Privacy

Last updated 29 September 2026. BandPeer is made and sold by BandPeer.com ("we"). Questions go to bandpeersupport@gmail.com.

What stays on your machine

Your library, calendar, setlists, recordings, chat history, band details and settings live in a folder on your own computer. We have no copy. When you share with your band, it travels directly to them, encrypted so that nobody else on the network can read it. A video call is the same - it runs between the two machines on the call, encrypted end to end.

Each install of BandPeer makes its own key when it first starts. The private half never leaves your machine.

What we keep, and why

Only what the license service needs:

• Your email address, when you sign in to your account. It's how you sign in - there's no password - and how we reach you about your license. Your licenses carry an account number like BP-7Q2XKM instead, never your email, because a band license is seen by everyone in the band.
• What you've bought: which plan, when it's paid until, whether it's active, cancelled or refunded, and PayPal's reference for the subscription and for each payment and its amount.
• The country and state you bought from, taken from the address on your PayPal account - not the street, city or zip code. Licenses are sold in the US only for now, and sales tax is owed state by state, so this is what we check and what a tax return needs.
• Which machine a license is on: that install's public key, the name it gives itself (the name you set in BandPeer), and when it last renewed. For a band license, the band's id, the owner's key and the key of the bandmate it includes.
• Free trials: the install's public key, whether it was a personal or band trial, the band's id for a band trial, and the internet address the request came from - so that each install gets one of each, and trials can't be farmed.
• Sign-in requests: the email asked for, the internet address it was asked from, and when - so the sign-in form can't be used to flood somebody's inbox. The link itself is stored only as a scrambled fingerprint, so our database can't be used to sign anyone in.
• Wrong license codes: the internet address a code that isn't ours was tried from, and when - so codes can't be guessed. Kept for a day.
• Contact form sends: a scrambled fingerprint of the internet address a message came from, and when - never the address itself - so the form can't be used to flood us. Kept for an hour. The message itself goes straight to our inbox and isn't stored on the site.
• Where a band can be found, only if its owner switches on "Ask my router to let bandmates reach this machine", so bandmates elsewhere can join with the code alone. The owner's copy of BandPeer encrypts its internet address and port with the band's code before sending them, so what we store is scrambled and we can't read it - only somebody who has the code can. We never see the code itself. Replaced as it changes, and cleared a day after the band was last online. Wrong band codes looked up count towards the same limit as wrong license codes.
• A record of every license we sign - who it's for and when - which is how we would notice if our signing key were ever misused.
• Server logs kept by our web host - addresses, pages asked for and errors, as every website has.

We don't use analytics, advertising or tracking of any kind, and we don't sell or rent anything about you to anyone.

What we never see

• Your card or bank details. You pay on PayPal's own pages, and PayPal tells us that a payment happened, its amount and its reference, and the address on your PayPal account - of which we keep only the country and state.
• Anything you make or share in BandPeer, your chat, or your calls.

Who else is involved

A few other companies necessarily see part of this. Each has its own privacy policy:

• PayPal takes payments and knows what you give them when you pay. The account page's Buy button loads PayPal's own code from PayPal.
• Hostinger hosts this website, the license service and its database.
• Google: messages from the contact form arrive in a Gmail inbox. The site's fonts are served from bandpeer.com itself, so reading these pages sends nothing to Google.
• Our email provider sends sign-in links, and sees the address it's sending to.
• Cloudflare: when you start or answer a video call, BandPeer asks Cloudflare's public STUN server what your internet address looks like from outside, so the two ends can find each other. Cloudflare sees your address when it does. The call itself doesn't go through Cloudflare.

What your bandmates and your network see

BandPeer finds your bandmates by announcing itself on your local network - your name and the bands you're in, to other copies of BandPeer on the same wifi. Bandmates see your name, photo, bio and roles, and the band license shows the owner's account number. If you choose to open a port on your router (off unless you switch it on), your machine can be reached from the internet, and only answers somebody holding your band's code or on your band's roster.

Cookies

One, and only while you're signed in to your account: bp_session, which keeps you signed in for up to 30 days. Signing out removes it. There are no other cookies on this site.

How long we keep it

Account, subscription and payment records are kept while you have an account, and afterwards for as long as tax and accounting rules require us to keep records of sales. Trial, sign-in and signing records are kept to stop abuse. Server logs are kept for as long as our web host keeps them.

Your choices

• See or correct what we have: your account page shows your licenses and where they're used. Email us for anything else.
• Delete your account: email us from the address on the account. We'll delete it, except for the payment records we're required to keep. Licenses already on your machines keep working until they expire, and then don't renew.
• Stop BandPeer checking for updates: it asks bandpeer.com for the newest version number when it starts and every few hours, which tells our server your internet address and which version you're running, and nothing else. Settings › Network turns it off.
• Use BandPeer without the license service at all: a license can be sent as a file instead, and the service switched off in Settings › License › More options.

Depending on where you live, you may have further rights over your data - to a copy of it, to object to how it's used, or to complain to your data protection authority. Email us and we'll help.

Children

Buying a license takes a PayPal account, which means an adult. Students in a class or orchestra use BandPeer on a license their teacher holds; we hold nothing about them beyond the key of the machine they use and the name they give it.

Changes

If this page changes in a way that matters, the date at the top changes, and if you have an account we'll email you before it takes effect.

See also: Terms · Refunds and cancelling