Privacy Policy

Last updated: September 2026

1. Data Controller

Maurice Maurer

🔒 Show address

Email: 🔒 E-Mail anzeigen

2. General Information

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular the GDPR and the German TDDDG) and this privacy policy.

This privacy policy applies to the website fragherrnmaurer.com, including the practice area and the shop, and to our iOS apps: “fragherrnmaurer” (the practice area as an app), “Pitch + Beat”, “Racer” and “Breaker”. It explains what data is processed, for what purpose, and what rights you have.

In brief

3. Website

3.1 Hosting and Server Log Files

This website is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

The hosting provider automatically collects and stores information in so-called server log files, which your browser (or our app) automatically transmits. These are:

This data is not merged with other data sources. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of his website.

3.2 Usage Statistics on Our Own Server

To find out which parts of the practice area are actually used, the practice area in your browser sends a short message to our own server whenever a view is opened, and for a few individual actions (for example whether the donation notice was shown or clicked). This message contains:

Your IP address is not stored. Our server immediately converts it into a shortened hash value using a random key that is newly generated every day; the key of the previous day is deleted. This allows us to count how many different devices used the site on a given day, but not to recognise you on another day — and once the key has been deleted, the hash value can no longer be traced back to an IP address, not even by us. No cookies or similar identifiers are stored on your device for this purpose, no third-party service is involved, and the data is not passed on. We only evaluate it in aggregated form (e.g. page views per day and per section). The individual entries are stored on our server at Strato and deleted automatically after 90 days at the latest; after that, only daily totals without any hash value remain (e.g. number of page views and visitors per day and per section). If your browser sends a “Do Not Track” signal, no statistics are recorded.

Our iOS apps, including the “fragherrnmaurer” app, do not send any usage statistics.

The legal basis is our legitimate interest in improving our offering on the basis of how it is used (Art. 6 para. 1 lit. f GDPR). You can object to this processing at any time (Art. 21 GDPR); an email to us is sufficient.

3.3 No Cookies, No Advertising, No Third-Party Tracking

This website does not set cookies and does not use any advertising, analytics or tracking services of third parties. Fonts are hosted locally on our own server — no connection to third-party font services is established. Third-party providers can only set their own cookies or store data on your device when you use their services, e.g. the embedded YouTube player (section 6) or the Stripe payment page (section 4).

3.4 Microphone

Some functions of the practice area — note recognition, tuner, games and recordings — use the microphone of your device, but only after you have allowed this in your browser. The sound is analysed in your browser on your device while you play. It is not transmitted to us or to third parties. Recordings are only made when you start them yourself and are stored on your device only, unless you save or share them yourself.

3.5 Storage on Your Device

The practice area and the shop store data in your browser that is needed for the functions you use: for example language and practice settings, high scores in the games, shopping cart contents and purchase unlocks, and — on the website only — how long the practice area has been actively used, so that a donation notice can be shown once after 10 minutes (local storage), sheet music you have added yourself under “My PDFs” together with your annotations, notes and recordings (IndexedDB), and a copy of the website so that it also works offline (service worker cache). This data remains on your device, is not transmitted to us and is not used for tracking. You can delete it at any time via your browser settings (website data).

Storing and reading this information is strictly necessary to provide the functions you have requested (Section 25 para. 2 no. 2 TDDDG); no consent is required for this.

3.6 External Software Libraries (CDNs)

The practice area loads open-source software libraries (e.g. for displaying PDFs, pitch detection and audio playback), music notation software and instrument sound samples from the following providers:

When these files are loaded, your IP address is transmitted to the respective provider; we do not set cookies and no tracking takes place. Once loaded, the files are kept in your browser’s offline cache and do not have to be requested each time. GitHub, Inc. is certified under the EU-U.S. Data Privacy Framework. The legal basis is our legitimate interest in the reliable and efficient delivery of these components (Art. 6 para. 1 lit. f GDPR).

3.7 Listening Suggestions for Your Own Sheet Music

Under “My PDFs” you can link recordings to sheet music you have added yourself. If you tap “Suggest recordings”, the practice area looks for a matching recording using Apple’s public iTunes search: only then are the title and composer of the piece and your IP address transmitted to Apple. Nothing is searched automatically when you open a piece. The suggestions for Spotify and YouTube are only search links; a connection to these providers is only established when you tap them. When you add a YouTube link yourself, the preview image of that video is loaded once from YouTube (i.ytimg.com) at that moment and then stored on your device; it is not loaded again when you open the piece later. The legal basis is our legitimate interest in offering you suitable recordings (Art. 6 para. 1 lit. f GDPR).

4. Online Shop and Payment (Stripe)

When you purchase sheet music or make a voluntary donation in our shop, the payment is processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (“Stripe”). Your payment details (such as card number or other payment method data) are entered directly with Stripe and are not stored on our server at any time. If you choose a payment method such as PayPal or Klarna on the Stripe payment page, Stripe passes the data required for this on to the respective provider.

