Privacy policy
In short
- No account, sign-up, email, name, date of birth, school or location is asked for.
- No cookies, ads, analytics or behavioural tracking; pages make no requests to outside servers.
- Lesson progress, activities, worksheets and results are stored only in this browser (IndexedDB / localStorage); Melokta cannot access them.
- Result files, PDFs and JSON backups are only created when you download them and only shared in the way you choose.
- As with any website, the hosting service may keep technical access logs (see below).
Which data is where?
| Data | Where is it kept? | Who can access it? | For how long? |
|---|---|---|---|
| Technical access logs (IP address, date and time, address requested, browser details) | The hosting service’s servers | Hosting provider: [To be completed: hosting provider] | [To be completed: server log retention period] |
| Lesson and game progress (completed lessons, stars, points, dates) | Only this browser (IndexedDB / localStorage) | The person using the device; Melokta cannot access it | Until the user deletes it |
| Teacher activities and worksheets (title, description, tasks) | Only the teacher’s browser | The teacher; Melokta cannot access it | Until the user deletes it |
| Student results and the optional student code | The student’s browser; downloaded JSON / PDF file | The student; the teacher they send the file to | Until the user deletes it |
| Student results, codes and class group names in the teacher panel | Only the teacher’s browser | The teacher / school; Melokta cannot access it | Until the user deletes it |
| Appearance, language and instrument preferences | Only this browser | The person using the device | Until the user deletes it |
| Spoken instruction text (no personal data) | The device; the browser maker’s speech service if an online voice is used | Browser maker (online voice only) | Not kept by Melokta |
Records on your device
Melokta uses the browser’s local storage to work. These records are not encrypted: someone using the same device and browser profile can see them. If browser data is cleared, a private window is closed or another device is used, the records are not visible and cannot be recovered; there is no automatic sync between devices. The full list is on the Cookie policy page; you can view, back up and delete them on the My data page.
For teachers and schools
Student results and class groups imported in the teacher panel are kept on the teacher’s own device. We recommend nicknames or teacher-given codes instead of real names. A teacher or school that keeps and shares these records should follow their own institution’s data-protection rules. Melokta does not verify the identity behind results or provide exam security.
Children’s privacy
Melokta was designed for children aged 6–10 so that it collects no personal data. We recommend children use it with a teacher or parent. Countries set different ages and parental-consent rules for children (for example thresholds between 13 and 16 in EU member states, COPPA for under-13s in the US); Melokta does not assume a single age limit anywhere. Because no personal data is collected from children on a server, most of the consent processes in these rules may not apply to Melokta; a lawyer should confirm this assessment.
Browser features
- Spoken instructions use the browser’s speech synthesis. A voice installed on the device is chosen if there is one for the language; otherwise the browser’s online voice may be used, in which case the lesson sentence (no personal data) may go to the browser maker’s speech service. You can switch spoken instructions off on the lesson screen.
- MIDI keyboard: permission is only requested when you choose “Connect MIDI”; the notes you play are processed on the device.
- The microphone and camera are not used.
Hosting and server logs
The site is hosted by [To be completed: hosting provider]. To serve pages and keep them secure, the hosting service may keep technical access logs such as IP address, date and time, the address requested and browser details. Retention period of these logs: [To be completed: server log retention period]. Country where servers are located: [To be completed: server country]. Melokta’s own code neither creates nor reads these logs.
Data controller and your rights
Data controller: [To be completed: name of the data controller]. Contact: [To be completed: contact email]. For users in Turkey, details are in the Data protection notice. If you are in the EU/EEA or the UK, you may have rights under the GDPR / UK GDPR, including the right to complain to your data-protection authority. You manage the records on your device directly; because Melokta cannot access them, it cannot view, correct or delete them for you.
Changes
This text is a draft and should be reviewed by a lawyer before publication. Last updated: 2026-10-29.