
Legal
Privacy Policy
Last updated on 05 Nov 2026
This policy explains what information is handled by the website gostrobrod.dev, the iOS and iPadOS apps Tiamat, Quantum, Physarum, Pixator and Pixel Purr, the music creation app Orcalot, and the browser tools NotBit and Music Cheat Sheet. They are made and operated by George Ostrobrod (ABN 58852734962), based in Tasmania, Australia. We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
The short version: there are no app accounts, we do not sell data, and your work stays on your device unless you choose to export it or share it with other participants in an Orcalot Jam session. The website uses visitor analytics, and Pixel Purr offers optional rewarded ads, as described below.
1. The website
Visitor statistics
gostrobrod.dev uses Google Analytics 4 to understand which pages are read and which links are used. Google receives your truncated IP address, approximate location, browser and device type, the pages you view and clicks on outbound links. IP anonymisation is enabled, and we do not send names, email addresses or other identifiers. Google Analytics sets cookies in your browser to recognise repeat visits; Google describes its processing at policies.google.com/technologies/partner-sites. You can opt out with a content blocker, the Google Analytics opt-out add-on, or by disabling cookies for this site. The website works fully without analytics.
Hosting
The site is served by GitLab Pages, which keeps standard web server logs (IP address, requested URL, user agent) for security and operations under GitLab's privacy statement.
Embedded content and links
Some articles embed YouTube videos or Desmos graphs. Those embeds load from the respective services and are governed by their own privacy policies. Links to other websites, including app stores, payment services and social networks, are provided for convenience and we are not responsible for their practices.
2. The iOS and iPadOS apps
No accounts, no analytics
Tiamat, Quantum, Physarum, Pixator and Pixel Purr do not require an account and do not include analytics or crash-reporting frameworks. Your fields, rules, colours, images and progress are stored on your device and, if you enable it, in your own iCloud storage through the system Files integration. We cannot see them.
Sharing and exports
When you share an image, GIF, video or file from an app, it goes through the standard iOS share sheet to the destination you choose. Nothing is sent to us.
Purchases and tips
Optional tips and in-app purchases are processed by Apple through the App Store. We receive anonymised sales reports from Apple and never see your payment details, name or address.
Rewarded ads in Pixel Purr
Pixel Purr can show rewarded video ads that you choose to watch in exchange for in-game coins. Ads are served by Google AdMob. When an ad is requested, Google receives your device's IP address and technical device information and, only if you allowed tracking in the iOS App Tracking Transparency prompt, the advertising identifier. You can withdraw that permission at any time in Settings → Privacy & Security → Tracking, and you can play without ever opening an ad. Google's handling of this data is described at policies.google.com/technologies/ads.
Children
Pixel Purr is designed to be suitable for families. We do not knowingly collect personal information from children, there are no chat or social features, and rewarded ads are optional and never interrupt play. If you believe a child has sent us personal information, contact us and we will delete it.
Feedback
The Options → Feedback action posts your message anonymously to a private Discord channel that only we can read. It contains the text you type plus the app name, version and device model so that we can reproduce problems. No account, email address or device identifier is attached, so we cannot reply unless you include a way to reach you. Sending it is entirely your choice, and the message is transmitted to and stored by Discord under Discord's privacy policy.
3. Orcalot, NotBit and Music Cheat Sheet
Orcalot: projects and local data
Orcalot does not require an account and does not include advertising or third-party analytics SDKs. Projects, code, samples, SoundFonts, media, settings and session-recovery data are stored on your device or in files and storage providers you choose. Creating music, using connected MIDI devices and exporting files do not upload your work to us.
Optional Jam sessions
Jam is an optional collaborative feature. When you create or join a room, project content, shared assets, edits and playback state are exchanged with the other participants over encrypted WebRTC connections. Room and participant names and the network information needed to connect are also shared. We do not operate a server that stores your Jam projects. Other participants can save or export content they receive; leaving a room ends live synchronisation but cannot remove copies they have already saved.
Nearby room discovery advertises the room name and connection information on the local network. Nearby join requests and invitation exchanges also use that network. Room and participant names are labels, not verified identities. Use local visibility on a trusted network and share invitations and connection replies only with people you intend to join.
