Privacy Policy

Data controller

Jean-Michel Lisamano, publisher of the International MIDI Files site (international-midi-files.com) — see Legal Notice. For any question about your data, use our contact form.

What we don't do

International MIDI Files does not set any advertising cookie, does not use any audience measurement tool such as Google Analytics, and never resells or exchanges your data for commercial purposes.

Account data

If you create an account: email address, username or name, and password (never stored in plain text). This data is used only to manage your access to the site, your acquired collections and your donations. It is kept for as long as your account exists; you can request its deletion at any time via the contact form.

Anonymous audience measurement

We track site traffic anonymously: page visited, referring site, device type, and country (derived from the IP address at the time of the visit, then immediately discarded — only the country code is kept). No cookie, no visitor identifier is used for this tracking.

This data is kept in detail for 90 days, then summarized by month and country (with no more per-page detail) for longer-term statistics.

Abuse protection

To limit automated, large-scale downloading of the catalogue, we track the volume of files downloaded per IP address. This IP address is never stored in plain text: it is immediately transformed by a one-way hash function, which cannot be reversed to recover the original address. This technical data (downloads, blocked attempts) is kept for 30 days.

Searches

Text searched on the site is kept for 90 days, with no data that could identify you, to spot gaps in the catalogue and improve search.

Cookies

Besides the session cookie, strictly necessary for the site to work (login, cart), International MIDI Files uses one technical cookie, kept for about 13 months: the amount of your donation, to automatically raise your download limit without having to donate again.

This cookie is never used for advertising purposes and is never shared with a third party.

Subprocessors

Some data is processed by technical providers, each in their own role:

• Brevo — sending transactional emails (welcome, verification, donations, contact);
• PayPal — payment processing;
• O2switch — site hosting (France);
• Cloudflare — anti-bot protection (Turnstile) on registration and password reset;
• MaxMind — resolving the country from the IP address, without storing that IP.