Privacy Policy

Who operates the service

Ocarina Workshop is operated by Mitchell Magat in Michigan, United States. Privacy questions and requests may be sent to mitchellmagat@gmail.com.

Information collected

• Account identifiers and email information provided through authentication services.
• One-way hashes of normalized email addresses and network IP addresses used to enforce one-per-person and one-per-network promotional credit limits. Raw IP addresses are not stored in the promotion-claim record.
• MIDI files, song titles, instructions, permission selections, and generated arrangements.
• Credit purchases, balances, refunds, and transaction identifiers. Payment-card details are processed by Stripe and are not stored by Ocarina Workshop.
• Contact messages, technical logs, security events, and service diagnostics.

How information is used

Information is used to provide arrangements, authenticate users, process payments, maintain downloads, prevent abuse, respond to requests, enforce rights confirmations, improve reliability, and comply with legal obligations.

Service providers

Information may be processed by Replit infrastructure and database services, Clerk for authentication, Stripe for payment processing, and configured artificial-intelligence providers such as Google Gemini, OpenAI, Anthropic, or OpenRouter when needed to perform the requested operation. These providers process information under their own terms and privacy practices.

Retention

Raw transient upload payloads are removed after processing or abandonment according to operational schedules. Generated scores, source metadata, permission records, purchase records, account records, contact messages, security logs, and backups may be retained as needed to provide the service, document transactions and authorization, resolve disputes, prevent abuse, and meet legal obligations. Download availability may end before the underlying record is deleted.

Sharing

Information is not sold. It may be disclosed to service providers, professional advisers, authorities when legally required, or another operator in connection with a business transfer, subject to applicable law.

Security and international processing

Reasonable administrative and technical measures are used, but no online system is completely secure. Providers may process information outside your state or country.

Your choices and requests

You may request access, correction, or deletion of personal information by emailing mitchellmagat@gmail.com. Some transaction, consent, fraud-prevention, copyright, and legal records may be retained where necessary or required. Identity verification may be required.

Cookies and age

The service uses cookies or similar storage for authentication, security, sessions, and checkout continuity. The service is intended only for people age 18 or older.

Changes

This policy may be updated as the service changes. The effective date identifies the current version, and material changes may be presented for renewed acknowledgment.