Your data, plainly

Privacy Policy.

Last updated: 13 October 2026

Your voice never leaves your device. The game is free and needs no account. We set no cookies and run no analytics.

This policy explains what happens to your personal data when you use Voice Kata at voicekata.com. It is written to the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Romanian data protection law. If you want the short version, the three sentences above are it. The rest is the detail.

1. Who is responsible

The data controller for your personal data is:

2. Your voice

This is the part that matters most, so it comes first.

Everything happens in your browser. When you start a game, your browser asks for microphone permission. The pitch detection that drives the game runs entirely inside your browser, using a small model your browser downloads once from our server. Your microphone audio is analysed on your device and discarded as it is analysed. It is never sent to our server or to anyone else. This is true in both singing modes.

We do not record you. No recording of your voice is stored, kept, shared, sold, or used to train any model. If that ever changes, this policy will change first, and the feature will be something you choose to turn on.

This is not biometric data. Your voice is personal data, but Voice Kata does not use it to work out who you are. It only measures whether you are holding a note, and which one. It is therefore ordinary personal data under Article 6 of the GDPR, not special-category biometric data under Article 9.

Your audio devices. To decide whether echo cancellation is needed, the game reads the names of your audio devices (for example “AirPods”) through your browser. That check happens on your device. The device names are not sent anywhere.

You can withdraw microphone permission at any time in your browser settings. The game cannot run without it.

3. What your browser stores

The game needs no account. Your settings and progress live in your own browser’s local storage:

• spellsinger-range — the vocal range you chose;
• voicekata-pitch-mode — “Just say ahh” or “Match the note”;
• spellsinger-garden-v1 — the throwables you have collected;
• vt-pitch-model — which pitch model the game loads;
• voicekata-intro-seen — that you have closed the controls card;
• voicekata-level — the level you chose (Coast or City walk);
• vk-motion — whether you paused the motion on the home page.

This never leaves your device and we cannot read it. Clearing site data for voicekata.com in your browser erases it, and the game starts fresh.

4. What our server sees

Like any website, our web server keeps standard access logs: IP address, timestamp, requested path, referrer, and browser user-agent. We use them to keep the service running and secure, on the basis of our legitimate interest in operating and protecting it (Art. 6(1)(f)). They are kept for up to 30 days.

5. Cookies and analytics

Voice Kata sets no cookies. It runs no analytics script, no advertising tracker and no tracking pixel. The server access logs in section 4 are the only record of visits.

6. Third parties

Voice Kata carries no advertising trackers, shares nothing with advertisers, and does not sell personal data. Our fonts are served from our own server, so no font provider sees your visit.

7. How long things are kept

• Your voice — not kept. Discarded on your device as it is analysed.
• Your settings and progress — in your browser, until you clear them.
• Server access logs — up to 30 days.

8. Where your data goes

Our server is in the European Union. Cloudflare is a United States company, and requests your browser makes to it may be processed outside the EU under the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

9. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on legitimate interest.

In practice there is little to hand over: we hold no account, no email address, and nothing about your voice or your play. The only personal data we keep is the server access logs, for up to 30 days. To exercise any right, write to [email protected]. We answer within 30 days.

You also have the right to complain to the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), Bd. Gen. Gheorghe Magheru 28–30, Bucharest, dataprotection.ro, or to the authority of the EU country where you live.

10. Children

Voice Kata is not intended for children under 16.

11. Changes to this policy

If this policy changes, the “Last updated” date above changes with it. A change to what happens to your voice will be announced in the game before it takes effect.

12. Contact

Questions about this policy or your data: [email protected].

Terms of Service · Back to the practice