Privacy policy

Free individual practice

Students can practice without an account or a name. Answers and progress in individual practice are handled in the browser and are not sent to a teacher dashboard. Closing or reloading the page ends that practice session.

Teacher assignments

A student opening an assignment link enters a name or student code and chooses a practice or quiz mode. Note Lab saves that entry, the selected instrument, the student’s answers and progress, the assignment, and session times as the student works. This can include a session that has not yet been submitted. When the student submits, the teacher’s private dashboard shows the result, including accuracy and missed notes. Teachers can download their results as a CSV file.

Students should enter the name or code their teacher requests. They do not need to provide an email address, phone number, or account password.

Teacher information

The owner can create a teacher panel using a teacher’s name and optional school or ensemble. Teachers create assignment titles and settings. Their private access links are used to open their dashboards; Note Lab stores a hash of each additional teacher’s access key. Anyone who obtains a full private teacher link may be able to view that teacher’s assignments and submitted results, so teachers should keep it private.

Paid teacher access (Pro Beta)

For paid teacher access, Note Lab uses the purchasing teacher’s name and email to identify the teacher workspace, send sign-in links, and provide support. Stripe Managed Payments acts as the merchant of record, handling checkout, applicable sales tax/VAT, fraud screening and payment disputes. Stripe and Link may provide receipts, billing support and subscription management. Note Lab remains responsible for the teacher workspace, sign-in and student data. Note Lab stores Stripe customer, subscription and checkout identifiers, paid-access dates and limited billing-event records; it does not store full payment-card numbers. Student names, answers and results are not included in our payment or sign-in email requests.

Private sign-in links expire after 30 minutes and work once. Note Lab stores a hash of each link token and delivery status. A successful sign-in creates a necessary secure cookie lasting up to seven days; signing out revokes that session. Expired session records are removed during subsequent sign-ins. Sign-in emails are separate from the optional mailing list. Sign-in emails are delivered through Resend using our dedicated notify.podiumtools.dev sending domain. Resend receives the teacher’s email address and the sign-in message, including its temporary private link, to deliver the email. We have not enabled click or open tracking for these messages. Student names, answers and results are not sent to Resend.

Cancellation preserves access through the paid period unless refunded or subject to a payment dispute or support restriction. After ordinary expiry and any applicable failed-payment grace, teachers have 90 days to view and export results while existing student links continue working. Assignment creation and editing are disabled. A confirmed full refund of the current paid period ends editing and starts the same 90-day results, export and existing-student-link window. A formal payment dispute pauses editing and automatic extensions, with that window measured from the original pause. A dispute win restores access only when current paid access is verified; a loss does not restart the window. Other independently paid periods and restrictions are assessed separately. After the applicable window, results and links become unavailable; they are not automatically deleted. Contact support for billing, account correction, or deletion help.

Teacher dashboard access

After successful active teacher-dashboard access, Note Lab records the latest observed access time against that teacher’s existing account. Only the owner can view this operational timestamp. We do not store an access history, private link, raw key, IP address, browser fingerprint, student information or email-open data for this feature. Refreshes and background requests do not advance it, and previously unobserved accounts have no recorded time. This shows authenticated dashboard access, not proof that a person read the page. Expired read/export access is excluded. The latest timestamp remains with the teacher identity until a verified account-deletion request is handled; it is separate from aggregate public-page counts and provider operational logs.

Question reports

In practice mode, anyone can flag a possible question or diagram mistake without an account. The report contains only canonical instrument, note/octave, activity, answer-option references, visual style and catalog version. We do not attach a student name, assignment or session identifier, score, private URL or answer history. Reporting requests omit cookies and the referring URL. Reports share the private beta-feedback inbox and its retention and AI-assisted triage practices described below. Shared short-lived report limits do not identify individual visitors. Provider operational request logs remain subject to the unverified periods described below. Quiz question reporting is not enabled.

Teacher beta feedback

Teachers can send bug reports and suggestions from their dashboard. We store the report type, summary, details, submission time and an internal teacher identifier. Reports are private and reviewed by the Note Lab team with AI assistance. Sanitized report summaries and work status may be copied to our private Notion planning workspace and development backlog. Please do not include student information, private access links or payment details. Feedback remains until a verified deletion request is handled; there is no automatic deletion schedule. Contact info@podiumtools.dev for help or a deletion request.

Teacher email updates

Educators can optionally join our email list for teacher-feature updates and news about Pro Beta. The signup form is provided by MailerLite, which processes the email address you enter and technical information associated with the signup and email delivery. We do not send student names, assignment results, or private teacher links to this mailing list. Signup is separate from student practice and does not create a student account or guarantee beta access. Confirm your subscription using the email you receive. You can unsubscribe through the link in any update or contact us for help.