For order processing we receive and store from Stripe: your name, email address, country and — for purchases — your billing address, together with the purchased items and the amount paid. We use this data to deliver your download links by email, to issue an invoice or receipt and to comply with statutory retention obligations under German tax law (Art. 6 para. 1 lit. b and lit. c GDPR). Invoices and order records are retained for the statutory retention periods. Emails with your download links are sent via the mail server of our hosting provider Strato.

Each order is given random download links. To protect against misuse, we note how often and when a download link has been used.

Purchased sheet music in the practice area and in the app

If you enter the download link from your order email in the practice area or in the “fragherrnmaurer” app, our server checks which items belong to this order; the sheet music (and any play-along recordings you have purchased) is then loaded from our server. The link is stored on your device (in the app, together with the purchased sheet music, possibly also in your iCloud, see section 8.2) so that your purchases remain unlocked. No user account is created for this. Legal basis: Art. 6 para. 1 lit. b GDPR.

Free downloads

To prevent automated mass downloads, free sheet music and play-along recordings can be downloaded at most 20 times per hour from the same connection. For this purpose, our server stores a shortened hash value of your IP address, formed with a secret random key, together with the times of your recent free downloads. Your IP address itself is not stored, and without the secret key the hash value cannot be traced back to it. Entries older than one hour are no longer taken into account and are deleted automatically. The legal basis is our legitimate interest in protecting our offering against misuse (Art. 6 para. 1 lit. f GDPR).

Further information on how Stripe handles personal data can be found in Stripe’s privacy policy at: https://stripe.com/privacy

5. Contact by Email

If you contact us by email, your enquiry including the personal data you provide (name, email address, content of your message) will be stored and processed by us for the purpose of handling your request and in case of follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f GDPR).

6. YouTube

Most practice videos are stored on our own server. In addition, the practice area and the shop embed some videos from YouTube in privacy-enhanced mode (youtube-nocookie.com). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Two-click solution: No connection to YouTube or Google is established when you visit the website or open a page that contains a YouTube video (for example a piece, a portrait, the music window of your own sheet music or a product page in the shop). Instead of the video you first see our own placeholder with a play button and the note “Playing loads YouTube (privacy)”. The preview images of our own videos shown there are copies stored on our own server; no image is loaded from YouTube. Only when you tap it is the YouTube player loaded from youtube-nocookie.com; for videos whose playback is controlled by the practice area (e.g. by tempo), the YouTube player interface is additionally loaded from www.youtube.com. After your first tap, further YouTube videos are loaded directly until you reload the page. Some videos cannot be embedded; for these we only show a link that opens YouTube. From the moment you tap, your IP address and the address of the page are transmitted to YouTube.

According to YouTube, in privacy-enhanced mode no cookies are used to personalise your viewing before you play a video; however, YouTube may store information on your device and evaluate usage once a video is played. If you are logged into your YouTube account, YouTube can associate your viewing behaviour with your personal profile. You can prevent this by logging out of your YouTube account. Data may also be transmitted to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework.

YouTube is only loaded at your request, i.e. when you tap a video. We use it in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on how YouTube handles user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy

7. Links to Other Websites and Partner Links

Our pages contain links to other services, for example Apple Music, Spotify, YouTube, PayPal and the App Store. Data is only transmitted to these providers when you follow such a link; from then on, the privacy policy of the respective provider applies.

The page “My Equipment” contains partner links (affiliate links) to Musikhaus Thomann. If you click on such a link, Thomann can record that you came via our link, so that we receive a commission if you buy something there. What Thomann processes in this context is governed by Thomann’s privacy policy. We do not receive any information from Thomann that identifies you.

8. Our iOS Apps

8.1 General

None of our apps require an account or a sign-in, none contain advertising, and none include analytics, crash reporting or advertising software from third parties. Our apps do not track you across apps or websites of other companies; for this reason they do not ask for permission for “App Tracking”.

Permissions such as microphone, camera, Bluetooth or local network are only requested when you use the corresponding function for the first time. You can revoke them at any time in the iOS Settings; only the corresponding function will then no longer be available. What is processed only on your device is not accessible to us. Insofar as the apps store or read information on your device, this is strictly necessary to provide the functions you use (Section 25 para. 2 no. 2 TDDDG).

8.2 The “fragherrnmaurer” App

Content and updates. The app shows the practice area of fragherrnmaurer.com. It starts from a copy stored on your device and regularly checks our server for a newer version (while the app is in use, at most every ten minutes). Videos, sheet music, sounds and software libraries are loaded from our server and from the providers named in section 3.6, as on the website. The statements on server log files (3.1), the shop (4) and YouTube (6) apply accordingly in the app. The app does not send any usage statistics (section 3.2) and does not use the iTunes search (section 3.7); for recordings it offers the Apple Music link described below. The app shows no donation requests and does not count your usage time for this purpose; in the shop within the app, donation options are hidden.

