Last updated 11 November 2026
Common Tune keeps as little about you as it can. There are no ads, no analytics services and no tracking, and the pages load nothing from anyone else's servers. We do not sell or share what we keep.
You can read, play and sing everything without an account. Your browser keeps a random ID for this device (it names nothing about you), which lets the site count a visit to a collection, or a hymn sung, once per device per day. Our server stores only a scrambled form of that ID that cannot be turned back into it.
Your browser also keeps your display choices (words only, large, dark) and any drafts you have not published. These stay on your device; clearing this site's data in your browser removes them.
Signing in needs only an email address. We email you a six-digit code; there is no password. The code is stored scrambled and deleted once it is used; unused codes expire after ten minutes and are cleared out after about a day. To stop someone flooding an inbox with codes, a scrambled form of your network address is kept with each code until it is cleared out. One cookie keeps you signed in on that browser for a year; the site sets no other cookies.
Your email address is your account name. The site shows it to you when you are signed in; other people never see it.
Collections you save are stored with your account. A collection you publish can be opened by anyone with its link or join code, and the home page may list it after we have looked at it. You can unpublish or delete a collection at any time.
When you send feedback, we keep your message, the page you were on, your browser type, your account if you are signed in, and your email address if you give one so that we can reply. All of this is emailed to us. If you are signed in, a copy of your message goes to your account's email address (never to an address typed in the box). To stop anyone flooding the feedback box, a scrambled form of your network address is kept with your message for a day, then cleared.
Like any web server, ours notes each page it serves, when, and the browser type. It does not record your IP address. These notes are wiped whenever the server restarts or is updated.
The site runs on Fly.io in the United States. Sign-in and feedback emails are sent by Resend. The domain name is managed by Cloudflare. Backups of the site's database are kept for a limited time, so something you delete can remain in a backup until it expires.
Use the Feedback button on any page, and include your email address so we can answer. We will tell you what we hold about you, or delete your account and everything in it.