Draft of our Privacy Policy for MuseScore 4
Hi everyone,
Below is a draft version of our new privacy policy for MuseScore 4, which we are publishing here to give time for community members to ask questions and verify that they understand it and are happy with it.
There are two important aspects to this privacy policy. First, that we are compliant with national and international regulations, namely GDPR and CPPA. Secondly, that we are transparent with our users and our developer community about the data we collect, when we collect it and why. The most important point stressed throughout the document is that we do not store or share any of your personal information.
There are two relevant networking features mentioned in the privacy policy:
Update Checking
Update checking is where we notify users when there is a new version of MuseScore available. The user is notified when MuseScore is first installed and is provided with a clear link to disable it in Preferences. Update checking shares your IP address, your OS, and your MuseScore version (including whether MuseScore was compiled in 32 or 64 bit mode). As explained in the privacy notice, we take steps to anonymise your IP address immediately, which makes it impossible for us to identify you. Please note that we also use this anonymised information for statistics, which help us understand how many users we have per country, which version of MuseScore they are using, and whether it is run on Windows, Mac or Linux. These statistics help us to plan app development and make decisions about which platform versions we need to support, etc.
Error Reporting
The other networking feature in MuseScore is error reporting. If an application error occurs, a popup appears asking you whether you want to send us the details of that error, which you can review before sending. We have taken steps to ensure that all potentially identifiable information is filtered from the report data before storage, including the IP address, which we discard.
Please note that some of the terminology in the privacy notice is potentially confusing to those without a legal or technical background. For example, under the section titled ‘Principles of Processing’, the last point (F) states: “We use appropriate technical and organisational measures to protect the personal information that we collect and process about you”. It is worth taking a moment to explain what this means: first, the ability to send any information over the internet requires an IP address, which is classified under CCPA & GDPR as ‘personal information’. As with any application that makes use of a network connection, we cannot avoid seeing (“collecting”) an IP address. Lastly, the steps we take to anonymise it counts as ‘processing’.
Please note that since this is a draft privacy policy, it does not yet apply to any version of MuseScore that has been released and we will alter its wording based on your feedback to make sure it is as clear as possible before publishing the final version.
The notice below outlines:
- The very limited data we collect and why we collect it
- Your options in sharing or not sharing information with us
- Your rights in managing information you share with us
- Our responsibilities in protecting the data we collect and process
Thanks very much,
The MuseScore team
Comments
To what extent should this policy also handle Publish/Save Online logic?
I imagine, not a lot, because then the .com policy kicks in instead. But in MS3 this is done as part of an embedded browser included in the software and I'm not sure if this is still relevant for MS4 and this policy?
In reply to To what extent should this… by jeetee
Yes, we've made a big change here. The moment a person opts to upload a score, they are taken to the MuseScore.com site. The desktop app will no longer have an embedded web view for uploading or signing in. This makes the separation much cleaner.
So, yes, uploading to MuseScore.com is covered by the MuseScore.com Privacy Policy.
In reply to The moment a person begins… by Tantacrul
The inevitable follow-up question then becomes whether .com will allow custom audio to be uploaded alongside the score (but that question and discussion might be better placed over there..)
In reply to The inevitable follow-up… by jeetee
Yes, custom audio is massively important, since we're now providing VST and a new orchestral library.
In fact, the logic for custom audio will be a little different than MS3.
There's a big conversation to be had about this but I thought I'd at least answer the basics.
Will this policy also apply to the new "hub" application? I think privacy & transparency is particularly important for the hub, as it doesn't seem like it will be open source.
In reply to Will this policy also apply… by llui85
This privacy policy doesn't cover the hub. However, the hub will have no tracking. The analytics it collects are limited to the number of downloads we have. It will also not store any IP addresses. A new Privacy Policy has been prepared for the hub, which is very similar to the one here. It hasn't yet been published.
Well, John Oliver said data anonymization is BS but truth be told this privacy policy seems entirely innocuous to me. What I have trouble wrapping my head around is what's Muse Group's long game here, what's their nefarious (allegedly) agenda?
