Last updated 17 September 2026.
The short version: your audio file is never uploaded. It is decoded, analysed and turned into MIDI inside your own browser, and when you close the tab it is gone. We have no server that receives it, because there is no server in the loop at all.
When you choose or drop an audio file, the page reads it with your browser's own file reader. The decoding, the pitch analysis and the MIDI writing all happen in JavaScript on your machine. The recording you make with the microphone is held in memory the same way.
No copy of your audio is sent to us, and none is stored anywhere. There is no upload endpoint, no backend and no API call that carries your media.
This site is hosted on Cloudflare Pages. Like any hosting provider, Cloudflare handles the requests that fetch these pages and can see ordinary request data - your IP address, the page you asked for, your browser's user agent and the time of the request. That is how the page reaches you at all, and it is not something we can switch off while serving a public site.
The sitemap has been submitted to Google Search Console, so Google crawls these pages as it would any public site.
Two analytics scripts run on these pages. Neither one is used to build an advertising profile of you, and neither one ever sees your audio.
Cloudflare Web Analytics. This site is served through Cloudflare, and Cloudflare's own analytics run on every page as part of that. Cloudflare states that it "does not use any client-side state, such as cookies or localStorage, to collect usage metrics", and that it does not "fingerprint" individuals via IP address, user agent string or any other data for the purpose of displaying analytics. What it reports to us is page views and performance measurements such as Core Web Vitals. It sets no cookie in your browser.
Google Analytics 4. We use Google Analytics 4, measurement ID
G-46BP5NXS4Q, to count how many people read each page. It sets two first-party cookies:
_ga - Google's own description is "used to distinguish users". Default lifetime 2 years._ga_<container-id> - Google's own description is "used to persist session state".
Default lifetime 2 years.Google also notes that browsers may shorten those lifetimes on their own: Chrome caps first-party cookies at 400 days and Safari at 7 days. What Google receives is which page you loaded, when you loaded it, and the random identifier held in that cookie. It does not receive your audio file or the MIDI file you produce from it, because the conversion never leaves your browser. Google's handling of the data it collects is governed by Google's own privacy policy, not by this one.
You can block or delete both cookies through your browser's cookie controls. The converter does not depend on them and will keep working.
We intend to place third-party advertising on this site in the future. There are no ads on the pages today, but when advertising is added, this section is where it will be described.
What that will mean in practice:
If you would rather not be advertised to, an ad blocker or your browser's cookie controls will keep working on this site. The converter does not depend on advertising to function.
The site is a general-purpose tool and is not directed at children under 13. There is no account and nothing to sign up for, and the only thing measured about a visit is the page view and the performance data described in section 4.
If this policy changes - for example when advertising is switched on - the text on this page will be updated and the date at the top will change.
Questions about this policy can go to the address on the contact page.