Privacy Policy

SongRace is the music guessing game available at songrace.com. For privacy requests: [email protected]

Account data: email address, display name, password (stored hashed), email verification status.

Gameplay data: room participation, guesses, scores, friend requests, and game history.

Device / notifications: on mobile, push tokens (Expo Push Token) and platform info when you enable notifications.

Technical data: IP address, browser/device info, cookies, session data; logs for security and debugging.

Payment data: On the web, Premium checkout is handled by our payment provider (iyzico); we do not store full card numbers. On mobile, subscriptions are managed via the App Store / Google Play and RevenueCat, which may share subscription status with us.

Create and authenticate your account.

Operate the game (rooms, scores, friends, invites).

Verify Premium entitlements and unlock features.

Send email verification and password reset messages.

Send push notifications such as room invites (if permitted).

Security, abuse prevention, error monitoring, and service improvement.

Comply with legal obligations.

Hosting and infrastructure (e.g. cloud hosting, Cloudflare).

Payments: iyzico (web), Apple App Store / Google Play and RevenueCat (mobile).

Deezer API for track metadata / short previews (we do not create a Deezer account for you).

Analytics: PostHog.

Error monitoring: Sentry.

Mobile push: Expo / related push infrastructure.

These parties process data only as needed to provide the service and have their own privacy policies.

On the web we use session cookies (Auth.js / NextAuth) to keep you signed in. Essential cookies may be used for security and preferences. You can manage cookies in your browser; disabling essential cookies may prevent login.

Account data is kept while your account is active. After a deletion request we delete or anonymize data within a reasonable time, subject to legal retention requirements. Backups and logs may be retained for a limited period.

Under Turkish KVKK and, where applicable, GDPR, you may request access, correction, deletion, restriction, objection, and data portability. Contact [email protected]. We may need to verify your identity.

SongRace is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we learn we have, we will delete it.

Data may be processed in countries where our providers operate (e.g. EU / US). We aim to use appropriate safeguards for transfers.

Passwords are hashed; HTTPS is used; access controls apply. No method is 100% secure—contact us if you suspect an issue.

We may update this policy. Material changes will update the “Last updated” date. The current version is always at https://songrace.com/privacy.

Privacy requests: [email protected]\nWebsite: https://songrace.com