Privacy Policy
Plain-language summary of what the site stores and who it talks to.
What we collect
- Account data. If you sign in, your email address and a display name. Sign-in uses one-time email links, so no password is stored.
- Gameplay data. Which tracks you were shown, whether you answered correctly, and how long you took. This is what powers scores and the leaderboard.
- Technical data. Standard server logs from the hosting provider, including IP address and user agent, retained for security and debugging.
What we do not collect
No advertising identifiers, no cross-site tracking pixels, and no payment details — the game does not take payments. We do not sell or rent personal data to anyone.
Who processes data for us
- Supabase — database, authentication and email delivery for sign-in links.
- Apple iTunes Search API and, where configured, Spotify — cover art and catalogue metadata. Your browser loads images from their servers, which means those servers see your IP address.
- The hosting provider — serving the site and keeping request logs.
Cookies and local storage
The only browser storage in use is the session token that keeps you signed in. There are no analytics or advertising cookies. Signing out clears it.
Your rights
You can request a copy of your data or ask for the account and all associated gameplay records to be deleted. Email [email protected] from the address on the account and it will be actioned within 30 days. Depending on where you live, you may also have the right to object to processing or lodge a complaint with a supervisory authority.
Retention
Gameplay records are kept while the account exists. Delete the account and they go with it. Server logs roll off after 30 days.
Changes
Material changes will be announced on the site before they take effect. Questions go to the contact page.