In plain words
No server of ours receives your music.
Fermata runs in your browser. We operate no server that receives your scores, your recordings or how you use the player. Engraving, rendering and playback all happen on your device.
One analytics beacon, one cookie.
This site uses Cloudflare Web Analytics, which is cookieless and counts visits without following you. The player sets one cookie, which only says that you have a library of your own so that the home page can send you straight to it.
If you connect Google Drive, your browser talks to Google directly.
Connecting is optional. Your browser then talks to Google Drive itself, with a token Google gives you. Fermata asks only for the files you pick and the files it creates (the drive.file permission): it cannot see the rest of your Drive. The package Fermata makes from a score is saved next to it. Nothing passes through us. The token is kept in the page's memory only and is removed when you disconnect or close the page, and you can withdraw access at any time in your Google Account settings. What Google does with your data is governed by Google's privacy policy. Fermata's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The sound banks come from our storage, once.
The sampled instruments are downloaded once from our Cloudflare storage and kept in your browser. That download is an ordinary file request: it carries no score and no account, because there is no account.
Your library
Pieces you open are kept in your browser's private storage on your device. Clearing the site's data in your browser removes them. Pieces kept in Google Drive stay there until you delete them from Drive.
Contact
Questions about this policy: [email protected].
As of 1 November 2026.