Scorrenza Privacy Policy
Version: 2.2.0 · Effective: 17 October 2026
1. This policy and the data controller
This policy explains how your personal data is processed in the Scorrenza Android app and on the account deletion page at app.scorrenza.com.
Scorrenza is a sheet music reader, designed primarily for tablets, that lets musicians open their own PDF scores and use them in a more readable form. The "Conductor" feature, offered as a paid feature, follows the music being played through the microphone, finds the position in the score and turns the page on its own.
"Personal data" is information that identifies who you are, either directly or together with other information. "Processing" is any operation on this information, such as obtaining, using, storing or deleting it. The "data controller" is the person who decides for what purposes and how personal data is processed.
Data controller: - Ahmet Erkan ÇELİK (natural person) - Petrol-İş Mah. Şht. Murat Şenyüz Sk. Deniz Apt. No: 5, 34862 Kartal / İstanbul, Türkiye - E-mail: info@scorrenza.com
In this text, "KVKK" means the Turkish Personal Data Protection Law No. 6698.
2. Ways of using Scorrenza
You can use Scorrenza in three ways:
- Without an account: no data is sent to our server; your scores, your annotations and the microphone processing stay on your device only. The only exception is the "Add from IMSLP" screen: when you open this screen, the app connects to our server to download or update the IMSLP catalogue (section 3); no account or device identifier is sent in that request. As long as you do not open this screen, nothing is sent to our server.
- With an account, without a paid feature: to verify your account, manage your session and ensure information security, we process your e-mail address, your device identifier and device model, your language preference, your year of birth (and, if you are 13–15, your parent's or guardian's e-mail address), your policy acknowledgement record, the records of your entitlements to use paid features, and the IP address and time of the requests made to the server. If you wish, after confirming that you have read this policy, you can also add profile information (full name, instrument, photo). Your PDF files are not uploaded to the server.
- With the Conductor: in addition, the PDF file of the piece in which you turn on the Conductor is uploaded to the server; an optical music recognition result and Conductor data are produced (section 4).
When you visit pages at app.scorrenza.com (for example this policy or the account deletion page) without an account, the IP address and time of your request and the address requested are also entered in the server access records (section 7).
3. Data processed on your device
Microphone
The microphone is used while the Conductor or the listening function is on. Sound is processed only on your device, in real time, and is turned into numerical features used to follow the music. Microphone sound is not sent to our server and is not used to identify you. Microphone use is shown by Android's foreground service notification. If you do not grant microphone access, listening and music-driven page turning do not work.
For each listening session, a session log consisting only of numbers is kept on the device (such as time, page-turn events and sound level). Sound cannot be reconstructed from these numbers.
No sound recording: the store and beta versions of the app do not create sound files on your device. Sound is only processed on your device in real time, as described above, and is not recorded. We do not ask you for, or accept, sound recordings.
Library, annotations and PDFs
Your list of pieces, your annotations on the page, your bookmarks, your page edits and your setlists are kept on your device. You choose PDFs with the Android file picker; access permission is obtained for the file you choose, and in some cases a copy of the file is taken into the app's own storage. Choosing a file through Google Drive does not give Scorrenza access to your Google account.
IMSLP catalogue and external links
The IMSLP catalogue in the app contains the title, composer, edition and licence information and IMSLP address of scores that are considered to be in the public domain or under a free licence; it contains no information about you. The catalogue is downloaded from our server to your device the first time you open the "Add from IMSLP" screen; each later time you open the screen, the app checks whether it is up to date. If you never open this screen, the catalogue is not downloaded and the app does not connect to our server for it. This works the same way whether or not you have an account. No account or device identifier is sent in the request; the IP address and time of the request and the address requested are entered in the server access records (section 7). Your searches in the catalogue and the pieces you look at are processed only on your device and are not sent to us.
