Privacy

Pupitre is not released yet. This page says what is true of this website today and of the app as it is being built. It will be checked against the released app, and its date moved, in the same change that ships it.

The app

Pupitre has no account, no ads, no analytics and no tracking code. What you play on your keyboard reaches the app’s piano and goes no further: nothing you play is recorded or sent anywhere.

What does cross the network goes through Apple’s own services, never to us. The Concert Grand piano, if you choose it in Settings, is downloaded from Apple, which hosts it. Crash reports, if you allow them, go to Apple and not to us.

On the Mac the app is sandboxed. It carries the entitlement to open outgoing connections, for a song tool still in development that downloads models from Hugging Face; no feature in this version uses it, and nothing in the app listens for connections. You can see the full list with codesign -d --entitlements - /Applications/Pupitre.app.

It reads only the MIDI files you open or add. Songs you add to My Songs are copied into a Pupitre folder in your own iCloud Drive, or kept on the device when there is no iCloud, each beside a small file with its settings: its loop, tempo, parts, place and best scores. Those go to Apple, in your iCloud account, and not to us. On the Mac you can also choose a folder to keep the Concert Grand in and share it with Pochette; Pupitre writes to that folder and no other.

This website

This site counts visits with Cloudflare Web Analytics, which sets no cookies and does not follow you across other sites, so there is no consent banner. Fonts and images are served from this site itself; no other third party is contacted when you read it.

Feedback form

The feedback form sends something only when you fill it in and press send. The app never sends feedback itself: it opens that page in your browser and stops.

We receive what you typed, the subject and details, and your email address if you chose to give one. Opening the form from the app also fills in four technical facts: your Pupitre version, your system version, your device’s model identifier (like Mac16,10) and your language. They arrive in the web address itself, so you can read them in the address bar before anything is sent, and the form shows them as ordinary fields you can edit or clear. That is the whole list: never a song, a note you played or anything else from your library.

Submissions are stored in a Cloudflare D1 database in Western Europe, with the two-letter country your request came from, and emailed to support@mgcrea.io so we can reply. The form sets no cookie, and the code that handles a submission never reads or stores your IP address. Submissions are never used for marketing, sold or shared. To have one deleted, email us.

Contact

Questions about this page: support@mgcrea.io.