Privacy Policy

Last updated: June,30 2026

This policy explains how the Free-scores.com website and application collect, use and protect users' personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law.

1. Data controller

The data controller is:

• Publisher: Fortemusica (SARL)
• Company registration (SIRET): 99466830900010
• VAT number: FR50994668309
• Website: www.fortemusica.com
• Contact (personal data): [email protected]

2. Data we collect

2.1 Account data (members)

When creating an account in the members area: email address, username, password (stored in encrypted/hashed form) and the profile information you provide. For contributing members: the sheet music, audio files, videos and metadata you publish.

2.2 Browsing and technical data

IP address, browser and device type, pages viewed, timestamps, and approximate geolocation (country) derived from the IP address. This data is used for the proper operation of the service and for security.

2.3 Cookies and trackers

See the Cookies and consent section below.

2.4 Payment data (website only)

If a Premium subscription is taken out on the website, payment is processed by our provider Stripe. We do not store card numbers, which are handled directly by Stripe. The subscription is not offered for sale in the Android application.

3. Purposes and legal bases

4. Cookies and consent

The website uses cookies and similar technologies. The collection and management of your consent are handled by our consent management platform (CMP) Sirdata, compliant with the IAB Transparency and Consent Framework (TCF). You can change your choices at any time via the cookie management link on the website.

• Strictly necessary cookies: session, language, display preferences, security (bot protection). Exempt from consent.
• Advertising cookies: Google AdSense / Google Ad Manager, to display advertising. Subject to your consent.

For details of the cookies used and to manage your preferences, see our cookie policy.

5. Recipients and processors

We use providers that may process data on our behalf:

We do not sell your personal data.

6. Transfers outside the European Union

Some providers (in particular Google, Cloudflare, Stripe) may process data outside the European Union. Such transfers are governed by appropriate safeguards (the European Commission's standard contractual clauses or equivalent mechanisms).

7. Retention periods

• Account data: kept for the lifetime of the account. An account with no login for 3 years is considered inactive and is deleted or anonymised. Following a deletion request, data is erased within 30 days (backups being purged within a maximum of 3 months).
• Technical and security logs: 12 months.
• Billing data: statutory accounting retention period (generally 10 years).

8. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability regarding your data, as well as the right to withdraw your consent at any time. To exercise them, contact us at [email protected].

You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the supervisory authority of your country of residence.

9. Security

We implement appropriate technical and organisational measures to protect your data (password hashing, secure HTTPS connections, bot protection, access controls).

10. Minors

The service is not intended for the intentional collection of data from children below the age required by applicable law without the consent of holders of parental authority.

11. Changes

This policy may be updated. Any change will be published on this page with an updated revision date.