Privacy Policy

Information we collect

We collect information you provide or create when using Song Comments:

• Account information, such as your email address and authentication details. If you use a third-party sign-in provider, we receive the basic identity information needed to create and secure your account.
• Public profile information, including your username, avatar, and public comment history.
• Community activity, including comments, replies, likes, reports, blocks, and related moderation records, including notification-read status and moderator actions.
• Spotify track information needed to attach discussions to the correct song, including the track identifier, title, artists, album, and artwork URL shown on the rendered Spotify page. This information does not include your listening history.
• Local extension state, such as selected track information, interface preferences, your last sign-in method, and a sanitized Spotify route and timestamp used to return you to the same page after authentication. The return route remains on your device and is not used to create or transmit a browsing-history log.
• Limited security and operational data, such as timestamps, bounded request counts, error codes, and, when available, a salted form of an IP address used for abuse prevention.

Information we do not collect

We do not collect Spotify passwords, Spotify cookies, Spotify authentication tokens, playback history, a browsing-history log, screenshots, raw page content, or your saved Spotify library. The extension does not sell personal information or use it for targeted advertising.

How we use information

We use information to operate accounts, display and organize public discussions, deliver replies and like notifications, enforce community rules, prevent abuse, maintain security, diagnose failures, and comply with legal obligations.

Public information

Your username, avatar, visible comments, replies, likes, and public comment history may be viewed by anyone using the service. Public content may also be indexed, copied, or shared by others. Deleted or moderated comments may leave a limited placeholder where needed to preserve a conversation.

Service providers and disclosures

We use Supabase to store data, provide backend services, and authenticate accounts; Google and Discord when you choose those sign-in methods; Resend to deliver account emails; and Vercel to host the website and operational monitoring endpoint. Discord also receives limited operational alerts that do not include extension user content or account data. These providers process information only to provide those services. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer.

Chrome Web Store Limited Use

Song Comments' use and transfer of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use user data only to provide, maintain, secure, or improve public song discussions and related account features. We do not sell user data, use or transfer it for personalized advertising or creditworthiness, or use or transfer it for unrelated purposes. Human access is limited to public content and cases needed for user-requested support, moderation and security, legal compliance, or aggregated and anonymized internal operations.

Retention and deletion

We retain information while your account is active and as needed to operate, secure, and comply with legal obligations. Public content remains until you delete it or it is moderated. Some limited records may be retained for fraud prevention, dispute resolution, legal compliance, or conversation integrity. You may request account or data deletion through the contact method below.

Security

We use access controls, data minimization, and technical safeguards intended to protect information. No online service can guarantee absolute security, so please use a unique password and keep your account access private.

Your choices

You can edit or delete your own comments, block other users, update public profile details, or stop using and remove the extension. Depending on where you live, you may have additional rights to access, correct, delete, or receive a copy of your personal information.

Children

Song Comments is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes and contact

We may update this policy as the service changes. The effective date above will reflect material updates. For privacy questions, account deletion, or data requests, email support@songcomments.com.