Square Harmonics Tone Explorer

Privacy Policy

Square Harmonics: Tone Explorer and Namamp. Effective date: 5 October 2026. Last updated: 5 October 2026.

This policy explains what personal data Square Harmonics (“we”, “us”) handles in:

The developer is Square Harmonics. Contact: info@squareharmonics.com.

In short

Google user data

This section covers the information Tone Explorer and Namamp receive from Google when you choose “Sign in with Google”. Signing in is optional: both products work without it.

What we access. We request only three Google scopes: openid, email and profile. From Google we receive:

Nothing else. We do not request or receive your contacts, Google Drive, Gmail, Calendar, Photos, YouTube activity or any other Google data. We read these details once, from the sign-in token Google returns, and we do not keep Google access tokens or refresh tokens, so we cannot reach your Google account afterwards.

How we use it. Only to create your Square Harmonics account and sign you in to it, to show which account is signed in (your name or initials and your email address), and to sync your saved chains between Tone Explorer and the Namamp app. We do not use Google user data for advertising, we do not use it to build a profile of you, we do not sell it, and we do not use it to develop, improve or train artificial intelligence or machine learning models. We do not send you marketing email. No person reads your Google user data unless you ask us to (for example, in a support or deletion request), or it is needed for security or to comply with the law.

Storage and protection. These details are stored in our account database on servers we run ourselves, in Brazil, kept apart from the public catalogue. They travel only over encrypted connections (HTTPS). Sign-in sessions are stored on our server only as one-way hashes of the session token, never as the token itself, and only the developer can access the servers.

Sharing. We do not sell, rent, transfer or share Google user data with third parties. The only other parties that handle it are the infrastructure providers named in Who else is involved, acting as our service providers: Cloudflare carries the encrypted traffic to *.squareharmonics.com, and Amazon Web Services relays it to our servers without decrypting it. We may disclose information if the law requires it.

Retention and deletion. We keep these details for as long as your account exists; they are refreshed each time you sign in. To delete your account and all its data, email info@squareharmonics.com as described in Deleting your data; we delete it within 30 days. You can also remove Square Harmonics’ access to your Google account at any time at https://myaccount.google.com/permissions. That stops future sign-ins with Google; it does not by itself delete the account we hold, so email us if you also want that deleted.

Limited Use. Square Harmonics’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we collect and why

Google sign-in (optional). If you sign in, Google tells us your Google account ID, email address, name and the web address of your profile picture. We ask only for this basic profile. We get no access to your Gmail, Drive, contacts or anything else. We use these details to create your account, recognise you when you come back, show which account is signed in, and sync your chains. We do not send marketing email.

Sign-in sessions. Once you are signed in, your browser (in a cookie) or the app keeps a random sign-in token. Our server stores only a scrambled one-way hash of it, with the times it was created, last used and will expire.

Chains you save to your account. A chain is the name you give it and its contents: up to five TONE3000 captures or impulse responses (their IDs, titles, creator names and links), your knob settings, gate and EQ settings, and when it was last changed. We store chains so the same list appears on every device where you are signed in. Other users cannot see them.

Live audio. Namamp uses your microphone or USB audio input, and the Tone Explorer player can use your browser’s audio input. In both, the sound is processed in real time on your device to produce the amp sound and the tuner. It is not recorded, stored or uploaded.

Searching and downloading tones. When you search or browse, your search words and filters go to our server so it can return results. When you load a capture, our server sends you its file, which it gets from TONE3000. These requests are not linked to your account, and we keep no search history.

Technical logs. Like most online services, our servers and network providers keep standard request logs: IP address, date and time, the address requested (which can include search words), the result, and the browser or app type. We use them only to run, secure and fix the service, never to profile you. They are deleted automatically after a short time. Sign-in tokens and email addresses are kept out of our logs.

What stays on your device

Website. Three cookies, all needed for sign-in and none used for tracking:

The browser also keeps your chains when you are signed out, the chain you are working on, your player settings (such as the audio devices you chose), downloaded capture files, and small display preferences. Clearing this site’s data in your browser removes all of it.

Namamp. The app keeps your chains, downloaded captures and IR files, your settings, your sign-in token, and, if you enter one, your personal TONE3000 API key. It also keeps a backup of your library in a “NAMAMP” folder in your phone’s Documents. The sign-in token and the TONE3000 key are excluded from Android backup and device transfer. If you have Android backup turned on, Google may back up the app’s other data to your Google account.

Permissions Namamp asks for:

Who else is involved

We do not sell, rent or share personal data with advertisers or data brokers. These services are part of how the products work:

We may also disclose information if the law requires it.

Where your data is kept

Account data and chains are stored in a database on servers we run ourselves, in Brazil. Cloudflare and Amazon Web Services may process traffic in other countries.

How long we keep it

Deleting your data

You can also email us to get a copy of your data or to correct it.

Children

These products are not directed at children under 13, or under the minimum age required in your country. We do not knowingly collect data from children. If you believe a child has signed in, contact us and we will delete the account.

Security

All traffic uses HTTPS. Sign-in tokens and one-time codes are stored only as one-way hashes. Account data is kept apart from the public catalogue, and only the developer can access the servers. No system is perfectly secure, but we work to protect your data.

Changes to this policy

If we change this policy, we will update it here and change the effective date above. If a change is significant, we will also say so in the products.

Contact

Square Harmonics: info@squareharmonics.com