Legal

Privacy Policy

Last updated: 25 October 2026

AmpHoarder does not run ads, does not use analytics or crash-telemetry SDKs, and does not track you. The app talks to the network only for the things listed below: what you ask it to do, and the backup of an account you chose to sign in to.

What the app does not do

No advertising, ad networks, or ad SDKs.
No analytics, telemetry, or crash-reporting SDKs.
No tracking, fingerprinting, or behavioral profiling.
No sale or sharing of personal data with third parties for their own purposes.
No account required. An optional AmpHoarder account exists for signing in, backing up, and posting rigs, described below; without one, no server of ours holds anything of yours.

What the app does send or receive

TONE3000 sign-in (OAuth / PKCE). To browse, preview, and download amp and cab tones from tone3000.com, the app authenticates you against TONE3000’s own OAuth service. The app is a public PKCE client — it never holds or transmits a client secret, only a publishable client identifier. TONE3000 issues an access token and a refresh token. On Android both are kept in the Android Keystore, encrypted and readable by no other app; in the browser version they are kept in that site’s local storage. They are never sent anywhere except back to TONE3000’s API to authorize your requests. Deleting the app deletes them. TONE3000’s own privacy policy governs what TONE3000 does with your account data once you are signed in there.
AmpHoarder account (optional). You can sign in to an AmpHoarder account with an email link or with Google. The account service is hosted for us by Supabase, Inc. in the United States (AWS us-east-2, Ohio). It stores your email address and, when you sign in with Google, the display name and profile picture Google shares; we ask Google for nothing beyond openid, email, and profile, and Google’s privacy policy governs Google’s side of that sign-in. Sign-in emails come from info@amphoarder.com. On Android the session is kept in the Android Keystore; in the browser version it is kept in secure, HTTP-only cookies set by the beta site. Signing out removes the session from the device. You can delete the account at any time: see Delete your account.
Backup (with an account). While you are signed in, the app backs up your library to your account, so you can restore it on another device. Backup is on by default. You can turn it off, and delete the backup, in Setup › Backup & restore. A backup holds your rigs, Stacks and gear with their names and settings; the TONE3000 tones you saved or liked, as TONE3000 ids; your preferences, pedal switch layout, and audio, Rhythm and performance settings; the date you first installed the app; and, to tell your devices apart, your phone’s make and model and the app’s version. It holds no model or impulse-response files, no recordings, and no audio. After a restore, the app downloads your TONE3000 files again, from TONE3000, when you ask it to.
Posting a rig (with an account). When you post a rig to amphoarder.com, we store and publish the name and handle you choose for your profile, the rig’s name, description and tags, and its chain as TONE3000 tone and model ids with their settings. Other players see the post in the app’s Discover list, and anyone with its link can open it. A post marked “Only with the link” is left out of Discover. You can remove a post at any time in Setup › Posted rigs; its page stops working at once. A rig that holds a file of your own cannot be posted. If you report a post, we keep your account, the post, the reason and your note while the post exists, and delete them with your account; the player you report is never told who reported them. Our moderators can see a report, the account that sent it and its note, and an account’s email address, to act on reports; what they do is logged, with the post address or handle they acted on, and that log is kept after the account it names is deleted. If you block a player, we keep that until you unblock them or delete your account. If you follow a player, we keep that until you unfollow them, either of you blocks the other, or you delete your account. Following a player needs a name and handle of your own, chosen as for posting, and they then show to everyone on your profile page at amphoarder.com/u/your-handle, posts or not. Anyone can see how many followers and follows a player has. Only you can see the list of who you follow, and nobody is shown a list of who follows a player; a block ends the follows between two players, so the player who blocks can see their follower count change.
Tone and artwork downloads. Amp and cab model files (.nam, impulse responses) and pack artwork you choose to download are fetched directly from TONE3000’s CDN and cached in the app’s private storage on-device.
Going live (only when you start it). When you go live from Record, the app sends your camera, the app’s own screen and your sound straight to the streaming service you chose (Twitch, Kick, Instagram, YouTube, Facebook, or a server address you typed), using the stream key you pasted. The key is kept on your device: on Android in the Android Keystore, in the browser version in that site’s local storage. It is sent only to that service. We receive nothing of the stream and keep no copy. The service’s own privacy policy governs what it does with your stream.
Diagnostics. Setup › Diagnostics can make a report about the app and your device’s audio setup. It holds no account details, rigs, or tone names, and it leaves your device only if you share it yourself, with whoever you choose.

What the site collects

Email address, where you submit one to the build-notes list. When signup is available, the site sends your address and Cloudflare-provided connecting IP address to Buttondown, our email delivery provider. Buttondown uses the IP address to validate the signup and reduce spam from server-side forms. Buttondown sends a confirmation email; only confirmed addresses receive build announcements. If signup cannot be completed, the site shows an error instead of claiming you have subscribed.