"Jojo-Schmitz • Feb 15, 2020 - 14:21In reply to Here are my thoughts: … by peter franticas
So just say 'No' at that dialog and be done with it. Data will only be gathered and send after you explicitly agreed to it."
Funny how this evolved, right? Funny how I was right back then. Funny how there is no longer the option to "just say no". Who would have thought...
In reply to "Jojo-Schmitz • Feb 15, 2020… by peter franticas
He was referring to telemetry collection and he was right. When we were considering telemetry, it was opt in.
In reply to He was referring to… by Tantacrul
Hi Tantacrul, do I have the possibility to opt out of everything data collection in MS 4?
In reply to He was referring to… by Tantacrul
Hi Tantacrul, do I have the possibility to opt out of everything data collection in MS 4?
In reply to Hi Tantacrul, do I have the… by peter franticas
sorry, double post :/
In reply to Hi Tantacrul, do I have the… by peter franticas
You can turn off update checking and you can choose not to send an error when prompted. But since data is anonymised (literally, the IP address shared in order get the update is discarded) all it would do is just prevent you from knowing if an update is available. Up to you if you want to do that.
In reply to You can turn off update… by Tantacrul
Thanks, but ok, let me ask the other way around then: update checking and error report, is there anything else you are collecting?
In reply to Thanks, but ok, let me ask… by peter franticas
The privacy policy, along with my last answer already unambiguously answers that question. Please don't keep posting here if your only purpose is to be a nuisance. If it's not mentioned in the PP, it isn't being collected or stored.
In reply to The privacy policy, along… by Tantacrul
Why is MS 3.6 trying to connect to musescore.com? Look, I still like the software, it's way faster than every other notation program on my computers, and I appreciate what you guys are doing. And I would love to use version 4, and I'm absolutely keen to see what's coming with MuseSound. But I (still) have a problem with things happening on my computer that I do not have control of. And if you think asking about your PP is a nuisance - so be it. Thanks anyway.
In reply to Why is MS 3.6 trying to… by peter franticas
This PP is for MS4 not 3.6. 3.6 only connects to MuseScore.com if you actively try to upload a score to it.
In reply to This PP is for MS4 not 3.6… by Tantacrul
No. It tries to connect to musescore.com the moment I start 3.6.
In reply to No. It tries to connect to… by peter franticas
The start center of 3.6 contains a web embed with .com scores (such as the tutorial).
You can disable the start center in Edit > Preferences.
And if you're going to go all out on "no internet access for notation software", launch it by default with the
-w
argument, which'll disable all internet access functions of 3.x. So you do have full control over this.In reply to "Jojo-Schmitz • Feb 15, 2020… by peter franticas
Please cite completly and not out of context.
You are referring to https://musescore.org/en/telemetry#comment-978875
Not related to this topic here at all
In the current MuseScore version (64-bit): 4.0.1-230121751, revision -9b70a8c:
Help > About > Privacy policy > https://musescore.org/about/desktop-privacy-policy
This page is blank which is a bit disturbing.
Suggestion: put a reference there to
https://docs.google.com/document/d/1Z1XmbbVxV1oHTkoCVyYoCXneffyPrP_ATTH…
Privacy Notice - Musescore Desktop Application
Edit: also posted in
https://musescore.org/en/node/342275
In reply to In the current MuseScore… by MichLeon
That page (https://musescore.org/about/desktop-privacy-policy) is not blank, not for me
In reply to That page (https://musescore… by Jojo-Schmitz
(Edited)
I commented this.
https://musescore.org/en/node/342275#comment-1166050
In reply to [inline:2023-01-15 (25)_… by knoike
(Deleted)
In reply to [inline:2023-01-15 (25)_… by knoike
See https://musescore.org/en/node/342275#comment-1166041 for why this is happening and how to work around it
In reply to See https://musescore.org/en… by cbjeukendrup
(Oh, haha, posts crossed!)
In reply to (Oh, haha, posts crossed!) by cbjeukendrup
Yea, Ok! Thanks!