When you choose "View on IMSLP" or "Add score", the relevant IMSLP page opens in your device's browser. A fixed tag showing that the visit comes from Scorrenza (utm_source=scorrenza) is added to this address. The tag is the same for everyone; it contains no information that identifies you, your device or your account, and it does not measure anything for us.
IMSLP (Petrucci Music Library) is an independent website operated by Project Petrucci LLC; Scorrenza has no connection or cooperation with IMSLP. When you open an IMSLP page, your IP address and browser information reach IMSLP. What you do on IMSLP (signing in, downloading, subscribing) is subject to IMSLP's own terms and privacy policy; Scorrenza does not see this information.
When you add a file downloaded from IMSLP to the app, it is processed in the same way as your other PDFs (above and section 4). Whether the file you add is the same as a file in the catalogue is determined by calculating the file's fingerprint on your device and comparing it with the catalogue on your device; nothing is sent to our server for this comparison. For a file that the catalogue marks as prepared in advance for the Conductor, optical music recognition has already been carried out on our server, on the same file that Scorrenza itself obtained from IMSLP; this result is not produced from another user's upload. When you turn on the Conductor for such a file, the file is uploaded to the server as with your other PDFs (section 4); the final preparation of the Conductor data takes place at that point and takes less time.
On-device text recognition
To recognise the text on the page, the Google ML Kit text recognition library runs only on your device. Page images, recognised text and usage information are not sent to Google or to us.
Library backup
With "Backup" in Settings you can save your library, your notes, your bookmarks, your page edits, your setlists and your app preferences to a single file. If you wish, you can also include your score files (PDF). Your account information, Conductor data and session records never go into the backup.
You choose where the file is saved (for example your tablet, an SD card, Google Drive). Scorrenza writes the file only to the location you choose; it is not sent to us and we cannot access it. If you choose cloud storage, the file is stored under that service's own terms.
The backup file is not encrypted. Because it contains your notes and, optionally, your score files, we recommend that you take care with whom you share the file and where you keep it. Deleting the app or your account does not delete this file; you can delete it yourself.
Android automatic backup
If Google backup is turned on on your device, Android backs up your list of pieces, your setlists, your annotations, your bookmarks, your page edits and your app settings to your Google account. Your PDFs, your account information, Conductor data and session records are not included in this backup. This backup is kept in your own account as part of the service between you and Google; it is not sent to Scorrenza servers and is not a transfer made by Scorrenza. You can turn backup off in Android settings.
When you uninstall the app
All data in the app's own storage, including your library, your annotations, the PDF copies on the device, Conductor data and session records, is deleted immediately by Android. Backup files you saved to a location of your own choice and the original files of your PDFs are not deleted. If Google backup is on, the copy described above may remain in your Google account.
4. Data processed on our server
| Data | What is it used for? |
|---|---|
| E-mail address and account creation time | To create and manage your account |
| Your year of birth (year only; month and day are not asked); if you are 13–15, your parent's or guardian's e-mail address and the time of consent | To apply the minimum age for an account and, for ages 13–15, to obtain and prove parental consent (section 11). Because age changes over time, the year of birth is kept instead of the age |
| Profile information: full name, instrument, photo (optional) | To show your profile on your own devices. It is not shown to other users. The photo is re-encoded on the server and all its metadata, including location, is removed. Profile information can be saved only after you confirm that you have read this policy |
| Hash of the sign-in link and code | To verify your sign-in |
| Device identifier generated by the app, device model, time of last use | To manage your sessions per device, to limit improper use of an account on more than one device, and to show you your recent sign-ins |
| Hash of the session token | To verify your open session |
| The policy version you confirmed you have read, and the time | Record that you have read this policy |
| Your paid-feature entitlements, their source and duration; Google Play purchase record | To manage your right to use paid features |
| The PDF uploaded for the Conductor, the optical music recognition result (including page images), Conductor data and the link between the account and the document | To run the Conductor (see the rest of this section) |
| Administrator action records: actions such as granting and revoking entitlements (contain no e-mail). Their link to you is removed when your account is permanently deleted | Proof of the actions |
| Account deletion action records: deletion request, placing an unused account in the deletion process, deletion, restoration, decision to continue the deletion and erasure on request; time, channel and your account ID number (no e-mail address) | Proof that your deletion request was carried out (section 8) |
| Erasure record: only your account ID number and the time of deletion | Proof that your deletion request was carried out (section 8) |
| IP address, time and requested address of every request made to the server | Information security and legal obligation (access records) |
| Recipient address and delivery information of sign-in and notification e-mails | Record of e-mail deliveries |
| Your KVKK requests and our correspondence | To answer your requests and to prove that we did (section 10) |
Signing in
We do not use passwords. You sign in with a single-use link or a 6-digit code sent to your e-mail. Sign-in values and session tokens are kept on the server only as hashes. A hash is the result of a one-way calculation used for verification in place of the original value; it does not mean that the data is anonymous.
