Privacy Policy
Effective date: 5 March 2026
Data controller: Tolkku AI Oy
Orbiter is designed with privacy in mind. We collect essentially no personal data.
What the app collects
Orbiter does not require an account and does not track you.
In-app analytics
Orbiter collects anonymous, aggregate usage data to help us understand which features are most popular and improve the app. The following events are recorded:
- App launches (platform and version only)
- Listening session lengths
- Sequencer mode changes
- Use of the Edit view (settings panel)
- Randomisation actions
- Collaboration sessions (created or joined)
- Scene and instrument preset selections
- Root note, scale mode, and tempo (BPM) choices
- Whether MIDI output, MIDI input, or MIDI clock sync was used (once per session, not per action)
This data contains no personally identifiable information. No IP addresses, cookies, device identifiers, or fingerprinting data are stored. Events are sent to a Cloudflare Worker endpoint; the Worker does not log or store the sender's IP address. Data is retained according to the analytics provider's default policy (currently 90 days).
Collaboration
The collaboration feature uses ephemeral rooms. No data is persisted on our servers after the session ends. No account or login is required.
Website analytics
Orbiter uses Cloudflare Web Analytics, a privacy-first, cookieless analytics service. It collects only anonymized, aggregate page-view data. No cookies are set and no personally identifiable information (PII) is collected or stored.
Crash reporting
Orbiter does not include any crash-reporting SDK. On iOS and macOS, Apple may collect anonymized crash logs if you have opted in to share diagnostics with app developers in your device settings. On Android, Google Play may collect similar data. These are controlled entirely by your device settings and the respective platform privacy policies.
Third-party services
Beyond the platform-level crash reporting described above, Cloudflare Web Analytics on this website, and the in-app analytics described above, Orbiter does not use any third-party services that collect user data.
Data sharing
We do not sell, rent, or share any personal data with third parties. There is no personal data to share.
Children's privacy
Because Orbiter does not collect any personal data from anyone, no special provisions for children are necessary.
Your rights under GDPR
If you are in the European Economic Area, you have the right to:
- Access any personal data we hold about you
- Rectify inaccurate personal data
- Erase your personal data
- Restrict processing of your personal data
- Data portability — receive your data in a portable format
- Object to processing of your personal data
Since we do not collect or store any personal data, there is nothing to access, correct, or delete. If you have questions or wish to exercise any of these rights, please contact us.
Contact
For privacy inquiries, contact us at [email protected].
Changes to this policy
We may update this privacy policy from time to time. The effective date at the top of this page indicates when the policy was last revised.