SetForge Privacy Policy
Last updated: 8 September 2026
SetForge is an offline-first app for musicians: your songs, setlists and sessions. This policy explains what we collect, why, and what you can do about it. It is written for the UK GDPR and the Data Protection Act 2018.
1. Who is responsible for your data
The data controller is Malcolm Lane (trading as SetForge). For anything in this policy — including access, deletion or complaints — contact mal@setforgemusic.com.
2. What we collect
Account information
- Your email address, used to sign in and to send password and email-change confirmations.
- Your password, stored only as a salted hash — we never see or store the password itself.
- A display name, which other members of your band see instead of your account ID.
Content you create
- Songs — title, artist, key, tempo, duration, chord and lyric text, tags, and where you imported them from.
- Setlists, the songs in them, and their order.
- Per-song capo and key settings, annotations, and practice counts and dates.
- Bands you create or join, and their membership.
- Sessions (dates and optional venue names) shared with a band.
- Running orders for events — the name of each performer and how long they are playing. A performer named here does not need a SetForge account.
- Backing tracks you upload, stored as audio files.
Details given at a venue
A host running an event can put a tablet at the venue so performers check in or add themselves to the running order on arrival. If you do that, we collect:
- The name you type, which appears in that event's running order.
- The time you checked in.
- Your email address — only if you choose to give it. It is optional, and leaving it blank does not affect your slot.
An address given this way is used only to contact you about that event, by the host running it. It is not added to any mailing list, and only the host and their group's leader can see it — the other performers cannot.
Payment information (Premium subscribers only)
- Your card details are entered directly into Stripe's hosted checkout — we never see or store your full card number.
- We store a Stripe customer ID, subscription ID, plan, status, and renewal/cancellation date, so the app knows what you're entitled to.
Security and operational records
- An audit log of privileged actions on your account (for example, being added to or removed from a band), kept so we can investigate misuse.
- Counters that rate-limit the song-import and duration-lookup features, so one account cannot exhaust a shared third-party quota for everyone.
- Standard web server logs from our hosting provider, which include IP addresses.
Optional: crash reports
If crash reporting is enabled on a build, unexpected errors are reported so they can be fixed. Your email address, IP address, account ID and display name are stripped before the report is sent, and email addresses found in error text are redacted.
Optional: analytics and session recordings
Only if you switch it on under Settings → Analytics. Nothing is collected until you do, and you can switch it off at any time. When enabled, we record how the app is used and replay-style recordings of your screen, so we can see where the app is confusing or broken.
The recordings deliberately hide:
- everything you type into any field, including passwords;
- your account email address;
- the names of your band members;
- song lyrics and chord text, wherever they appear.
Analytics are linked to your account identifier — the random ID your account already has, never your name or email address — so that using SetForge on your phone and your laptop counts as one person rather than two. Signing out unlinks it. We do not use analytics for advertising or profiling, and we do not sell this or any other data.
3. Why we are allowed to use it
| Data | Reason | Legal basis |
|---|---|---|
| Account and content | To provide the app you signed up for | Performance of a contract |
| Payment information | To bill Premium subscriptions and administer cancellations/refunds | Performance of a contract |
| Audit log, rate limits, server logs | Security, abuse prevention, keeping the service running | Legitimate interests |
| Crash reports | Finding and fixing faults | Legitimate interests |
| Analytics and session recordings | Understanding how the app is used | Consent — and only consent |
4. Who else processes it
We use the following providers. They process data on our instructions and do not use it for their own purposes.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, sign-in, file storage | London, UK (eu-west-2) |
| PowerSync (JourneyApps) | Syncing your data between your devices and the database | EU or US, on AWS, depending on deployment configuration — see PowerSync's sub-processor list |
| Vercel | Hosting and content delivery | Global edge network |
| Stripe (Stripe Payments Europe Ltd) | Payment processing and subscription billing | Ireland |
| PostHog | Analytics and session recordings — only with your consent | Frankfurt, Germany (EU Cloud) |
| Sentry | Crash reports | Frankfurt, Germany (EU region) |
When you use import features
If you import a chord sheet from Ultimate Guitar, the app requests the page address you gave it. If you look up a song's duration, the song's title and artist are sent to MusicBrainz. Your identity is not sent to either service. Both are independent third parties with their own privacy policies.
5. What is stored on your device
SetForge keeps a copy of your songbook on your device so it works offline. It also stores your sign-in token and, if you enabled it, your analytics choice. These are essential to the app working, not advertising cookies. Settings → This device → Sign out and clear offline data removes the local copy (as does clearing your browser storage for this site); your data remains in your account.
6. How long we keep it
- Your content — until you delete it, or delete your account.
- Your account — deleting it under Profile → Danger zone permanently removes your songs, setlists and band memberships. This cannot be undone.
- Audit log and rate-limit records — 12 months.
- Email addresses given at a venue — 12 months, then deleted automatically. Deleting the running-order slot deletes the address with it, at once.
- Payment records — kept for 6 years after your last transaction, as UK tax law requires for financial records.
- Analytics events — 12 months. Session recordings — 30 days.
7. Your rights
Under UK GDPR you can ask us to:
- give you a copy of your data — you can also do this yourself, at any time, with Settings → Backup & Restore, which exports your songs as standard ChordPro files;
- correct anything inaccurate;
- delete your data — available directly under Profile → Danger zone;
- restrict or object to how we use it;
- withdraw consent for analytics, at any time, by unticking the box in Settings → Analytics. Withdrawing consent does not affect anything collected beforehand.
We will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Security
Data is encrypted in transit. Every database table enforces row-level security, so one account cannot read another's songs, setlists or bands. Privileged actions are logged. No system is perfectly secure, but we take this seriously and fix what we find.
9. Children
SetForge is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes
If we change this policy we will update the date at the top. If a change materially affects how we use your data, we will tell you in the app before it takes effect.