🎵 SONGFIT

Privacy Policy

Last updated: July 2026

1. Controller

Responsible for data processing on songfit.app: Paul Holaschke, contact: Paul_H@gmx.at (Switzerland).

2. What Data We Process

Account data: email address, chosen username, selected country, password (stored exclusively as a cryptographic hash). Game data: game participations, answers, points, leaderboard rankings, badges. Technical data: when you visit the site, standard connection data (IP address, time, requested resource) is processed briefly on the server to deliver and secure the service; your approximate country may be derived from your IP to preset language and country. In the browser we use localStorage for functional purposes only (login session, sound setting, active room, language) — no advertising or tracking cookies.

3. Purposes and Legal Bases

We process this data to provide the game (account management, gameplay, leaderboards), to send functional emails (registration confirmation, password reset, room invitations), and to secure the service. The legal bases are the performance of the contract (providing the service) and our legitimate interest in a secure and fair gaming experience. We do not use your data for advertising and we do not sell it.

4. Recipients and Processors

We use the following service providers: Supabase (database and authentication; servers in the EU/Frankfurt), Vercel (hosting/delivery of the website; globally distributed network, provider based in the USA), and Resend (email delivery via EU infrastructure). Data processing agreements pursuant to Art. 28 GDPR are in place with these providers. When music previews are played, your browser connects directly to Apple servers; Apple receives your IP address, and Apple's privacy policy applies. For audience measurement we use Vercel Web Analytics: a cookieless, aggregated statistic (page views, country, device type) that does not build user profiles, does not use advertising identifiers, and does not track visitors across other websites.

5. Retention

We store account data for as long as your account exists. Game data is retained for leaderboards and statistics for as long as the service is operated. If you delete your account, your personal data is deleted; game results are removed or anonymized.

6. Your Rights

You have the right to access your stored data, and to rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Simply contact the email address above. You also have the right to lodge a complaint with a data protection supervisory authority.

7. Changes

We will update this policy if the service or the legal situation changes. The current version can always be found on this page.