Privacy Policy

Song Trivia is built guest-first \u2014 you can play without an account, without a login, and without giving us any personal data. When you do create an account or import a playlist, the details below explain exactly what we keep and why.

What we collect

• Guest play: a randomly-generated player ID stored in sessionStorage. No email, no name beyond what you type into the lobby. Discarded when the tab closes.
• Account play (optional): email address (for password reset), display name, hashed password, and any avatars / achievements you have unlocked.
• Imported playlists: playlist title, song list (title/artist/album/cover/year), and a reference to your account so we can show it back to you next time.
• Room data: room code, host ID, joined player IDs, current game settings, and per-round scores. Rooms persist as long as the game is active.
• Spotify tokens (optional): if you connect Spotify, we store the OAuth access + refresh tokens linked to your account so we can fetch your playlists. Tokens are refreshed automatically. You can revoke access at any time from your Spotify account dashboard.

What we do NOT collect

• We do not run third-party analytics that fingerprint you.
• We do not sell, rent, or share your data with advertisers.
• We do not store any audio. Music is streamed via YouTube on your device.

Cookies & local storage

We use localStorage and sessionStorage for: player ID, your manual theme choice, your in-progress avatar build, and the room you last joined. We do not set tracking cookies.

Requesting deletion

Email us from your account email to request immediate deletion of your account, any associated tokens, playlists, and gameplay history. Guest sessions delete themselves when you close the tab.