Privacy Policy

Music Tree Player · Updated October 16, 2026

Your local songs stay on your device. Online account, purchase and backup features process only the information needed to provide those features.

What does this cover?
This policy covers Music Tree Player and its optional account, purchase, backup and community services. The Windows player stores songs and settings locally and does not require an account or purchase. PC downloads and MTPC export are temporarily unavailable during maintenance.

The app and its online service are operated by Music Tree / Peter Kim (dad_piano). Local import, song selection and instrument playback do not require an account. We do not sell personal information or include advertising or behavioral analytics SDKs in the app.

1. Information used by each feature

Local songs and playback

Imported song files, titles, library entries, instrument positions and settings are stored on your device. MIDI conversion and previews of local songs run on the device. Community previews download a server-rendered audio excerpt of up to 30 seconds. The app does not automatically upload your song library or scan unrelated files.

Google sign-in

Google verifies your identity. Our service temporarily receives a Google ID token, including your account identifier and email, to complete sign-in. It stores a protected account identifier, creation time and hashed session references. The ID token is not saved on the server. Your email and session are kept in the app's private storage to display your signed-in account and authenticate requests. We do not receive your Google password or access your Gmail, contacts or Google Drive.

Purchases and restoration

Google Play handles payment. The app sends the product ID and purchase token to our service for verification with Google. We keep a hashed receipt reference, product/entitlement identifiers, account association, acknowledgement state and update time. Raw purchase tokens are not saved in the server database or application logs. The app keeps its verified receipt in private storage for restoration and backup access. We do not receive card numbers or bank credentials.

Private song backup

When you choose Back up my songs, the app uploads supported song copies, filenames, file hashes, sizes and backup times to the Music Tree server, linked to your app account. This is private storage on our operator-managed Synology server, not Google Drive and not public sharing. Restore downloads your account's saved files and preserves existing local songs. Supported private formats are MTREE, music-only MCR, MTPC and MIDI (.mid/.midi). The limit is 100 files / 50 MiB per account and 1 MiB per file. MTREE can be restored to Songs; other formats can be downloaded as their original files.

Community scores and nicknames

When you open account controls, the service assigns a unique public nickname, which you can change once to a unique name containing 2–8 English letters or digits. The fixed operator name is reserved. If you choose to share a score, we store its musical notes, title, composer/description, rights confirmation, nickname, random creator ID and publication time. We normalize the notes and render an audio excerpt. The nickname, metadata and audio are publicly accessible; Pro users can download the shared score. Your Google email is not included in the public catalog. Do not put private information in public fields. See the sharing terms.

Reports, blocks and moderation

Reports store a score reference, reason, hashed reporter identity, time, whether a verified Pro purchase counts toward automatic hiding, and resolution status. Creator blocks are stored locally and, when signed in, with your account. Four distinct verified Pro reports temporarily hide a score. Authorized administrators can review reported or hidden content and rights statements, restore a score, or confirm an upload ban. We keep decision records and content fingerprints to prevent re-uploading held material. Reporter emails are not shown to uploaders. Administration is performed through a separate server-management console; app accounts have no administrative controls. Reports are limited to 3 per account per rolling 24 hours.

Connection and support information

Servers and service providers necessarily process network addresses and connection information. Our API uses hourly keyed address hashes in memory for rate limits and does not log request bodies, song contents, raw IP addresses or authentication/payment tokens. Hosting providers may keep their own security and access records. If you contact support, we receive the contact details and message you send.

2. App permissions

Accessibility: sends instrument-key touches only after you start playback. It does not read or upload game screen content, typed text or other apps' content.
Display over other apps: shows the floating player controls.
Foreground service and notifications: keeps playback visible and controllable while you use a game.
Internet: connects online-enabled builds to sign-in, purchase verification, catalog/download and private backup services.

You choose files through Android's file picker. You can disable accessibility and overlay permissions in Android settings. The app excludes its private files, sessions and receipt cache from Android automatic backup and device transfer.

3. Providers and security

Google provides sign-in and Google Play payments. Cloudflare provides the secure API connection and traffic protection. Cloudflare hosts this website; the Music Tree API and private backups run on our Synology server. Providers may process information internationally under their own policies.

API connections use HTTPS and account authorization. Private backups are not end-to-end encrypted against the operator; authorized server administration can access stored data. Access restrictions and bounded file checks reduce risk, but no service can promise absolute security. Optional YouTube videos and external links such as SociaBuzz and Ko-fi have their own privacy practices. This policy page itself uses no tracking scripts or login cookies.

4. Retention

Account records and private song backups are kept while you use the account, until you request deletion. Signing out or uninstalling the app does not delete server backups. Sessions expire after 30 days; sign-out revokes the current session and account deletion revokes all sessions. Sign-in challenges expire after five minutes.

Account deletion removes the active account, private backups, your shared files and audio, public nickname and associated creator-block records, and disconnects purchase history. Existing copies downloaded by others cannot be recalled. Minimal hashed reporter/decision references, content fingerprints and confirmed upload-ban identifiers may remain for service-abuse prevention while the service is supported; a ban continues if the same Google account signs up again. These retained moderation records do not contain your Google email or private backup files. Minimal hashed receipt/product records remain without the account association for purchase replay prevention and restoration while the product is supported. Google retains its own purchase and payment records. A minimal hashed account identifier and cooldown expiry are kept to prevent re-registration for 7 days after deletion. Support messages are kept only as needed to resolve the request and any applicable legal obligations.

5. Delete or request access to your data

In online-enabled versions, open Settings or Find scores → account icon → Delete account. Read the final warning, tick the confirmation box and confirm deletion. App deletion is processed directly without administrator approval. Account controls are free; no Pro purchase is required. The same Google account can rejoin after 7 days. The operator’s reserved service account has no in-app deletion control; support remains available. Save any songs you want to keep before deleting the account.

You can also request deletion without installing the app:

Request account deletion

Deletion does not delete your Google account, refund a purchase, or remotely erase local/exported files. Remove local files from Songs or Android storage; uninstalling removes the app's private local data. To request access, correction or deletion of support information, contact us below. We may need to verify account ownership before handling a request.

6. Children and changes

The app is not directed at children under 16. If you believe a child has provided personal information, contact us to request removal. Material changes to this policy will be posted here with an updated date before the relevant new processing begins.

7. Contact

Music Tree / dad_piano
Email: ipu00@naver.com