Privacy notice
HouseKeys is operated by Mitch Collinge, trading as Studio 22 Southport, as a sole trader.
Account and purchase data
Sign-in is available with an email address and password or through Google. For email-and-password accounts, HouseKeys stores the email address plus a salted one-way password hash; the readable password is not stored. For Google sign-in, HouseKeys receives a verified account identifier and email address. The identifier links your purchase and access. Our database stores order identifiers, Stripe customer identifiers where supplied, checkout and payment references, entitlement status, creation time and the terms version accepted. Legacy subscription identifiers, status, paid access end dates and cancellation status are retained so existing subscribers keep access and self-service cancellation. Card details are entered with Stripe and are not stored by HouseKeys.
Free starter-pack requests
If you request the free 10-loop MIDI starter pack, we store your email, request time, delivery status and download count to provide the pack. We send a requested download link through our existing email provider when available. Opening that email link confirms your address. Optional HouseKeys updates require a separate unchecked choice on the form and confirmation through the email link. Pack requests alone are not marketing subscriptions. Preference links let you stop optional updates. The fixed starter pack does not consume or increase generator exports. Contact support to request deletion of your pack contact record.
Your chord progressions
Generation runs in your browser. Daily generation counts are stored against your secure guest identifier or account, carry over on sign-in and reset at midnight UTC. No chord notes are sent for these allowance checks. For downloads, chord notes are sent to our server to create the MIDI file and check your account allowance. HouseKeys does not retain the generated MIDI file after the request. For WAV downloads, notes and sound settings are sent to check Lifetime access; the audio is then rendered and downloaded in your browser. HouseKeys does not store the rendered WAV. If you choose “send to computer”, the MIDI attachment is passed to Resend for delivery to your signed-in account email and is handled under Resend’s service terms and retention practices. If you choose to save a progression while signed in, HouseKeys stores its title, notes and settings against your account so it can be restored on another device; you can delete saved progressions from your library. The first free MIDI export can be used without an account and is stored against a necessary secure guest identifier in this browser. If you later sign in, that guest usage is linked to the account and counts toward the two-file free allowance. One-off purchases are linked to the guest or account that started checkout; Lifetime purchases are linked to the signed-in account so access works across devices. We store an export request identifier, a file hash and a timestamp for allowance checks, one-off credits and safe retries. Preference ratings and analysis history stay in browser storage.
Usage monitoring
We record first sign-in and last activity times alongside your account email. Basic action counts cover generator use, previews, downloads, account-flow steps, Lifetime and one-off checkout steps, verified payment completion, and user-requested send-to-computer actions. Signed-in activity is linked to your account; anonymous generator activity uses a random first-party guest identifier. When you arrive through a tagged campaign link, HouseKeys stores the first-touch source, medium and campaign labels. A coarse mobile, tablet or desktop category and a stable A/B-test variant are also recorded; the variant is kept in first-party browser storage. We do not store exact screen dimensions, detailed browser fingerprints, chord notes or MIDI contents in analytics.
How data is used
Account and order data are used to supply access, verify payments, handle refunds and disputes, and resolve support requests. Aggregated usage and campaign data are used to understand and improve HouseKeys and its offers. Service providers include Cloudflare for hosting and storage, Resend for password-reset emails and user-requested MIDI delivery when configured, Google for optional Google sign-in and Stripe for payments. These providers may process data internationally under their applicable arrangements.
Improving chord choices
Successful MIDI exports may contribute a transposition-independent chord-order pattern, a hashed visitor reference and a timestamp to improve future suggestions. These learning records do not contain your email, MIDI file or full note sequence. Repeated exports are deduplicated and contributions are limited. Individual learning records expire after 30 days; only patterns supported by at least three visitor references affect the shared preference signal. Download popularity is kept separate from musical correctness checks.
Storage and your choices
Purchase records are retained as needed to deliver access, resolve disputes and meet applicable record-keeping obligations. Saved progressions remain until you delete them or request account-data deletion. Campaign attribution and aggregate usage records are retained for service analysis. Contact the seller to request access, correction or deletion of personal data. Some payment records may need to be retained. You can clear local preference, attribution and experiment history in your browser settings.
Contact
HouseKeys uses first-party operational and analytics storage but adds no third-party advertising trackers. Hosting and sign-in providers may use necessary cookies and operational logs.