Your active subscription is retained until you unsubscribe. Every build announcement includes an unsubscribe link. After unsubscribing, the provider may retain a suppression record to prevent further delivery. You can request deletion using the contact address below. We do not sell subscriber data or use it for unrelated marketing.

The site’s own database is not used for the build-notes list. Subscriber addresses are held by the delivery provider described above. Each night we also keep an encrypted copy of the list for 14 days, only to recover it if the provider account is lost; an address removed from the list is gone from those copies within 14 days. To request deletion of an address you submitted, contact us below.

Hosting and abuse prevention. Cloudflare hosts this site and processes request information, including IP addresses, to deliver pages and protect the service. The signup endpoint uses short-lived counters keyed by hashes of IP and email addresses to limit abuse. These hashes are not anonymous data, but the site does not write them or raw signup IP addresses to its database or application logs. We do not run advertising or visitor analytics on the public site.

Beta site. The public site does not require a login. The invite-only beta site and its downloads use your AmpHoarder account: signing in checks your email address against the beta list, which holds the addresses we have invited, and keeps your session in secure, HTTP-only cookies on beta.amphoarder.com. Those cookies are for signing in, not advertising. Signing in to the beta does not subscribe you to build notes.

Support email. If you contact support, we receive your address and the information you include. We use that information to answer your request. Please avoid including passwords, access tokens, or unrelated personal information.

Data not collected

Outside the optional account above, the app does not collect your name, email, physical address, precise or coarse location, contacts, photos (beyond what you explicitly export), or device identifiers for advertising. The identity-adjacent data on your device is the TONE3000 token pair and, if you signed in, the AmpHoarder session, both described above. Apart from the account service, the app has no backend server; the build-notes list described above is a function of this website, not of the app.

Permissions

Microphone (RECORD_AUDIO), to process your guitar signal in real time through the amp models you select. Audio is processed entirely on the device. It is recorded only when you record a take (Quick settings, Record): the take is saved on your device and is never uploaded. Sharing one hands the file to the app you pick. When you go live, your sound goes to the streaming service you chose, as described above.
Nearby devices (BLUETOOTH_SCAN, BLUETOOTH_CONNECT), to find and connect a wireless MIDI pedal when you look for one. The scan is declared as never used for location.
Location, on Android 11 and older only (ACCESS_FINE_LOCATION). Those versions of Android require it for any Bluetooth scan. The app asks for it only to find pedals, and never reads your location.
Do Not Disturb access (ACCESS_NOTIFICATION_POLICY), only if you turn on Quiet, or Amp mode turns it on, to silence notifications while you play. Android asks you to allow it in its own settings.
Vibration (VIBRATE), for a short buzz when you pick up a row to move it.
Camera (CAMERA), while Scan a code is open, to read a rig’s QR code, and while you record a take that shows you. A scanned picture is read on the device and is not stored. A take’s video is saved on your device and is never uploaded; an export goes to your Movies or Music folder, and sharing one hands the file to the app you pick. When you go live, the camera goes to the streaming service you chose, as described above. Android asks the first time; without it, paste the code’s link instead, or record the screen and the sound alone.

Delete your account

In the app: open Setup, then tap Delete account at the bottom of the AmpHoarder account card. It happens at once.
Without the app: sign in at amphoarder.com/account with the email or Google login you use in the app, and press Delete account. It happens at once. Or email support@amphoarder.com from the address you sign in with and ask us to delete your AmpHoarder account; we delete it within 30 days and reply when it is done.

Deleting removes your account (your email, and your Google name and picture if you used Google), your backup, your profile and posts on amphoarder.com, your follows, your reports and blocks, and your beta access. It does not touch what is on your phone: uninstall the app to remove that. Your TONE3000 account is separate; delete it on tone3000.com. We keep the support emails you sent us; a build-notes subscription has its own unsubscribe link; our hosting providers’ request logs expire on their own within days. Our nightly backups of the account database are encrypted and kept for 14 days, so a deleted account is gone from them within 14 days; we use them only to recover from an outage.

Children’s privacy

AmpHoarder is not directed at children and does not knowingly collect data from children.

Your rights

You may request access to, correction of, or deletion of personal data held about you, and may withdraw consent to the build-notes list at any time. Requests go to the address at the bottom of this page and are answered within thirty days.

You can delete your backup yourself in Setup › Backup & restore, remove any post in Setup › Posted rigs, and delete your whole AmpHoarder account yourself or on request: see Delete your account. Website subscription, beta-login and support records are separate from the app and can be included in the same request.

Changes to this policy

If the app’s data practices change — for example, adding optional analytics in a future version — this page will be updated and the “last updated” date above will change accordingly. Material changes will be called out in the store release notes.

Contact

Questions about this policy or the app’s data handling: support@amphoarder.com.