Privacy

Last updated 22 October 2026

Cantoza is a piano program for your computer. This page says what happens with your information, on this website and in the program. The short version: we do not collect your songs, your playing or how you use the program, and this website uses no analytics, no advertising and no cookies. The website collects only what you type into the beta form. The program talks to our servers only to check for updates and for the end of a beta version, to check a Pro license key, and when you choose to send us a report.

Who is responsible

Cantoza decides why and how your information is used (the “controller” in data-protection law). For anything about your information, write to contact@cantoza.com.

The beta form

  • What we collect: your e-mail address and, only if you fill them in, which system you use, what you would use Cantoza for, and your note. The language of the page you used is added, and the date.
  • Why, and on what basis: to answer your request: to send you the beta invitation (with a free Pro license key) and to tell you about the beta and the launch. You give your consent by ticking the box; you can withdraw it at any time. We also see which systems people want. We do not sell or share it and do not use it for anything else.
  • How it travels: the form is sent to a small program on Cloudflare Pages (our hosting provider), which first asks Cloudflare Turnstile whether you are a person and not a robot (Turnstile sees your IP address and some browser details for that check, under Cloudflare’s own privacy policy). It then does two things with your entry: it passes it to our own mailbox through an e-mail delivery service (Resend), and it saves it in a small list on our Cloudflare account (Cloudflare Workers KV) that only we can read, behind a secret key. That list holds your e-mail address, the optional answers, the language and the date you signed up (and the date, if you sign up again). We also send you one short confirmation e-mail through the same delivery service so you know you are on the list; to avoid sending it twice we note, for 24 hours, that it went out. The invitation itself is sent from our own mail account.
  • Your license record: when you are invited, we create your Pro license in our license service (Keygen). It holds the license key, your e-mail address, the date and the license’s status. It is needed to check the key and is kept for as long as the license exists.
  • How long: your sign-up entry is kept until the beta has ended or you ask us to remove you, whichever comes first. When you ask, we delete your entry from the list and from our mailbox. The e-mail and license services keep their own technical records (for example delivery logs) for a limited time under their own policies.
  • Your rights: you can ask what we hold about you, ask us to correct it, to delete it or to restrict its use, withdraw your consent and ask for a copy you can move elsewhere. Write to contact@cantoza.com, or reply to any message we send you. If you live in the European Economic Area you can also complain to your national data-protection authority.

This website

The pages are static files with one small script of our own. They load no fonts, trackers or images from other sites and set no cookies. Only the beta page loads the Turnstile check from Cloudflare. Our hosting and domain provider (Cloudflare) may keep standard server logs, for example your IP address and the page you asked for, for a short time to keep the site running and safe. Our legitimate interest in running a secure site is the basis for that.

The program: what stays on your computer

Your songs, library, settings, play history, statistics, learning progress and key calibration are stored only on your computer. Cantoza has no user account and does not upload any of this. If the program meets an unexpected problem it writes the details to a file on your computer; nothing is sent unless you send it yourself (see “Reports you send”).

The program: when it connects to the internet

  • Update check and end-of-beta check. When Cantoza starts it reads a small public file with the newest version number, the download link and a signature that proves it comes from us, from our download server (or from this website or GitHub as a backup). It also reads, at the start and every few hours while it is open, a small public status file that can tell a beta version to stop (see the terms). These are plain requests: the server that answers sees your IP address and the program version, as with any web request, and nothing else. When you accept an update, the installer is downloaded from our download server (hosted by Cloudflare) and checked against the signature before it runs.
  • Pro license. If you enter a Pro license key, Cantoza sends that key to our license service (Keygen) to check it, and again about once a day while it runs. The answer (valid or not, and an expiry date if there is one) is saved on your computer, so Pro keeps working offline; a saved answer is trusted for up to 30 days without being confirmed online. No other identifier of your computer is sent.
  • Audio to MIDI (optional). If you choose to install it, Cantoza downloads its components once from their publishers (the Python, ONNX Runtime and NumPy packages, a transcription model and an audio decoder) and checks each against a fixed checksum. Your audio files are processed on your computer and are not uploaded. If you convert a web link, Cantoza downloads the audio of that link to your computer; the site that serves it sees your request like any other visitor’s.
  • Reports you send. The feedback window (F1) builds a report with your message, your version, system details and, if you tick them, recent log lines. You see the whole report first. Only if you press Send does it go to our feedback server (hosted by Cloudflare), which saves it as a private note in our issue tracker (GitHub). Your license key and your Windows user name are removed from the report before it is shown. After an unexpected error Cantoza only shows a notice that mentions the F1 window; it never sends anything by itself.
  • Microsoft Store version. If you install Cantoza from the Microsoft Store, Microsoft handles the download, installation and updates under its own privacy policy. That version does not check for updates itself.

Payments

There is always a free version of Cantoza. Pro is an optional one-time purchase (a lifetime license) and is not on sale yet; people who join the beta receive a Pro license key at no charge. When Pro goes on sale, payments will be handled by an external payment provider that acts as the seller. They receive your payment details and e-mail address under their own privacy policy; Cantoza never sees your card number. The provider will be named here before sales start.

Children

Cantoza is a music program and the free version needs no account. The beta form is meant for adults and for young people old enough to agree to it where they live. We do not knowingly collect information from children; if you think a child has signed up, write to us and we delete the entry.

Your choices

You can uninstall Cantoza at any time; the uninstaller offers to delete your settings. You can remove a Pro license in the settings. You can ask us to delete any information we hold about you, for example a beta sign-up or a license record. We will answer within one month.

Changes

If we change how we handle information we update this page and its date, and for anything that affects you directly (for example a new service in the program) we say so in the program or in the release notes.

Contact

Questions, or a wish to see or delete what we hold about you: contact@cantoza.com. You can also use the feedback window in the program (F1).