| What | Duration |
|---|---|
| Sign-in link and 6-digit code | Valid for 15 minutes, usable only once, with at most 5 attempts |
| Records of used or expired sign-in codes | Deleted within 48 hours at the latest |
| Session | Valid for 90 days; renewed each time you use the app. Cancelled immediately when you sign out or start account deletion |
| Records of expired or cancelled sessions | Deleted after 90 days |
| Account deletion link requested from the app | Valid for 30 minutes; its record is deleted within 48 hours at the latest |
| Account deletion code on the web page | Valid for 10 minutes; its record is deleted within 48 hours at the latest |
| Attempt counters that prevent abuse (IP address and user) | Deleted within 26 hours at the latest |
Your account can be used on only one device at a time. When you sign in on another device, your session on the previous device is closed. In the app you can see the device on which your account is open and the date of the last sign-in.
Uploading a PDF for the Conductor
If you have a Conductor entitlement and enable the Conductor for a piece whose PDF does not yet have Conductor data, the PDF is uploaded to the server. The server reads the musical notation in the PDF by software (optical music recognition), produces the Conductor data and sends it to your device. Conductor data is stored encrypted on your device.
You are informed before the upload. If a mobile data connection is in use, you are asked separately; this question is only a choice about your data usage and is not a consent to the processing of your personal data. If you do not upload the PDF, Conductor data cannot be produced for that piece; you can continue to use the PDF in the score reader.
Shared processing of the same document
The PDF you upload for the Conductor is recognised by a hash calculated from its content (the file's fingerprint). If another user uploads the same file, optical music recognition is done once and the data produced is used for that user as well. Only a person who uploads the same file can reach this data. If there is the slightest difference in the file (for example a name written on a page), the fingerprint changes and the file is processed separately. Users cannot see one another's identity.
The PDF and the optical music recognition result produced from it are stored on the server together with the page images. The purpose is to allow pieces to be processed again as the optical music recognition software improves, so that the Conductor works more accurately. This data may be kept separated from your identity, with its link to your account removed; however, this does not mean that personal data inside the document's content is anonymous.
We ask you not to put third parties' personal data in the documents you upload; if there is such data, it is your responsibility to remove it before uploading.
Deletion request for a document containing personal data: you can send it to us by the request channels in section 10. The copy held on our server of the document identified in your request, the optical music recognition result produced from it (including page images) and the Conductor data are deleted. Re-uploading the same file is blocked; if another user has uploaded the same file, Conductor data is no longer provided for that file.
The scores you upload and copyright
When you upload a PDF for the Conductor, you accept, declare and undertake that, for that file, (a) you are the copyright holder, or (b) the work and the edition are in the public domain, or (c) you purchased or licensed the work lawfully and have the right to personal use, or (d) the upload complies with the law and with the exceptions in the applicable legislation.
The PDF you upload is not shown or sent to any other user. The Conductor data produced from it is given only to a user who uploads the same file themselves.
