Privacy

Your gardens stay with you

MusicIsles works without an account. What you make is kept on your device, unless you choose to share a garden. This page explains what that means for the MusicIsles app on iPhone, iPad and Android, and for this website.

In the app

• On your device. Your gardens, their names, an unsaved draft, your settings, and the list of links you have shared (with the keys that can take them down) are stored inside the app on your device. They are not sent to us unless you share a garden, as described below.
• No account, no ads, no analytics. There is no sign-in. The app shows no advertising and contains no advertising, analytics or crash-reporting software. It does not use your camera, microphone, location, contacts or advertising identifier.
• Device backups. Your device’s own backup (for example iCloud or Google) may include the app’s saved gardens, depending on your settings.

When you share a garden

Sharing is optional. When you open Share while you are online, the app sends the garden to musicisles.com so that a link is ready — this can happen as soon as the Share sheet opens, before you choose where to send it. It sends, over an encrypted (HTTPS) connection and without cookies or an account:

• the garden: its tiles, tempo and name;
• a random identifier made by the app for your installation. It is not an advertising identifier, and it lets the same garden shared again keep the same link.

For each shared garden our server keeps:

• the garden and its name, and when the link was made;
• a fingerprint (hash) of the garden’s content;
• salted, one-way hashes of your network address and of the installation identifier, used to give you the same link again and to limit abuse;
• a hash of the key that can delete the link;
• a count of how many times the link has been opened.

To apply rate limits, your network address is also processed briefly in memory when you share.

Who can see a shared garden

Anyone who has the link can open the garden and see its name. There is no public list or search of shared gardens. Someone who opens your garden in MusicIsles can keep their own copy of it.

How long it is kept

• A link that nobody opens is deleted automatically 30 days after it was made.
• A link that has been opened is kept until you stop sharing it, unless we remove it.
• Stop sharing (in the Share sheet, on the device that made the link) deletes the garden from our server at once. It cannot recall copies that people have already saved, or pictures you have already sent.

This website

These pages set no cookies and load no third-party scripts, fonts or trackers. Like most websites, our hosting provider may record standard request information, such as network address and time, to run and protect the service. Opening a garden link here adds one to that link’s open count.

Changes and questions

If this policy changes, the new version will be posted on this page. For questions about privacy, see Support for how to reach us.