Teacher tour and updates

We store whether a teacher dismissed the welcome tour and which published teacher updates they dismissed, scoped to that teacher account. These preferences do not include student information, reading time or click history. The browser may keep the same dismissal flags for the current tab session to avoid repeated popups if saving fails. Preferences remain until a verified deletion request is handled; no automatic expiry is implemented. Announcements are managed by the owner and are not shown in student practice or the public demo.

Public-page activity counts

When enabled, Note Lab counts views of the home, Pro offer and teacher-updates pages and successful handoffs to Stripe checkout. The browser sends only an activity label and a broad source group (direct, Facebook, search, email or other). We store daily aggregate counts in our existing hosting database, without analytics cookies, visitor IDs, IP addresses, full URLs, raw referrers, student names, answers or private access links. Assignment links are counted separately as described below. Private dashboard, sign-in, feedback and payment-confirmation pages are excluded from public-page counts. We respect browser Do Not Track and Global Privacy Control signals for these counts. Analytics requests omit cookies and the referring URL.

The owner can view 30 UTC calendar days of these approximate counts and aggregate counts of existing fulfilled checkouts. These do not identify unique visitors or link a visitor to a purchase. Older activity-count buckets are removed when the next accepted activity arrives; if collection stops, older buckets can remain until collection resumes or support removes them. Payment records follow their separate retention practices above. Hosting providers still process technical requests as described below; these safeguards do not establish their operational-log or recovery retention periods.

Assignment-opening counts

When activity collection is enabled, a successfully loaded assignment screen reports one opening when its tab becomes visible. The browser sends only the fixed label “assignment_open” and the fixed source “unattributed”; no assignment, teacher, student or session identifier, private URL, referrer, answer, score or contact information is sent with this counting request. The request omits cookies and the referring URL, and respects Do Not Track and Global Privacy Control. We store only daily aggregate totals in the same activity-count table, with the same 30 UTC-day reporting window and cleanup behavior described above. These counters do not create accounts, use analytics cookies, group devices by IP, or create a per-visitor history.

Refreshes, reopens, teacher checks and scripted activity can increase the totals; privacy preferences, blocked requests and counting failures can reduce them. These are approximate openings, not unique students, assignment starts or submissions. The owner can view these totals; no new public or teacher-facing report listing is added. Counting failure does not block assignment work. The assignment/results records and provider operational request logs remain separate, under the practices and unresolved provider-retention limits elsewhere in this notice.

How information is used and shared

We use assignment information to deliver practice and quizzes, save progress, display results to the assigning teacher, and operate and protect Note Lab. We do not use student answers or names for advertising, and Note Lab has no ads on student pages. We do not sell student information.

The teacher who created an assignment can see its submitted results. The site’s hosting and storage providers process information needed to operate and protect the service. Their operational request logs can include the requested path and query identifiers, IP address, browser details, time of access, and request headers such as a necessary session cookie or authorization header. Those technical records are separate from the student results displayed in the teacher dashboard and are available only through restricted provider/owner tools. External fingering and keyboard reference links lead to other websites with their own privacy practices.

Keeping and deleting information

Assignments and their sessions remain in the site’s database until the teacher deletes the assignment or requests help with deletion. Deleting an assignment removes its saved student sessions and results from the active database and makes its student link stop working. A teacher may have downloaded a separate CSV copy before deletion. We do not currently have an automatic deletion schedule for assignments.

Active database deletion does not immediately remove copies in provider recovery backups or operational request logs. Separate teacher, sign-in delivery and billing reconciliation records may remain to support access, prevent duplicate payment processing, resolve disputes and meet applicable obligations; deleting an assignment does not delete those records. The production host’s applicable log-retention and recovery periods are still being verified. We have not confirmed when deleted records age out of recovery copies or operational logs, and cannot promise a recovery period or immediate removal from those copies. Resend documents a 30-day retention period for email and log data on our current Free plan. Stripe retains payment information under its own legal and operational requirements. Contact us for a verified deletion request so we can identify the relevant records, provider-held copies and any required retention.

Schools, families, and student requests

Note Lab is intended for educational use. Schools and teachers should review the service before assigning it to students, including any school requirements for student privacy. A parent, guardian, student, or school representative can contact us about access, correction, or deletion of assignment information. We may need to work with the assigning teacher or school to verify and locate the record.

Changes and contact

We may update this policy when the service changes. The effective date above shows the current version. For privacy questions or requests, email info@podiumtools.dev.