Copyright infringement notice: if you are the rights holder of a work and believe your right has been infringed, write to info@scorrenza.com. In your notice, state your identity and contact details, the work and the edition, and, if possible, provide the PDF file concerned. Once your claim is proven, all copies of the work in our system, the data produced from them and the Conductor data are deleted by us, and re-uploading the same file is blocked.
The person giving the notice declares that the information and documents provided are accurate and that they are the rights holder or the rights holder's authorised representative. All liability arising from an untrue or misleading notice lies with the person who gave it. Scorrenza cannot be held liable for deletions it carries out in good faith in reliance on the information and documents presented to it.
Purchasing paid features
Features offered as paid features (for example the Conductor) are purchased through Google Play. The purchase takes place between you and Google; Google collects the payment and processes your card and billing details, and we do not see this information. Payment-related operations are subject to Google's own terms and privacy policy.
When the purchase is completed, the purchase record passed on by Google Play (product, order number, purchase token, date and the status of the purchase or subscription) is processed on our server in order to assign your paid-feature entitlements to your account. The validity of the record and the status of the subscription (renewal, cancellation, refund) are verified with Google Play. This record is kept for as long as the entitlement concerned continues; when you delete your account it is deleted as described in section 8.
5. Purposes of processing and legal grounds
Your personal data is processed by Scorrenza for the following purposes and on the following legal grounds:
- Performance of a contract (KVKK Art. 5/2-c): creating your account and verifying your sign-in; applying the minimum age for an account and obtaining parental consent for ages 13–15 (your year of birth and your parent's or guardian's e-mail address); showing in your account the profile information you optionally add; processing the PDF you upload for the Conductor and providing the Conductor data to you; assigning your entitlements to features offered as paid features.
- Legitimate interest (KVKK Art. 5/2-f): ensuring information security (managing your sessions per device, limiting improper use of the same account on more than one device, showing you the device and date of your recent sign-ins); processing the same file only once on the server (shared file hash); the 30-day waiting period in account deletion, as protection against accidental deletion.
- Legal obligation (KVKK Art. 5/2-ç): keeping access and traffic records as required by Law No. 5651 and the related legislation, carrying out information security processes and providing information to authorised public institutions and bodies; recording deletion and destruction operations.
- Legal obligation and protection of a right (KVKK Art. 5/2-ç and 5/2-e): keeping policy acknowledgement records, administrator action records, account deletion action records and request correspondence.
Opening an account is optional; however, the account and sign-in service cannot be provided without an e-mail address, and paid features cannot be provided without an account and the relevant entitlement.
This policy is an information notice. Ticking the "I have read the Privacy Policy" box in the app is stored, together with the policy version and the date, as a record that you have read this text; it is not a declaration of explicit consent.
6. Service providers and transfers abroad
Hosting and e-mail
Our servers, our database and file backups, and the mail server from which we send sign-in and notification e-mails are operated in a data centre located in Türkiye, through a hosting service provider. This provider stores your data only on our behalf and in line with our instructions (data processor). No separate e-mail delivery service is used.
Domain name resolution (Cloudflare)
To translate the domain name scorrenza.com into our server's address (DNS), we use the service of Cloudflare, Inc., based in the USA. Your app and web traffic does not pass through Cloudflare; however, during domain name queries an IP address may reach Cloudflare's servers abroad.
Transfers abroad
Our servers and our backups are in Türkiye. The only case in which your personal data is transferred abroad is the domain name resolution described above (Cloudflare, USA). This transfer is based on the standard contract published by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) under KVKK Art. 9; the contract has been notified to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu). You can request a copy of the contract from info@scorrenza.com.
If Google backup is turned on on your device, the backup made by Android is part of the service between you and Google; it is not a transfer made by Scorrenza (section 3).
