Octave & Arpège — 4 rue de Saint-Petersbourg 75008 Paris · contact@octave-et-arpege.fr
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Email address | Identify your account and let you sign back in | Performance of the service | As long as the account exists |
| Password | Never stored in clear text: only an irreversible hash (scrypt) is kept | Performance of the service | As long as the account exists |
| Works played, wishlist, work plan | Estimate your level and suggest suitable repertoire | Performance of the service | As long as the account exists |
| Instrument and language | Adapt the catalogue and the display | Performance of the service | As long as the account exists |
| Feedback on a score or a recording | Fix catalogue errors; attached to a random token, not to an identity | Legitimate interest | 13 months |
Two cookies in total, both strictly functional — therefore exempt from prior consent. The first keeps your session once you are signed in. The second, set only if you vote on an entry, prevents the same feedback being counted twice; it contains nothing but a random number — no email, no IP address, no browser fingerprint. If you neither vote nor sign in, you leave with no cookie at all.
Nobody, apart from the hosting provider that runs the site and its database inside the European Union. No advertising subprocessor, no data broker. Outbound links to IMSLP, YouTube and Spotify only fire if you click them: no request is sent to them behind your back when a page loads.
You may request access to your data, its correction, its deletion, its portability, or object to its processing. Write to the contact address above: the request is handled within one month. Deleting an account erases the history, wishlist and work plan attached to it.
If an answer does not satisfy you, you may lodge a complaint with the CNIL, the French data protection authority.
Last updated : 2026-08-23