TinWhistleTab 的 Cookie 说明
我们使用 Cookie 做数据分析（了解大家常用哪些曲子和功能），也用来衡量广告效果。选择拒绝的话，网站照样能正常使用，只是不会启用这些 Cookie。 隐私与 Cookie 政策
Last updated: October 12, 2026
Tin Whistle Tab ("we", "us") runs www.tinwhistletab.com, a site for tin whistle tabs, backing tracks, practice tools and a small player community. It is operated by an individual, not a company. For anything in this policy, write to orkithewhistler@gmail.com or use the contact form. We are the data controller for the processing described here.
You can read every tab, use the finger chart, the composer and the practice tools without telling us who you are. We collect data only where a feature needs it:
| Feature | Data | Why, and legal basis | Kept for |
|---|---|---|---|
| Account | Email, name, optional username and picture, a hashed password (or your Google account id if you sign in with Google), sign-up, email-confirmation and last-login dates, where you came from on your first visit (for example "google" or "newsletter") | To run your account, saved tabs, uploads and personal bests. Contract (Art. 6(1)(b) GDPR). | Until you delete the account |
| Newsletter | Email, which form you used, confirmation and unsubscribe dates, delivery and bounce status, which links in our emails you click | To send the weekly email you asked for. Consent, confirmed by the double opt-in link (Art. 6(1)(a)). Every email has an unsubscribe link. | Until you unsubscribe; the address is then kept on a suppression list so we do not email you again |
| Account and badge emails | Which automated emails we sent you and when, which links in them you click, the site language you signed up in, and the page the sign-up form was on | To send each email once and in your language: confirming your address (with one reminder), one welcome, answers to your posts, and badges you earn (at most one email a week). Contract and legitimate interest (Art. 6(1)(b) and (f)). Answer and badge emails can be switched off on your profile or from the link in each one. | Until you delete the account; for newsletter-only readers, until you ask us to delete it |
| Community posts and comments | The text you post, your display name, the time, and a salted hash of your IP address (rate limiting only, never reversible to an address). Anonymous posters also give an email that is used once to confirm the post. | To publish and moderate the discussion under each tune. Contract and legitimate interest in keeping the forum usable (Art. 6(1)(b) and (f)). | While the post is live; unconfirmed anonymous posts are purged |
| Votes and "helpful" marks | Your user id, or for anonymous visitors a random id in a first-party cookie | One vote per person. Legitimate interest (Art. 6(1)(f)). | While the voted item exists |
| Contact form, song requests, tab submissions, reports | What you type, plus your email if you give one | To answer you or to tell you when a requested tune is added. Legitimate interest and, for the notification email, consent (Art. 6(1)(a) and (f)). | Up to 24 months, then deleted |
| Personal emails from Orki | Your email and name, the emails we exchange, and short private notes about what you told us (for example which whistle you play) | Occasionally Or writes to you personally about your account, a tune you requested or a message you sent, to learn what players need and ask for help with tabs. Never promotional. Legitimate interest (Art. 6(1)(f)). Reply "stop" and we will not write again. | Up to 24 months after the last email, or until you ask us to delete it or delete your account |
| Academy reservation | Name, email, chosen package, optionally your country | To email you when the course opens. Consent (Art. 6(1)(a)). We do not take card details or payments on this site. | Until the course launches or you ask us to remove it |
| Practice and play modes | Microphone audio is analysed in your browser to detect notes and is never uploaded. Signed-in players' best scores are stored. | To make the feature work. Contract (Art. 6(1)(b)). | Scores: until you delete the account |
Server logs at our hosting provider record IP addresses and request details for a short period for security and debugging (legitimate interest). We do not sell personal data and we do not use it for automated decisions with legal effect.
Providers in the United States are used under the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. We do not share personal data with anyone else, except if the law requires it.
Some links to whistles and books go to Amazon with our Associates tag. As an Amazon Associate we earn from qualifying purchases. Clicking such a link takes you to Amazon, whose own cookies and privacy policy apply from that point. We record only that an affiliate link was clicked, as part of the analytics described above.
Wherever you live, and in particular under the GDPR, the UK GDPR and the California CCPA/CPRA, you can:
Email orkithewhistler@gmail.com for anything you cannot do yourself. We answer within 30 days. We never discriminate against you for exercising a privacy right.
The tabs are for everyone, but accounts, the community and the newsletter are for people aged 16 or older (13 in the United States). We do not knowingly collect personal data from younger children; if you believe a child has given us data, tell us and we will delete it.
Everything is served over HTTPS, passwords are stored as bcrypt hashes, and admin access is limited to the site owner. No system is perfectly secure; if we learn of a breach affecting your data we will tell you and the relevant authority as the law requires.
When this policy changes in a way that matters, we update the date at the top and, for account holders and subscribers, mention it in the next email. Older versions are available on request.
See also our Terms of Service.