Your sheet music, recordings and notes — storage and iCloud. Sheet music you import or scan, recordings, annotations, folders, notes, purchased sheet music and backups are stored in the app’s folder on your device (visible in the Files app). If you are signed in to iCloud and have not switched off “Use iCloud” in the app, these files are stored in the app’s container in your personal iCloud Drive and synchronised between your devices. This storage is provided by Apple as part of your iCloud account; we have no access to it. Deleted items remain in the app’s trash for 30 days; the app additionally keeps daily snapshots of your annotations and notes for 14 days and the last four automatic weekly backups — all of this exclusively on your devices or in your iCloud. If you switch off iCloud in the app, your data is moved back to your device.

Microphone. The app uses the microphone for note recognition, the tuner, the games and recordings. The sound is analysed on your device in real time and is not transmitted to us or to third parties. Recordings are only made when you start them and are stored like your other files (on your device or in your iCloud).

Camera. The camera is used to scan sheet music with the iOS document camera; the scan is saved as a PDF like your other sheet music and is not transmitted. If you switch on page turning by facial gestures, the app uses Apple’s face tracking (ARKit, TrueDepth camera). The app only evaluates a few numerical values calculated on your device by iOS — how far each eye is closed and whether the eyebrows are raised — in order to recognise a wink or raised eyebrows and turn the page. No camera image is displayed, stored or transmitted, and no face data leaves your device, is passed on to third parties or used for any other purpose (e.g. advertising). The values are only kept in memory for the few moments needed for recognition. Face tracking only runs while the function is switched on.

Local network (“Rehearse together”). If you use the joint metronome with other devices in the same room, the devices connect directly to each other via Wi-Fi or Bluetooth (Apple Multipeer Connectivity) — there is no server involved. The name shown for your device in the rehearsal (by default a composer’s name, which you can change) and the metronome settings and timing signals are exchanged. The connection is encrypted.

Bluetooth (AirTurn pedal). If you connect an AirTurn page-turning pedal, the app communicates with it via Bluetooth and remembers the identifier of the last connected pedal on your device so that it can reconnect automatically. The connection software provided by AirTurn, Inc. (USA) is used for this; it may contact AirTurn’s server to check for firmware updates for your pedal.

Apple Music. If you link recordings from Apple Music, the app asks for permission to access Apple Music. Searching (your search term), playback, 30-second previews and checking your subscription are handled by Apple; the cover images of the titles you have linked are loaded from Apple’s servers. We do not receive any of this data. The links you set are stored with your sheet music.

YouTube. To link a YouTube video, the app opens a YouTube search in a separate window that does not keep any cookies or website data after it is closed. Only the ID and title of the video you choose are stored with your sheet music. Embedded videos are played in privacy-enhanced mode as described in section 6.

Importing files and links. You can import files via the iOS file picker (e.g. from iCloud Drive, Google Drive or Dropbox) or paste a shared link to a file or folder (e.g. Google Drive or Dropbox). The app then downloads the files directly from the respective provider, which receives your IP address and the link. No login data is used or stored.

Sheet music from the shop and external links. The app does not contain a shop: sheet music from the shop is only shown as a preview, and there are no purchases or payments in the app. Sheet music you have already bought on the website can be unlocked in the app with the link from your order email; the app then sends the key contained in that link to our server to check which sheet music belongs to the order. Links to other websites open in your browser.

8.3 “Pitch + Beat”, “Racer” and “Breaker”

These apps use the microphone to recognise pitch or which string is being played. The sound is analysed on your device in real time only; it is not recorded, not stored and not transmitted. Settings, player names and high scores are stored on your device only. The apps do not open any internet connection of their own, except for the purchase via Apple. Challenge codes in Racer and Breaker are only passed on by you yourself via the iOS share function.

In “Pitch + Beat”, the Apple Watch app and the widgets receive your settings from the iPhone via Apple’s system functions; “Rehearse together” works via the local network as described in section 8.2.

8.4 Apple as Provider

Our apps are distributed via Apple’s App Store. Downloads, in-app purchases (one-time unlocks) and restoring them are processed by Apple; we only learn whether an unlock is active on your device and receive no payment details, names or addresses. iCloud, Apple Music, Apple Watch synchronisation and the document camera are services of Apple. If you have agreed in the iOS Settings to share analytics data with app developers, Apple provides us with crash reports and aggregated usage figures that do not identify you. For all processing carried out by Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland), Apple’s privacy policy applies: https://www.apple.com/legal/privacy/

9. Your Rights

You have the following rights regarding your personal data:

Data that is only stored on your device or in your iCloud is under your control: you can delete it yourself at any time, e.g. by deleting the website data in your browser, deleting the app or deleting the app’s data in iCloud.

To exercise these rights, please contact us at: 🔒 E-Mail anzeigen

You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit NRW
Postfach 20 04 44
40102 Düsseldorf
www.ldi.nrw.de

10. Data Security

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. Our apps also connect to our server exclusively via encrypted connections.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

11. Changes to This Privacy Policy

We update this privacy policy when our website or apps change. The current version can always be found on this page.