Security

Last updated June 2026 · Instrument Ninja, a Riverun Pty Ltd product (ABN 65 663 364 154, Australia).

A deliberately simple, defensive approach: few moving parts, no ad trackers, strict per-account scoping.

Accounts

Sign-in is handled by our authentication provider; sessions use secure, HTTP-only cookies. We never see or store your card details — Stripe handles payments.

Data isolation

Your profile, progress, projects and analytics are scoped to your account. One player can't read or modify another's data.

Audio stays local

Microphone and instrument input for the amp, tuner and training tools is processed in your browser via the Web Audio API. It is not streamed to our servers or retained.

Encryption

All traffic is served over HTTPS/TLS. Connections to our database, payment and email providers are encrypted.

Minimal third parties

We avoid third-party advertising and analytics SDKs. Our subprocessors are listed on the Privacy page.

Reporting an issue

Found a vulnerability? Email security@instrument.ninja. We appreciate responsible disclosure and respond promptly.