About the analytics.

This site records request time, IP address, the browser or bot’s reported user agent, HTTP method, requested path, response status, and response time. These records help identify high-volume bots, investigate errors, and protect the site.

It also keeps daily totals for pages served, API requests, plays, and saved arrangements. Requests can include repeat visits and automated traffic. An IP address or a claimed user agent does not establish a person’s identity.

Logs are retained indefinitely at the site owner’s request. They are stored in a local SQLite database on the server and continuously backed up to a private Cloudflare R2 bucket with automatic backup deletion disabled. The traffic dashboard requires authentication.

The application does not store query strings, authorization headers, request bodies, or tracking cookies in its request log. Security logging applies to requests regardless of browser tracking preferences. Fly.io and Cloudflare also operate the hosting and backup infrastructure.

Saving a musical arrangement publishes its parameters, creation time, and optional parent link. It does not publish the IP address or user agent associated with the request. Saved arrangements have permanent public links.