Privacy Policy

Last updated: October 2026

SongFlex is a free browser-based music party game. This policy explains what information is collected when you use SongFlex, how it is used, and your rights.

What we collect

SongFlex collects limited first-party website activity to understand visits, game use, and technical problems:

Website activity

Our server stores a random identifier for each page visit and game segment, timestamps, estimated active time, action counts and the latest action, game completion, player count, music library service, library-load error counts, broad device type, and the referring site's hostname when available. Referral paths and query strings are not included. These records help us understand whether visitors play, how long sessions last, and where loading problems occur.

Activity identifiers are held in page memory and are replaced when you reload; they do not identify returning visitors across visits. We do not store IP addresses or full browser user-agent strings in the activity database. Activity is available only through a protected administrator dashboard. Records expire after 90 days and are removed by an hourly cleanup. Collection is skipped when your browser sends the Do Not Track or Global Privacy Control preference.

Time estimates stop while the page is hidden or after five minutes without interaction. They cannot measure listening in another app or on another device.

Game data stored locally

SongFlex saves your current game state (player names, scores, song positions, and timer settings) in your browser's localStorage. This data never leaves your device — it is not sent to any server. It is used only to let you resume a game after refreshing the page. You can clear it at any time by clearing your browser's site data.

Music libraries (Apple Music & Spotify)

When you choose to load a song library, SongFlex's server fetches a list of songs associated with your selected service (Apple Music or Spotify). This request is made server-side using service credentials configured by SongFlex — your personal streaming account credentials are never shared with or stored by SongFlex. The song list returned is used only to populate the game deck for your current session and is not retained after the session ends.

Server logs

Like all web servers, SongFlex's server may record standard access logs (IP address, request path, timestamp, browser user-agent) as part of normal hosting operations. These logs are used solely for debugging and security monitoring and are not shared with third parties.

Third-party services

When administrator game-start email alerts are enabled, Resend processes an email containing the player count and music library service to notify the site owner. These alerts do not include player names, IP addresses, or visitor identifiers. Local email queue records are removed after seven days. See Resend's privacy policy for its handling of email data.

SongFlex links to the following third-party services. Each has its own privacy policy:

SongFlex does not control and is not responsible for the privacy practices of these third parties.

Children's privacy

SongFlex is not directed at children under 13. We do not knowingly collect any information from children under 13. If you believe a child has provided information through this site, please contact us so we can address it.

Changes to this policy

If this policy changes materially, the "Last updated" date at the top of this page will be updated. We encourage you to review this page periodically.

Contact

Questions about this privacy policy? Use the feedback form or reach out via buymeacoffee.com/songflex.