Privacy notice

Last updated: 20 October 2026

Solfaboard is designed to collect as little as possible. There are no accounts and no tracking scripts of our own; visit statistics come from Cloudflare's cookieless analytics (below). The site is in several languages; this notice is in English.

Who is responsible

This site is run by Roger Mir Abella, who you can contact at rogermirabella1995@gmail.com.

Your board stays in your browser

What you draw, your settings (language, sound, note names, zoom) and the board width are saved in your browser's local storage on your own device, under the names solfaboard-board-v1, solfaboard-prefs-v1, solfaboard-current and solfaboard-name, and your list of boards in the browser's IndexedDB database solfaboard. If you hide the little cat, that choice is remembered too (solfaboard-cat). They are never sent to us. They are not cookies. To remove them, use Clear the board or clear this site's data in your browser settings.

The hidden game

If you open the little drawer on the right of the board, its game (points, players' names and colours you type in) is saved only in this browser's IndexedDB on your device. Nothing from it leaves the device; you can export or delete the save from the drawer, or clear this site's data.

Live MIDI keyboard

If you open the MIDI keyboard page, your browser asks whether this site may use MIDI devices. The notes you play are processed only inside the page and are never sent anywhere.

Background radio

The radio is off until you pick a station. Then your browser connects directly to that station's own stream server (Radio Swiss, WRTI, Rainwave or Radio Paradise), which, like any website, sees your IP address. For Rainwave it also asks the station's public "now playing" service for the current song, about every 25 seconds and only while the station is playing and the tab is visible. No cookies are sent and nothing passes through us. The station and ambience sound you last picked and their volumes are remembered in your browser (solfaboard-radio-last, solfaboard-radio-volume, solfaboard-amb-last, solfaboard-amb-volume). Solfaboard lofi and the focus sounds are generated inside the page and make no connection at all.

Hosting

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical data such as your IP address and browser type to deliver pages and protect the service from attacks. See the Cloudflare privacy policy.

Visit statistics

To see which pages are useful, we use Cloudflare Web Analytics. It sets no cookies and does not use local storage. It does not follow you across sites or build a profile, and we only ever see totals (for example page views per day, countries, browsers and page speed). Cloudflare processes your IP address briefly to produce these totals and does not use it to identify you. See Cloudflare Web Analytics.

Bug reports and suggestions

If you send a message with the Report a bug / suggestion box, we store: the text you wrote, whether it is a bug or a suggestion, the page and board language, and the date and time. We do not ask for your name or email, and the message is never shown publicly. Messages are kept for up to 12 months and then deleted automatically. Please do not write personal details in the message.

To stop automated spam, the box uses Cloudflare Turnstile, which is loaded only when you open the box. To limit how many messages one connection can send, we keep a one-way scrambled (hashed) form of your IP address for about two hours; it cannot be turned back into the address and is not stored with your message. The legal basis is our legitimate interest in receiving feedback and keeping the service free of abuse.

Lesson enquiries (contact form on /lessons)

If you write through the form on the private lessons page, Roger Mir Abella receives: your name, your email address, how you prefer to be answered (email, WhatsApp or WeChat) and, if you give it, your WhatsApp number or WeChat ID, what you would like to learn, your level, whether you prefer online or in-person lessons, whether you want a free trial class or have a question, the page language, and the date and time.

• Purpose: to answer you and, if you wish, to arrange a trial class and lessons. Your details are not used for anything else, not added to any mailing list and not shared with anyone else.
• Legal basis: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
• Where it goes: the enquiry is stored in Cloudflare KV and sent once by email (Cloudflare Email Routing) to Roger's own mailbox, which is hosted by Google (Gmail). The reply comes from that mailbox, or by WhatsApp or WeChat if you asked for that (then those services' own privacy terms apply). Cloudflare and Google act as service providers; they may process data outside the EU under the EU-US Data Privacy Framework and standard contractual clauses.
• How long: the stored copy is deleted automatically after 12 months. The email is kept only as long as needed to handle your enquiry and any lessons that follow; ask and it will be deleted sooner.
• Spam protection: the same Cloudflare Turnstile check and two-hour hashed-IP limit described above (three messages per hour).

Giving these details is voluntary, but without a name and an email address it is not possible to answer you.

Advertising

Advertising is currently switched on.

When advertising is switched on, ads are provided by Google AdSense in a space below the board, never on top of it. Google and its partners may use cookies or similar technologies to show and measure ads. In the European Economic Area, the United Kingdom and Switzerland, you are asked first through Google's consent message, and personalised ads are only shown if you agree; you can change your choice at any time with Privacy and cookie settings at the bottom of each page (shown while ads are on). Learn more in How Google uses information from sites that use its services. The site works the same with ads blocked.

Your rights

Under the GDPR you can ask to access, correct or delete personal data, object to processing, and complain to your data protection authority (in Spain, the AEPD). Because we store no names, emails or readable IP addresses, we usually cannot link a message to a person; if you tell us roughly when you sent it and what it said, we will delete it.

Changes

If this notice changes, the date at the top changes too.