Uberspace, represented by Jonas Pasche
Kaiserstr. 15, 55116 Mainz, Germany

The provider processes the data arising when this website is accessed on my behalf, on the basis of a data processing agreement under Art. 28 GDPR. Further information is available in the provider's privacy policy: uberspace.de/en/about/privacy — this is the only outward link on the site; it is followed only when you click it, and nothing is loaded from there automatically.

Each time a page is accessed, the web server automatically collects information transmitted by your browser and stores it in what are known as server log files:

This data is not combined with other data sources and is not evaluated for analytics or marketing purposes. It serves solely the technically correct and secure operation of the website. Log files are rotated daily and deleted after seven days.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and uninterrupted operation of this website.

The provider's servers stand in German data centres. Under the data processing agreement, any processing takes place exclusively in Germany, in a member state of the European Union or in another state party to the Agreement on the European Economic Area; relocation to a third country would require my prior consent. No data is therefore transferred to a third country. According to the provider, no sub-processors are used for the processing of data on its hosting accounts; a current list is kept available by the provider.

3. Contact by email

This website has no contact form. If you contact me at the email address given above, I process the data you send — your email address, your name where you provide it, and the content of your message — solely in order to deal with your enquiry. The data is not passed on to third parties and is not used for advertising. You are under no obligation to provide me with any data. Without a contact address, however, I cannot deal with your request.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries), or Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract.

Retention: I keep email correspondence for as long as it is needed to deal with your enquiry and for any later follow-up questions, and beyond that within the scope of statutory retention periods. On request I will delete the correspondence at any time, unless a retention obligation prevents this.

Please note that email may be transmitted unencrypted. You should therefore not send me confidential information by unencrypted email.

4. What this website does not do

Unlike a purely static website, however, this app does store information on your device — it has to, in order to remember your settings and your progress. Section 5 explains exactly what. Because that storage is strictly necessary to provide the service you explicitly requested, no consent is required for it under § 25(2) no. 2 TDDDG (the German implementation of the ePrivacy Directive). That is why there is still no cookie banner.

5. Storage on your device

For the app to work, your browser stores the following on your device:

None of this is transmitted. It stays in your browser; I have no access to it and no way of reading it. It is not combined with the server log files described in section 2.

You can delete this data at any time through your browser's settings (usually "clear site data" or "delete website data"). In private browsing mode nothing is stored permanently. If your browser blocks this kind of storage, the app still works — you simply lose settings and progress between visits.

Please also note that browsers may delete this data on their own: Safari in particular removes locally stored data after about seven days without a visit, unless the app has been added to the home screen. Section 6 explains how to keep a backup.

6. Exporting and importing your data

The app can export your practice data as a file. The export is created on your device and saved wherever you choose; I do not receive it. The matching import function reads such a file back in, for instance after switching devices.

If you choose to send me an export yourself — for example to report a bug — I use it only to investigate that issue and delete it afterwards. Sending it is entirely voluntary. Legal basis: your consent under Art. 6(1)(a) GDPR, which you may withdraw at any time.

7. Settings codes in shared links

Exercise settings can be passed on as a link containing a short settings code. Because the code is part of the web address, it appears in the server log files described in section 2, just like any other address. The code contains only exercise settings — no information about you and none about your results.

8. MIDI devices

If you switch on MIDI input, your browser will ask for your permission to access connected MIDI devices. This permission is granted to your browser, not to me: what you play is processed only locally, in order to compare it with the exercise. No MIDI data is transmitted.

9. Fonts and sounds

This website uses the typefaces "Righteous" and "IBM Plex Mono", and piano samples from the Salamander Grand Piano by Alexander Holm (CC BY 3.0). All of these files are served exclusively from the server named above and are not loaded from Google Fonts or any other external provider. Accordingly, no connection to third-party servers is established when you open a page, and your IP address is not transmitted to third parties.

10. Encryption

For security reasons this website uses TLS encryption, recognisable by https:// in your browser's address bar. This prevents the data you transmit to this server from being read by third parties.

11. Your rights

You have the following rights against me as controller with regard to your personal data:

An informal message to the address in section 1 is enough to exercise any of these.

Please note that the data stored on your device (section 5) is not held by me. I cannot read it, disclose it or delete it — you control it directly through your browser, and you can export it yourself at any time.

Independently of this, Art. 77 GDPR gives you the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

12. Changes to this privacy policy

I update this privacy policy whenever the legal position or the operation of this website changes — for example when new features are added. The version published here applies to each new visit; the date above shows when it was last changed.

13. Language versions

This privacy policy is also available in German. Both versions are equivalent in substance; in the event of any discrepancy, the German version prevails.

14. Legal notice

Impressum