Google and the services you choose
Google Play is the distribution channel of the app; the purchase of paid features is explained in section 4. Google ML Kit runs only on your device (section 3). Choosing a file from Google Drive is your own choice. Opening IMSLP pages is also your own choice: IMSLP is not a service provider of Scorrenza, and this visit is not a transfer made by Scorrenza (section 3).
7. Retention periods
| Data or record | Retention period |
|---|---|
| Account, e-mail, year of birth, profile, device records, policy acknowledgements, paid-feature entitlements and purchase records; if you are 13–15, the parent's or guardian's e-mail and the consent record | For as long as your account is open. After the 30-day waiting period following the deletion request, permanently deleted on the 31st day at the latest |
| Record awaiting parental consent (ages 13–15; including the e-mail address, year of birth and your parent's or guardian's e-mail address) | Deleted if your parent or guardian does not confirm within 7 days |
| Sign-in link and 6-digit code | Valid for 15 minutes; its record is deleted within 48 hours at the latest |
| Records of expired or cancelled sessions | 90 days |
| Records of failed attempts to sign in with a code (a value calculated one-way from your e-mail address, and the time; your e-mail address itself is not included). Purpose: to protect your account against guessing attacks (information security) | 30 days |
| Unused accounts | An account that has not been used at all for 90 days is placed in the deletion process and you are informed by e-mail. The 30-day waiting period in section 8 applies: you can restore your account during this period by signing in and choosing Restore my account; otherwise the account is permanently deleted. Accounts with a continuing paid-feature entitlement are outside this rule; when your entitlement ends, your account continues as a free account |
| Server access records (IP address, time, requested address) | 2 years; then deleted automatically |
| E-mail delivery records | 35 days at most |
| Database and file backups (encrypted) | 180 days at most |
| Uploaded PDF, optical music recognition result and Conductor data (if no other user uses them) | 31 days at the latest from the deletion request |
| Shared PDF, optical music recognition result and Conductor data (if another user also uses them) | With the link to your account removed, until the last account using them is deleted |
| Administrator action records (records of changes made by Scorrenza administrators, such as granting or revoking access; they contain no e-mail address; their link to you is removed when your account is permanently deleted). Account deletion action records are not covered by this row, see the next row | 10 years from the date of the recorded action |
| Account deletion action records: your deletion request, placing your account in the deletion process because it was not used, the deletion, restoration of your account, your decision to continue the deletion, and erasure carried out at your request. Content: the time of the action, the channel used (app, web page, request, or automatic action because the account was not used) and your account ID number (UUID). They contain no e-mail address. Purpose: to show that your request was carried out | 10 years from the date of the recorded action, even if your account is deleted during that period |
| Erasure record (only your account ID number and the time of deletion; the erasure record created upon permanent deletion, separate from the administrator action records and account deletion action records above) | 3 years |
| KVKK requests and correspondence | 2 years |
8. Deleting your account
You can start deletion from the app or, without the app installed, from the account deletion page. Deletion started from the app is confirmed with a confirmation link sent to your e-mail.
- When deletion is started, your sessions on all devices are closed.
- Your account is held for 30 days. This waiting period is a means of recovery in case you delete your account by mistake.
- If you sign in during this period, you are shown the notice "Your account is in the deletion process" and asked to choose Restore my account or Continue deletion. If you choose to restore, the deletion is cancelled.
- If you do not restore your account, it is permanently deleted at the end of the 30 days, on the 31st day at the latest.
On permanent deletion, your account and e-mail address, your profile, your device records, your policy acknowledgements, your paid-feature entitlements, your sign-in records and the links between your account and documents are deleted. PDFs, optical music recognition results and Conductor data that no other user uses are also deleted. Shared documents used by other users continue to be kept, with their link to the deleted account removed.
