Privacy Policy

• Account details — your email, username, display name, profile picture, bio, and other profile information you provide.
• Your name and photo from Google or Discord — if you sign up with Google or Discord, your public profile starts with the name and profile picture from that account, and your username is made from that name. You can change your display name, username and picture at any time in Settings.
• Connected accounts — if you link a provider (such as Google, Spotify, or Discord), we store the basic profile details needed to display and verify the connection. We never receive your password for those services. We read the accounts you have linked on Discord only when you ask us to in Settings → Connections, and show them on your profile only if you turn them on.
• Usage data — activity such as plays, favorites (including when you added them), playlists, follows, and interactions, used to power your library and personalize the experience. When you save a song for offline, we record which song, its size and when, the same way we count downloads.
• Presence — while you use the site signed in, whether you are online and, if your status allows it, what you are listening to. See section 3 for who can see it.
• Device and log data — technical information collected automatically for security, abuse prevention and reliability: your full IP address, your browser and device type (user agent), and timestamps, including on downloads. We clear IP addresses, browsers and devices from our logs after 90 days.
• Visit counts — our own counter notes each page you open: the page (with usernames and share links removed), the site that sent you, your country, the kind of device and browser, whether you use the installed app, and whether you're signed in (yes or no, never which account). It uses no cookies. To count visitors without knowing who they are, your IP address and browser are turned into a random number that changes every day; the IP address itself is never stored, and the key that makes the number is deleted when the day ends, so those numbers can't be linked across days or traced back to you. Single page views are deleted after 35 days; only daily totals are kept.
• A visitor id and where new accounts come from — so we can tell a returning visitor from a new one, your browser makes a random id for itself, keeps it in its own storage and replaces it every month; it is sent with each page view and is never linked to your account. Your browser also remembers the first page it landed on, and when you create an account it tells us two words, once: the kind of page (an artist page, say) and where the visit came from (a search engine, say). If your browser sends Global Privacy Control or Do Not Track, it does neither.
• How searches end — when a search on Home ends, we note how: which kind of result you tapped (an artist, a song or an album) and how far down, or that you closed it; how many results there were; and how many words and letters the search had. Never the words themselves, and never your account. These notes are deleted after 35 days. If your browser sends Global Privacy Control or Do Not Track, none are sent.

We use your data to provide and secure the service, sync your library across devices, enable social and community features, process premium purchases, prevent abuse, and improve the product. We do not use your data for purposes you wouldn't reasonably expect.

We do not sell your personal data. We share it only with the service providers that help us operate — including our hosting and database provider, our payment processor, the sign-in and connection providers you choose to link, and our analytics providers (Google Analytics and Vercel Analytics, which see the pages you visit; we remove search terms, profile handles and share links from the page addresses, and names from profile page titles, before they go to Google Analytics). We may also disclose information when required by law.

What other people can see:

• Your profile — your display name, username, picture and bio are public: anyone can see them, including people who are not signed in, and search engines may list your profile page. Your favorites, playlists and follower lists are public too, unless you make your account private or hide them in Settings → Privacy. With a private account, only followers you approve see them; your name, picture and bio stay visible. Profile details you mark as public (such as a connected Spotify or YouTube account) are visible to everyone.
• Your presence — signed-in members can see whether you are online now and what you are listening to (if your account is private, only your approved followers see what you play). Someone you block sees neither. Other members are never shown when you were last online. Where the Away or Offline status is offered, Away hides your music, and Offline shows nothing at all: no status, no music on the Discord status of our desktop app, and no place on the leaderboards.
• Leaderboards — the public leaderboards show the top listeners' display name, picture and play count to anyone. Private accounts are included. You can leave them with "Hide me from leaderboards" in Settings → Privacy.
• Blocking — when you block someone, they can no longer message you, see your presence or what you play, or see your favorites, playlists or follower lists, and any follows between you end.
• Chat — messages you send in a group chat or the hub are visible to its members, with your display name and picture.

When you sign in with or connect Google, we access basic Google profile information — your name, email address, profile picture, and a stable Google account identifier. We use them to sign you in, to display a verified Google-based connection on your account, and, when you sign up with Google, to set up your public profile: your display name and profile picture start as your Google name and photo, and your username is made from your name. Anyone can see your public profile (section 3). You can change your display name, username and picture at any time in Settings. Your email address is never shown to other members.

If you additionally choose to link your YouTube channel, we request Google's read-only YouTube (youtube.readonly) scope. We use this access for a single, specific purpose: to look up your own YouTube channel's public details (its channel name, channel ID, and custom URL) so we can identify your channel and show it as a verified connection on your unreleased.world profile.

• What we access — read-only access to your YouTube channel's public identifying details only. We do not access, request, or store your videos, subscriptions, watch history, comments, analytics, or any private YouTube data.
• What we store — only your YouTube channel's display name and public channel URL, saved to your profile so the verified badge can link to it. We do not retain Google access tokens beyond what is needed to complete the connection.
• How we use it — exclusively to provide and display the verified YouTube connection feature. We do not use Google user data for advertising, we do not sell it, and we do not use or transfer it for any purpose other than providing or improving this feature.
• Sharing — your YouTube channel name and link appear on your public profile only if you choose to make the connection visible. You can hide or remove it at any time. We never share Google user data with third parties except as needed to operate this feature.
• Retention and deletion — we keep the stored channel name and URL until you disconnect YouTube, hide the connection, or delete your account, at which point it is removed. You can also revoke unreleased.world's access at any time from your Google Account permissions page.
• Protection of your data — Google user data is transmitted over encrypted connections (HTTPS), and access is limited to what is required to provide the feature.

unreleased.world's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use cookies and browser storage to keep you signed in, remember your preferences, and maintain playback state. You can clear these through your browser, though some features may not work correctly without them.

Our own visit counter sets no cookie. In your browser's storage it keeps only its monthly random visitor id and the first page you landed on (see Visit counts above), and it checks whether you're signed in.

We keep your information for as long as your account is active or as needed to provide the service. IP addresses, browsers and devices in our logs are cleared after 90 days.

Single page views from our visit counter are deleted after 35 days. They never hold your account, IP address or browser, so there is nothing of yours in them to delete when you delete your account; the daily totals stay.

When you delete your account (Settings → Account → Delete Account), we delete your profile, sign-in, playlists, likes, follows, listening and search history, connected accounts and saved devices, your chat messages, and the pictures and files you uploaded, which leave our servers and our CDN within minutes. Replies other people wrote stay theirs, without the quote of your message.

A few things stay, without your name or profile: if you bought Premium, the payment record, because payment records must be kept (Stripe, our payment processor, keeps its own); and download counts, offline-save counts and server logs, with no address or device attached. Deleted data can remain in our encrypted database backups for up to 12 months, and copies of deleted files in our file backups for 30 days, before they expire; backups are only used to recover the service after a disaster.

You can view and update your profile (including your name, username and picture), manage or disconnect linked accounts, make your account, favorites or playlists private, hide yourself from the leaderboards, block people, and delete your account from your settings. Depending on where you live, you may have additional rights to access, correct, or export your data — contact us to make a request.

We use industry-standard measures — including encryption in transit and support for passkeys — to protect your data. No system is perfectly secure, but we work to keep your information safe and to respond quickly to any issues.

unreleased.world is not intended for children under 13, and we do not knowingly collect their personal information.

We may update this policy from time to time. When we do, we'll revise the "last updated" date above and, if we change how we use Google user data, notify users where appropriate.

Questions or privacy requests? Reach us at 00@unreleased.world.