Privacy Policy

Last updated: 26 June 2026

Song Guess (the “Game”, at play.roybarda.org) is a personal, non-commercial multiplayer music-guessing game operated by Roy Barda (“we”, “us”). This policy explains what we collect, why, and your choices.

Information we collect

Account & login. Your email address, used to sign you in with a one-time code. If you sign in with Google, we receive your email, name, and profile picture (Google’s basic openid email profile scopes only).
Spotify connection (optional). If you connect Spotify, we store your Spotify user ID, your subscription type (free/premium), and an access/refresh token used to play music and control playback on your devices. The refresh token is stored encrypted. We never see or store your Spotify password.
Gameplay. Rooms and games you play, your scores, and which songs you have already heard — so the Game can avoid repeating them for you.
Technical. A single essential session cookie to keep you logged in, and your IP address transiently, used only to rate-limit abuse.

How we use it

To authenticate you and keep you signed in.
To run multiplayer games and play music through Spotify.
To avoid replaying songs you’ve already heard.
To protect the service from abuse.

We do not sell your data or use it for advertising.

Third parties

Spotify — music playback and account info (subject to Spotify’s Privacy Policy).
Google — optional sign-in (subject to Google’s Privacy Policy).
Resend — sends your one-time login-code emails.
Amazon Web Services — hosting and database, in the EU (Ireland, eu-west-1).

Storage & security

Data is stored in a PostgreSQL database hosted on AWS in the EU. Spotify refresh tokens are encrypted (AES-256-GCM). All traffic is served over HTTPS.

Retention & your choices

You can disconnect Spotify at any time from the app, which deletes the stored Spotify token.
You can request deletion of your account and associated data by emailing us (below).

Children

The Game is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; the “last updated” date above reflects the latest version.

Contact

Questions or deletion requests: roybarda6@gmail.com.