Your personal data is removed from the active system. However, as required by the relevant Regulation, an erasure record proving that the deletion was carried out is kept for 3 years and deleted at the end of that period. This erasure record contains only your account ID number and the time of deletion; your e-mail address and any other information identifying you are not in the record. When your account is deleted, a "your account has been deleted" e-mail that includes your account ID number is sent to you; you can use this number if you ever need to prove the deletion. The account deletion action records of your deletion request, the placing of your account in the deletion process because it was not used, the deletion, the restoration, your decision to continue the deletion and erasure carried out at your request (time, channel and your account ID number, without your e-mail address) are also kept for 10 years from the date of the recorded action, even if your account is deleted during that period, so that we can show that your request was carried out. Because these records carry your account ID number, that number remains information that identifies you for these records; they do not contain your e-mail address or any information about you beyond the details listed above. Access records and backups are subject to the periods in section 7.
Deletion without waiting: if you do not want to wait for the 30-day period, you can send your request for immediate deletion under KVKK by the request channels in section 10. In that case your data is deleted immediately, except for what is covered by legal retention obligations (server access records, the erasure record, administrator action records no longer linked to you, account deletion action records, request correspondence) and by the retention period of backups.
Backups: deleted data is not removed from backups at the moment it is deleted from the live system; it remains in our encrypted backups for up to 180 more days and is deleted automatically at the end of the backup cycle. The time from your account deletion request until your data is also deleted from the last backup is therefore 211 days at most (30 days of waiting, 1 day of clean-up and 180 days of backup retention). Backups are restored only in the event of a failure or data loss. If a restore is made, your data that was deleted after the date of the backup is deleted again within 10 days of the restore at the latest; during that time it is not used for anything other than operating the service.
Deleting your account does not affect the library on your device. Conductor data on the device is deleted when you sign out or when your account is closed. Device files that were not sent to us and copies you saved elsewhere or shared are outside the scope of account deletion.
9. Security measures
Data transfer between the app or web and our server is encrypted with HTTPS. Backups of the database and of the files are encrypted. We do not use passwords for sign-in; sign-in links and codes are short-lived and single-use, and only their hashes are kept on the server. Session tokens are likewise stored only as hashes. The keys in sign-in links are not written to server records. When account deletion is started, sessions on all devices are closed. Conductor data is stored encrypted on your device.
If a data breach occurs, we notify the Personal Data Protection Board and the affected users within the periods laid down in the legislation.
These measures are not a guarantee that no security incident will ever occur.
10. Your rights and how to apply
Under KVKK Art. 11 you have the right to learn whether your personal data is processed; to request information about it if it has been processed; to learn the purpose of processing and whether the data is used in line with that purpose; to know the third parties to whom it is transferred in Türkiye or abroad; to request its rectification if it has been processed incompletely or inaccurately; to request its erasure or destruction where the conditions are met, and to request that these operations be notified to the third parties to whom it was transferred; to object to an adverse outcome arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage because of unlawful processing.
Request channels
You can send your requests under KVKK Art. 11 in one of the following ways:
- by a petition with a handwritten signature, to our postal address in section 1;
- signed with a secure electronic signature or mobile signature, to info@scorrenza.com;
- from the e-mail address registered to your Scorrenza account, to info@scorrenza.com;
- for account deletion, by using the deletion function in the app and on the page app.scorrenza.com/account/delete.
Your request must include your first name, your surname, your signature, your Turkish identification number (for foreign nationals, nationality and passport number), your residential or business address, your e-mail address if any, and the subject of your request. Your requests and our correspondence are kept for 2 years.
Your requests are concluded free of charge as soon as possible, depending on the nature of the request, and within 30 days at the latest; if the operation involves an additional cost, the fee in the tariff set by the Board may be charged.
If your request is refused, if you find the answer insufficient, or if no answer is given in time, you can lodge a complaint with the Personal Data Protection Board within 30 days of learning of the answer and, in any case, within 60 days of the date of your request.
