Privacy Policy

Effective date: 3 May 2026 · Last updated: 5 September 2026

This Privacy Policy explains how Songly ("Songly", "we", "us", or "our") collects, uses, and shares information about you when you use our website at https://songly.fun and any related services (the "Service"). By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Who we are

Songly is operated by Johann Briem, an individual based in Iceland, as a personal hobby project. You can reach us at privacy@songly.fun.

Songly is a free, music-based party game in which a host plays short audio previews and players guess metadata about each song. The Service is provided primarily for personal, non-commercial entertainment.

2. Information we collect

2.1 Information you provide directly

• Account information. When you create an account, we collect your email address (used to send sign-in links, password resets, and, if you ask for it, an account-deletion confirmation). Every account gets a display name — a random music-themed one until you change it — and you may upload a profile picture, which is stored in our database provider's file storage and shown next to your name when you play along in a game and on anything you post to the Idea board.
• Things you post. Ideas, comments and votes on the Idea board, and custom quizzes you build, are stored with your account and shown to other users under your display name.
• Party nicknames. Players who join a game from a phone type a nickname and pick an emoji; no account is involved. The final standings of each game (nickname, score, streak, fastest answer) are stored with the game so records such as "longest streak" can be kept. A nickname is not linked to any account or email.

2.2 Information collected automatically

• Game-play events. When a game starts or finishes, we record an event with metadata such as the number of players, number of rounds, the pack and settings chosen, the duration of the game, the final standings (party nicknames and scores), and technical timings. These events include a randomly-generated session ID stored in your browser, a country code derived from your connection (never your IP address), and (if you are signed in as the host) your Songly user ID. While a game is running, the host's browser sends a short heartbeat so we can see how many games are in progress.
• Feedback and votes. Bug reports, feedback and end-of-game votes ("what should Songly build next?") are stored as events. Votes from phones carry no account or nickname.
• Browser storage. We use browser localStorage and sessionStorage to persist your authentication session, a random session ID for analytics, your nickname and emoji on the player page, and a few non-sensitive game preferences.
• Page-view analytics. We use Vercel Web Analytics, which records anonymous, aggregated page-view metrics. Vercel Analytics does not use third-party cookies, does not track individuals across sites, and does not collect personally-identifying information.

3. How we use your information

We use the information we collect to:

• Provide and operate the Service (sign you in, run games, play song previews, keep scores and records)
• Improve the Service (understand which features are used, fix bugs, plan new content)
• Communicate with you when necessary (e.g., emailing you a sign-in link or a confirmation before your account is deleted)
• Comply with legal obligations and enforce our Terms of Service

We do not use your information for advertising or to sell to third parties.

4. How we share your information

We share information only in the following limited cases:

• Service providers. We use Supabase to store account information, profile pictures and game events, Vercel to host the Service, and Resend to deliver the emails we send you. These providers process information on our behalf under their own privacy practices.
• iTunes Search API. We query the public Apple iTunes Search API to find 30-second song previews for songs in the game. These queries do not include any personally-identifying information.
• Legal requirements. We may disclose information if required by law, subpoena, or to protect our rights, our users, or the public.

5. How long we keep your information

• Account information. Kept for as long as your account exists. When you delete your account, your profile, picture, quizzes, ideas, comments and votes are deleted with it (see "Your rights" below).
• Game-play events. Retained for statistics. When you delete your account, the link between your account and any game you hosted is removed; the game's non-personal numbers (players, rounds, scores, party nicknames) remain, as they were never tied to an account.

6. Your rights

Depending on where you live (including under the EU GDPR, UK GDPR, California CCPA, and other applicable laws), you may have the right to:

• Access information we hold about you
• Correct or update your information
• Delete your account and associated information
• Object to or restrict our processing of your information
• Receive a copy of your information in a portable format
• Withdraw consent
• Lodge a complaint with your local data protection authority

Deleting your account yourself. Open your profile and choose "Delete my account". We email a confirmation link to the address on the account; nothing is deleted until you open the link and press the button, and the link expires after 24 hours. An administrator can start the same process for you on request, and it still ends with your confirmation.

For anything else, contact us at privacy@songly.fun. We will respond within a reasonable time and free of charge.

7. Children's privacy

The Service is not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under those ages. If you believe we have collected information from a child, please contact us and we will delete it.

8. International users

The Service is hosted in the European Union (Supabase EU region) and the United States (Vercel). If you access the Service from outside these jurisdictions, your information may be transferred to, stored, and processed in those jurisdictions. By using the Service, you consent to such transfer. We rely on standard contractual clauses or equivalent legal mechanisms where required.

9. Security

We take commercially reasonable measures to protect your information, including:

• HTTPS for all client connections to the Service and its providers
• Row Level Security policies on the Supabase database so each user can only access their own profile data
• No client-side storage of plaintext passwords (we use email magic links instead)

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Third-party services

The Service relies on third-party platforms. By using the Service, you also agree to the terms and privacy policies of:

• Apple iTunes — iTunes Terms
• Supabase — Privacy Policy
• Vercel — Privacy Policy
• Resend — Privacy Policy

Songly is not affiliated with, endorsed by, or sponsored by Apple, Supabase, Vercel, or Resend.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. If we make material changes, we will provide additional notice (e.g., a banner on the Service or, if you have an account, an email). Continued use of the Service after a change constitutes acceptance.

12. Contact

For privacy-related questions or to exercise any of your rights:

Songly
privacy@songly.fun

See also our Terms of Service.