1. Who we are
This website is operated by Mandolin Balaji, based in the United Kingdom. It provides a Carnatic music notation player and related resources for students and music enthusiasts.
For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), Mandolin Balaji is the data controller. You can contact us at: mandolinbalaji.com/contact.
2. What personal data we collect
When you sign in with Google, we receive the following information from your Google account:
- Your display name
- Your email address
- A unique user identifier (UID) assigned by Google Firebase
We also collect activity data each time you use the player:
- Sign-in events (date and time)
- Songs you load or play (song name, raga, file name)
We do not collect payment information, location data, or any other personal data beyond the above.
3. Why we collect this data and our legal basis
We collect and process your data on the basis of legitimate interests (UK GDPR Article 6(1)(f)) to:
- Restrict access to the notation player to registered users only
- Understand how the tool is used so we can improve it
- Monitor for misuse or abuse of the service
We have balanced these interests against your privacy rights. Because the data collected is limited in scope, not used for profiling or advertising, and you can withdraw by signing out and requesting deletion, we consider our legitimate interests not to override your rights.
4. How we store your data
Your data is stored in Google Firebase (Firestore and Firebase Authentication), which is operated by Google LLC. Firebase infrastructure used for this service is based in the EU/EEA. Google Firebase complies with UK GDPR data transfer requirements via Standard Contractual Clauses.
We retain activity logs for as long as the service is active. If you request deletion of your data, we will remove it promptly (see Your Rights below).
5. Who we share your data with
We do not sell, rent, or share your personal data with third parties for marketing purposes. The only third-party service that processes your data is:
- Google Firebase — for authentication and activity log storage. Google's privacy policy: policies.google.com/privacy
6. Cookies and tracking
Firebase Authentication uses browser local storage and session cookies to keep you signed in. These are strictly necessary for the service to function and do not require separate consent under UK law.
We do not use advertising cookies, third-party analytics, or tracking pixels.
7. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — request deletion of your data
- Right to restriction — ask us to limit how we use your data
- Right to object — object to processing based on legitimate interests
- Right to data portability — receive your data in a machine-readable format
To exercise any of these rights, please contact us via mandolinbalaji.com/contact. We will respond within one calendar month.
8. Right to complain
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
9. Children's privacy
This service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this privacy policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the service after changes are posted constitutes acceptance of the updated policy.