Privacy policy

Information we collect

When you create an account, we collect your first and last name, email address, school name, school address, and a password. We store a salted password hash instead of a readable password. We also store an account identifier and account creation date.

When you save a mix, we store the finished audio recording, its title, file size, duration, creation date, and the account that owns it. Account details and saved recordings are not public pages.

The website and hosting infrastructure may receive technical information such as your IP address, browser information, request time, and requested URL for operation, logging, and security. We use recent connection information to limit repeated sign-in attempts.

Your music and recordings

Choosing a song file loads it into your browser for mixing. Preview and mix generation happen on your device. Selected source songs are not uploaded to the recording library. A finished recording is uploaded to the server only when you choose “Save to my recordings.” Downloading a generated mix saves the file to your device without saving that audio in the library.

Finished recordings include the music and audio you chose to combine. Avoid including sensitive personal or student information in recordings or titles.

If you submit a privacy request, we collect the contact email, request type, message, and submission date. The administrator can view these requests to review and respond. They are stored on the same server and are not public. Do not send passwords in a privacy request.

How we use information

We use account and school information to identify your account, support school use of the service, and provide access to your private recording library. We use sign-in and technical information to maintain sessions, operate the service, troubleshoot problems, and protect access. We use saved recordings to provide your library, playback, and downloads.

Hosting and access

Accounts and saved recordings are stored on the service’s Bluehost virtual private server. The administrator can view account names, email addresses, school names, school addresses, and registration dates in an admin-only user list. Other accounts cannot view that list. The operator and hosting providers may access information as needed to operate, maintain, or secure the service. Access may also be required by applicable legal processes. We do not make account information or recordings available in public search results.

The current application does not sell personal information or send it to advertising networks. It does not include advertising trackers or third-party analytics scripts.

Password recovery uses an emailed, one-time verification code. Codes expire after 10 minutes, are stored as keyed hashes, and allow a limited number of attempts. After verification, a temporary recovery cookie authorizes setting a new password. Password changes end older signed-in sessions. Recovery emails are sent through the VPS mail service and processed by your email provider. Support emails are forwarded through Namecheap to the administrator’s Gmail inbox, so those providers also process support messages.

School address suggestions

When you focus the school address field, the browser loads Google Maps Places to offer address suggestions. The address or school search text you type is sent directly to Google, along with technical information such as your IP address and the website origin. Your name, email, password, and music are not included in these address search requests. Selecting a suggestion fills the school address field; the address is saved to your account only when you submit the account or profile form. You can also type the address manually. Google processes these requests under its Privacy Policy. Address suggestions are subject to the Google Maps Terms of Service.

Cookies

Signing in sets an essential session cookie named pacer_session. It identifies your signed-in session and expires after seven days unless you sign out earlier. In the public HTTPS service, the cookie is restricted to secure connections and cannot be read by page scripts. Recovery also uses an essential, secure pacer_recovery cookie that expires after 10 minutes or is removed when the new password is saved. Blocking these cookies prevents account and recovery functions.

Retention and choices

Account information and saved recordings remain stored while your account and library are kept by the service. You can delete a saved recording from your library after confirming the deletion. This removes its library entry and online audio file and frees its storage allowance. There is currently no automatic expiration for saved recordings or privacy requests. Copies may remain in hosting backups according to the hosting provider’s backup practices. You can preview without creating an account, choose not to save recordings, and sign out to remove the browser’s session cookie.

Email support@myfitgram.com or use the privacy contact form below for questions or requests to delete your account or recordings. No account is required to submit a request. We may need to verify account ownership before carrying out a deletion. Deletion requests are reviewed by the administrator; sending a request does not immediately delete data.

School and student use

Account registration is intended for educators and other authorized school staff. The registration form does not ask for student names, student scores, birth dates, or health information. Students should use the service through an educator rather than submitting personal information in an account or recording.

Security

The service uses password hashing, HTTPS when publicly hosted, restricted session cookies, and account checks for saved recordings. These measures reduce risk; no storage or transmission method can guarantee absolute security.

Changes

We will update this page when the service’s information practices change and revise the date above. Read the current policy before providing information or saving a recording.

Contact us about privacy