Privacy policy

Who processes your data

TrackGuess is a free music game in open beta. The person responsible for the service is the controller of the data described here and handles requests from data subjects through the channel indicated at the end of this page.

Data we collect

We collect only what is necessary for your account to work, for matches to be fair and for the service to stay secure:

• Registration: username, display name, email and password. The password is stored only as a hash and no one can read it.
• Guest: only the display name and what happens in matches. The guest account is anonymized when the browser session ends, unless you create an account first.
• Profile and preferences: avatar (optional), theme, color, volume and any other settings you choose.
• Library: the favorite songs and playlists you build.
• Matches: rooms you took part in, guesses, response times, scores and results.
• Connection and playback: audio latency, jitter and delay measured during the match, to synchronize the game and diagnose failures.
• Security: IP address and browser identification in events such as logins, rejected attempts and ended sessions. The IP address also appears in technical access logs.
• Acceptance of these texts: the accepted version and the date of acceptance.
• Technical monitoring: errors, response times and technical logs from the server and the browser (page, action, browser, operating system, IP address) and, for a portion of visits and for visits with errors, a session recording with all text and fields masked.
• Feedback, only when you send it: what you write, the screen you sent it from, your browser and, unless you uncheck it, technical data (app version, window size, language, theme, the match or room you were in and the session's latest errors). Also the images you attach and the screenshot, which is only taken when you request it, with the browser's permission. The screenshot may show other players' names: you see a preview and can remove it before sending.

We do not collect identity documents, phone number, address, date of birth or precise location, and we do not use advertising tools. Technical monitoring is used only to find and fix errors and slowness, never for profiling.

How we use it and on what legal basis

• Creating and maintaining your account, running matches and storing your library and history: performance of the contract formed by these texts (LGPD, Art. 7, V).
• Sending email address confirmation and password reset emails: performance of the contract.
• Protecting accounts, preventing cheating, abuse and automation, and investigating incidents: legitimate interest (Art. 7, IX), limited to what is necessary for the security of the service.
• Measuring connection and playback to keep the audio synchronized and fix failures: legitimate interest, with a short retention period.
• Monitoring server and browser errors and performance to keep the service running and fix failures: legitimate interest, with a short retention period.
• Reading the feedback you send to fix failures and improve the experience: legitimate interest, with the retention period defined below.

Your data is not sold, is not used for advertising and does not feed commercial profiles.

Who sees it and who we share it with

Other players see your username, display name and avatar, as well as what happens in the matches you play together. Your email is never displayed. Feedback and the images sent with it are seen only by the TrackGuess administration.

Some providers process data on our behalf, solely to provide the service:

• Cloudflare: website delivery, abuse protection (including Turnstile verification, when enabled) and storage of encrypted backups.
• Resend: sending confirmation and password reset emails, with your email address and the content of the message.
• Deezer: previews and cover art are loaded by your browser directly from Deezer, which receives your IP address and the technical data of the request, in accordance with its own privacy policy.
• New Relic: monitoring of server and browser errors and performance, with the technical logs described above and, for a portion of visits, a session recording with all text and fields masked. Passwords, cookies and the content of what you send are not sent to New Relic.

These providers may process data outside Brazil, under Art. 33 of the LGPD. Otherwise, we only share data when required by law or by a court order.

How long we keep it

• Account, library and preferences: for as long as the account exists.
• Match history: for as long as the service exists, to keep scoreboards and results consistent. When the account is deleted, your part is anonymized.
• Security events: 180 days.
• Connection and playback measurements: 30 days.
• Technical access logs: discarded through automatic rotation, usually within a few days.
• Technical monitoring on New Relic: logs, errors and session recordings for up to 30 days; after that, only aggregated metrics, without personal data.
• Feedback: images for 90 days; the report for 180 days after it is resolved or dismissed and, in any case, for no more than one year. Feedback images are not included in backups.
• Backups: encrypted copies of the database for about one month and of removed avatars for 90 days. Deleted data leaves the backups when the copy that contains it expires.

If any retention period is extended, this policy will be updated beforehand.

Account deletion

In Settings, under Delete account, you can remove your account at any time by confirming with your password. If you are in an open room, leave it first.

Deletion erases your email, password, avatar, preferences, favorites and playlists, and ends your sessions. In past matches, your name is replaced with "Removed player", so that other players' results remain correct without identifying you. Security events lose the IP address and browser identification. The images in your feedback are deleted, and the reports lose their link to the account and the browser identification; the text is kept until the period stated above.

Your rights

Under the LGPD (Art. 18), you may request:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data (you can change your display name, email, avatar and password directly in Settings);
• anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
• portability of your data;
• information about who we share your data with;
• objection to processing based on legitimate interest.

We respond within 15 days through the channel indicated at the end of this page. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

If you are outside Brazil

TrackGuess is operated in Brazil and follows the LGPD. If you are in the European Union, the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) may also apply to you:

• the legal bases above correspond to the performance of a contract (Art. 6(1)(b) GDPR) and to legitimate interests (Art. 6(1)(f));
• you have the rights of access, rectification, erasure, restriction of processing, portability and objection, through the same channel on this page;
• you can lodge a complaint with the data protection authority of your country;
• your data is processed in Brazil and by the providers listed above, some with servers in other countries, such as the United States, under the contractual safeguards these providers offer for international transfers.

Cookies and local storage

We use only essential cookies: the session cookie, which keeps you logged in, and the cookie that protects against forged requests (XSRF). Theme and volume are kept in the browser's local storage. Technical monitoring stores a visit identifier in the browser, to link the errors and the recording of the same session. There are no advertising cookies. If you are in the European Union, the European Economic Area or the United Kingdom, this monitoring only starts after you accept, and you can change your choice on this page.

Security

We use encrypted connections (HTTPS), hashed passwords, protected session cookies, attempt limits, bot verification and encrypted backups. No system is infallible: if an incident may pose a significant risk or harm to you, we will notify you and the ANPD.

Children and adolescents

The beta is intended for people aged 18 or older. If we become aware of an account belonging to a minor, it will be deleted.

Changes to this policy

When the policy changes materially, we will notify you in the app or by email before the change takes effect. The date of the current version is shown at the top of this page.

Language of this policy

This policy is available in Portuguese, English and Spanish. The translations are provided for convenience; if they differ, the Portuguese version prevails.