Downbeat is made by one person for working musicians. It holds the music you put into it and the address it signs you in with — and nothing it does not need.
Last updated 30 August 2026
Your account: the email address you sign in with, and a display name if you set one. There is no password on the web — we email you a code.
Your music: the songs, audio, charts, cues, MIDI and chord sheets you create or upload, along with the tempo, key and arrangement details that go with them.
Your bands: which bands you belong to and your role in each.
What you do in the app: your votes on songs and setlists, your tags and favourites, and anything you post on the feedback board.
There is no analytics package on this site or in the apps, no advertising, no tracking pixels, and no third-party SDK watching what you do. We do not collect your location, your contacts, or an advertising identifier.
We have never sold or shared your data with anyone for their own purposes, and we do not intend to start.
Your bandmates see what you publish to a band — that is the point of publishing. Anything you keep in your own library stays yours until you publish it.
Two companies hold data on our behalf, and only to run the service: Supabase, which provides the database, file storage and sign-in; and Vercel, which hosts this website. Neither uses it for anything else.
We will hand over data if the law actually requires it, and we would tell you unless we were forbidden from doing so.
Your address is used to sign you in, to send beta and release updates, and to reply when you write to us. It does not go to an advertiser or a data broker, and there is no marketing list you have to escape from.
Everything travels over HTTPS. Access to your rows is enforced in the database itself rather than only in the app, so a band you are not in cannot read your songs even if something in front of it is wrong.
No system is perfect, and this one is small and young. If you find a hole, tell us and we will fix it.
Write to hello@downbeat.cc from the address on the account and ask for it to be deleted. We remove the account, the songs and files it owns, and the votes and tags attached to it, within 30 days.
Anything you published to a band that others are now relying on — a setlist the band still plays, say — we will discuss with you rather than pull out from under them silently.
Downbeat is built for working musicians and is not directed at children under 13, and we do not knowingly collect their information. A teacher using Downbeat with younger students should hold the account themselves.
If this policy changes in a way that matters, the date at the top changes with it and the update is noted on the Updates page.
Questions, corrections, or a deletion request: hello@downbeat.cc.