Skip to content
MusicXML Tools

Privacy policy

Last updated: 25 October 2026

This policy explains how we handle personal data on musicxml.tools.

Who is responsible

The controller is PhonicScore GmbH, Assmayergasse 26/3, 1120 Vienna, Austria. For anything about your data, write to office@phonicscore.com.

Your files

All our tools run in your browser. A file you open is read and processed on your computer and is not uploaded to us or anyone else. We cannot see it and do not store it. If a tool ever needs our server or another service, its page says so before you choose a file, and this policy will name that service.

The player and the MP3 converter load their instrument sounds from musicxml.tools. Our server fetches them from midi-js-soundfonts on GitHub Pages, so GitHub sees our server, not you.

If you open a score through a link such as musicxml.tools/viewer/?url=..., your browser loads that file directly from the address in the link. The server at that address sees your request like any other visit; we don’t.

Visiting musicxml.tools

  • The site is served by Cloudflare. To deliver a page and protect the site from attacks, Cloudflare processes your IP address, the time, the page requested and details of your browser. Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).
  • The site sets no cookies of its own and uses no tracking or advertising.

Contacting us

When you write to us, we use your message and contact details to answer. Legal basis: our legitimate interest in answering (Art. 6(1)(f) GDPR).

Who receives data

  • Cloudflare, Inc., USA: hosting and delivery of this site, as our processor.
  • Our tax advisers, auditors and lawyers, and authorities, where the law requires.

We do not sell personal data.

Transfers outside the EU

Cloudflare may process data in the USA. These transfers rest on the EU-US Data Privacy Framework where the company is certified under it, and otherwise on the EU Standard Contractual Clauses.

How long we keep data

  • Emails to us: as long as needed to deal with your request.
  • Cloudflare’s request data: as briefly as Cloudflare needs it to deliver and protect the site.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Write to office@phonicscore.com; we answer within one month. You can also complain to a data protection authority. In Austria that is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.

Changes

We update this policy when the site or the law changes, for example when the newsletter and accounts arrive. The date at the top shows the current version.