Network connection services
Jam connection setup uses a STUN service, by default Cloudflare at stun.cloudflare.com:3478, to discover the public network address needed for a peer connection. That service receives your IP address and network connection information, not your project content, code, audio or MIDI messages. Cloudflare handles this information under Cloudflare's privacy policy. Nearby connections can use local addresses when external STUN is unavailable.
Exports, downloads and purchases
When you export or share a project, audio, video or another file, it goes to the destination you choose. That destination may have its own privacy policy. App stores handle downloads and purchases under their own terms; we do not receive your payment card details. App stores and system services may provide sales, installation and diagnostic reports under their own privacy settings, separately from any in-app analytics.
NotBit and Music Cheat Sheet
These browser tools do not require an account and do not send your work to us. Files and settings remain in files you save yourself or in browser storage, which you can clear at any time.
Политика конфиденциальности Orcalot
Orcalot разрабатывает и поддерживает Георгий Остроброд (George Ostrobrod), Тасмания, Австралия. По вопросам обработки и удаления данных пишите на george.ostrobrod@gmail.com.
Данные на устройстве
Для работы Orcalot не нужна учётная запись. В приложении нет рекламы и сторонних систем аналитики. Проекты, код, сэмплы, SoundFont, медиафайлы, настройки и данные восстановления сеанса хранятся на устройстве или в выбранном вами хранилище. При экспорте файлы передаются туда, куда вы их сохраняете или отправляете.
Совместная работа в Jam
Jam включается по вашему выбору. При создании комнаты или подключении к ней проект, общие файлы, правки и состояние воспроизведения передаются другим участникам по зашифрованным соединениям WebRTC. Для подключения используются названия комнат, псевдонимы участников и сетевые параметры. При поиске комнат в локальной сети Orcalot сообщает название комнаты и параметры подключения устройствам в этой сети. Псевдонимы участников не подтверждают их личность.
Для установления соединения Jam по умолчанию обращается к STUN-сервису Cloudflare (stun.cloudflare.com:3478). Он получает IP-адрес и сетевые параметры, необходимые для соединения. Проект, код, аудио и MIDI-сообщения через STUN не передаются. Обработка этих сетевых данных описана в политике Cloudflare.
Хранение и удаление
У Orcalot нет сервера хранения проектов Jam. Выход из комнаты прекращает синхронизацию. Участники могут сохранить полученные материалы, а их копии останутся у них, пока они сами их не удалят. Данные во внутреннем хранилище приложения можно удалить вместе с приложением. Экспортированные файлы и копии во внешнем хранилище удаляются отдельно. Переписку со службой поддержки мы храним, пока она нужна для ответа и решения вопроса, и удаляем по запросу. Магазины приложений и системные службы обрабатывают сведения об установках и диагностике по своим правилам.
4. Payments, support and community
If you support the work through Ko-fi, PayPal, Boosty or Apple, the payment is processed by that service under its own terms. We receive only the information the service passes on, typically a display name, an optional message and the amount, and use it to acknowledge your support.
If you email us or message us on Discord, Telegram or another platform, we keep the correspondence for as long as needed to help you and to keep a record of the conversation. Community platforms have their own privacy policies.
5. Disclosure
We do not sell or rent personal information. Information is shared with the service providers named above to the extent needed to run the website and apps, with the recipients you choose for exports and Jam sessions, or when required by law. Some of these providers store data outside Australia, in particular in the United States and the European Union.
6. Retention
Website analytics are kept for the retention period configured in Google Analytics (currently up to 14 months) and then deleted automatically. Emails and support correspondence are kept for as long as they are relevant to helping you, and are deleted on request. App-private data is under your control and is removed when you delete it or uninstall the app. Exported files, copies in storage providers and copies saved by other Jam participants may remain until deleted by their owner; uninstalling Orcalot does not remove those copies.
7. Your rights
You can ask what personal information we hold about you, ask for it to be corrected or deleted, and withdraw consent for analytics or ads as described above. Write to george.ostrobrod@gmail.com; we respond within a reasonable time and without charge. If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
8. Security
The website is served over HTTPS. We collect as little as possible, keep it in reputable third-party services with access controls, and do not store payment details at all.
9. Changes
This policy may be updated when the website or the apps change. The date at the top shows the latest revision, and significant changes will be mentioned in the app release notes or on this site.
10. Contact
George Ostrobrod
ABN 58852734962
Tasmania, Australia
george.ostrobrod@gmail.com