Requesting a copy of your data
You can request a copy of the data held about you on our server by the request channels above. The copy is sent to the e-mail address registered to your account in a commonly used, machine-readable format (JSON): your account and device information, your year of birth, your policy acknowledgements, your paid-feature entitlements, your profile information and the list of documents you uploaded. Conductor data, optical music recognition results and technical values kept for security purposes (for example hashes of sign-in codes) are not included in this copy. For data that exists only on your device (library, notes) you can use the "Backup" feature in the app.
Automated decision-making
In Scorrenza there is no mechanism that makes decisions about you by analysing your personal data solely with automated systems. Page turning, the temporary sign-in lock for security purposes, the device limit and the deletion of an account unused for a long time after prior notice are rules about how the service works.
11. Child users
Scorrenza is intended for users aged 13 and over. You can also use the app as a score reader without opening an account; in that case no data is sent to our server unless you open the "Add from IMSLP" screen and download the IMSLP catalogue (sections 2 and 3).
You must be at least 13 years old to open an account. Children under 13 cannot open an account.
When you open an account, we ask for your year of birth (year only; month and day are not asked). Because age changes over time, the year of birth is kept instead of the age; your age is determined from your year of birth. Your year of birth is used to apply the minimum age for an account and to determine whether parental consent is required (sections 4 and 5).
If you are between 13 and 15, your account is opened with your parent's or guardian's consent: when opening the account you enter your parent's or guardian's e-mail address, and a confirmation link is sent to them. Until your parent or guardian confirms, you cannot sign in to your account; during that time you can continue to use the app as a score reader without an account. If your parent or guardian does not confirm within 7 days, the record is deleted. Your parent's or guardian's e-mail address and the times of the consent and of any withdrawal of it are kept with your account as proof of the consent for as long as your account is open and are deleted when your account is deleted. Your parent or guardian can withdraw the consent with the "withdraw consent" link in the e-mail sent to them; in that case your account is deactivated and placed in the deletion process. During the 30-day period in section 8, such an account can be restored only with your parent's or guardian's new consent: if you sign in and choose Restore my account, a new consent e-mail is sent to your parent or guardian.
When you reach the age of 16 according to your year of birth, the parental consent requirement ends; your parent's or guardian's e-mail address and the consent record continue to be kept with your account and are deleted when your account is deleted.
If you are 16 or over, you can open your account yourself. For purchases made through Google Play, age and parental controls are subject to the settings of your Google account.
12. What we do not do, and web technologies
We do not show advertising, we do not build profiles from your behaviour and we do not sell your personal data. Location, contacts and the camera are not used. No separate analytics, tracking or crash reporting tool is used. The fixed source tag added to IMSLP links (section 3) does not measure anything for us either.
Cookies
app.scorrenza.com uses only cookies that are strictly necessary for security and sessions. Advertising, analytics or tracking cookies, local storage and similar technologies are not used; for this reason no cookie consent is requested.
| Cookie | Page | Purpose | Duration |
|---|---|---|---|
__Host-scorrenza_delete_pre |
Account deletion | To verify that the form was sent from your browser (protection against forged requests) | Until the browser is closed; deleted when the operation ends |
__Host-scorrenza_delete_challenge |
Account deletion | To bind the verification code to your browser | 10 minutes; deleted when the operation ends |
These cookies are sent only over an encrypted connection, cannot be read by scripts on the page and are not attached to requests coming from other sites.
13. Changes to this policy, and language
The version and effective date of the policy are shown at the top of the text. When we make a material change that affects the processing of your personal data, we inform you at least 2 weeks before the change takes effect, by a notice in the app and by a notification sent to the e-mail address registered to your account; you are asked to confirm again in the app that you have read the new version. For corrections that do not change the meaning, such as typing errors, no notice or new confirmation is requested; the version number and date are updated.
This policy has been prepared in Turkish, German, English, French and Italian. In the event of any conflict, inconsistency or difference of interpretation between the language versions, the Turkish text, which is subject to the legislation of the Republic of Türkiye, prevails.