Practice

Privacy Policy

String Warrior works fully without an account, and optional sign-in is rolling out. This page explains what little data the site touches, where it lives, and the choices you have. Last updated .

What we collect

String Warrior never asks for payment details, and every feature works without an account (optional sign-in is rolling out — see below). Signed out, the site touches three kinds of data:

  • Preferences stored on your device. Your color theme and similar settings are kept in your browser's local storage. They never leave your device.
  • Functional cookies. The sw_instrument cookie remembers the last instrument you used so the site can take you back to it, and sw_pin_home records that you'd rather always land on the homepage. Neither identifies you or tracks you across other sites.
  • Analytics. When permitted by your consent settings (below), Google Analytics 4 — loaded through Google Tag Manager — collects standard usage statistics such as pages viewed, approximate region, browser, and device type. We use these aggregate numbers to understand which charts and tools help players most.

Optional accounts (rolling out)

Sign-in is optional and is being rolled out — every chart, tool, and practice routine works without it. When you sign in with GitHub, Google, Facebook, or Apple, we store the minimum needed to recognize you:

  • Profile basics. Your display name and avatar from the provider you choose, plus that provider's user ID so we can recognize your account next time. We never see or store your password, and provider access tokens are used once during sign-in and not retained.
  • Practice history. The practice completions you sync ("finished routine X on day Y") so streaks and badges follow you across devices. Until you sign in, this history lives only in your browser's local storage and never leaves your device.
  • Session cookie. Signing in sets an sw_session cookie (HttpOnly, Secure, 30 days) that keeps you signed in; the server stores only a hash of it. Signing out deletes the session immediately.

Accounts are for ages 13 and up. Account creation requires confirming you are at least 13 years old, and we do not knowingly create or keep accounts for children under 13. The kids' area at /kids never asks for or offers sign-in: it loads no analytics or third-party scripts of any kind, collects no personal information, and keeps all progress in your browser's local storage on your device.

To delete your account and its synced practice history, email privacy@cpillc.com.

Gear Locker (rolling out)

Signed-in users will be able to catalog their gear — instruments, amps, pedals, pedalboards, and misc — with photos. Everything in the locker is private by default; here is what's stored and how sharing works:

  • Gear details. The names, brands, models, years, serial numbers, and notes you enter are stored in our database (Cloudflare D1) tied to your account. Notes are never shown publicly.
  • Photos. Uploaded gear photos are stored in private object storage (Cloudflare R2) and served only through this site. Photos are re-encoded in your browser before upload, which strips camera metadata such as GPS location in supported browsers.
  • Sharing is triple opt-in. Nothing is visible to anyone else unless you (1) turn on your public gear page, (2) mark an item public, and — for serial numbers — (3) enable "show serial" on that item. Turning your public page off hides everything again immediately.
  • Public handle. If you enable sharing, the handle you pick appears in your public page URL. Deleting an item deletes its photos from storage.

To delete your gear data, delete the items in your locker or email privacy@cpillc.com — account deletion removes gear data and photos as well.

Analytics runs behind Google Consent Mode v2, with privacy-respecting defaults set before any Google script loads:

  • Global Privacy Control (GPC). If your browser sends the GPC signal, analytics, advertising, and personalization storage all default to denied — automatically, with nothing to configure.
  • EU, UK, EEA, and Switzerland. Visitors from these regions start with analytics and advertising storage denied by default.
  • Everyone else can opt out at any time by enabling GPC or blocking cookies for this site in their browser; every feature on the site keeps working.

We do not sell personal information, run third-party advertising networks, or share data with anyone beyond the Google services described above. Data handled by Google is governed by Google's Privacy Policy, and analytics retention follows Google Analytics' standard retention controls.

Contact and changes

String Warrior is operated by Cyberpunk Industries LLC. For privacy questions, data requests, or concerns, email privacy@cpillc.com.

If this policy changes, the update will appear on this page with a new "last updated" date. Material changes will be summarized at the top of the page.

Explore the site

Instruments · Guitar chords · Tools · About String Warrior