Privacy Policy

Information we handle and why

• Account information: your username, display name, email address, assigned user ID, account creation date, and password credentials. An email address is required when you register. We use your registration email address only for account recovery, including username reminders and password-reset links, and to send one transactional welcome email when you register. We do not use it for marketing or promotional messages, and we never sell email addresses to third parties. We store a password hash rather than your readable password. Account credentials and session tokens let us authenticate you and protect your library.
• Profile photo: the image you choose to upload, used to represent you in the app and social features. Uploading a photo is optional.
• Cards and library: scanned card identifiers and validation tokens, redeemed card instances, the songs they unlock, redemption dates, ownership counts, and the history of archetypes you have owned. We use these to validate physical cards, prevent repeat redemption, and authorize music and artwork access.
• Listening activity: songs played, play counts, and server activity timestamps associated with your user ID. We use these for listening history, activity records, and playback features. Your device also keeps recent playback state and a rolling week of play counts to manage offline caching.
• Trophy selections: which songs you place in the three trophy positions and their order, so the app can restore your case and show it to friends.
• Friends and trades: friend relationships, temporary pairing identifiers and proofs, trade participants, scanned cards, trade status and timestamps, and completed ownership transfers. We use these to confirm mutual connections and complete authorized exchanges.
• Reports and blocks: blocked-account relationships and reports that include the reporting and reported account identifiers, the selected report reason, moderation status, and timestamps. We use these records to prevent unwanted interaction, review reported conduct, enforce our rules, and support users.
• Technical and service records: our hosting and delivery systems process IP addresses and connection information. Application access and error logs can include request times, requested URLs and identifiers contained in them, user-agent or referring-page information, response status, and error details. These records support delivery, troubleshooting, security, and fraud prevention.
• Communications: if you email us, we receive your email address and whatever information you include to answer your question or handle your request.

Device access and local storage

The camera reads QR codes on your device. The app sends the decoded card identifier and token to the server; it does not upload the camera preview as a video stream. Photo access lets you select a profile image. We do not upload your entire photo library.

On supported iPhone builds, nearby friend discovery uses Bluetooth and local networking. Temporary discovery information, display information, and a profile photo may be exchanged with nearby people using that feature. Friendship requires confirmation by both people. The app does not read your address book or request GPS coordinates from a location service. Android builds may declare location-related permissions for nearby connectivity; the current Android nearby-pairing feature is unavailable.

Device motion is used locally for visual reflections and animation. We do not upload those motion readings. Your device stores login/session information, library and trophy details, playback state, artwork, and cached music. Removing the app or clearing its storage removes local app data subject to your device's backup and restore settings; signing out alone does not necessarily erase every cached file.

Song titles, artist information, artwork, and playback state are provided to your device's music controls, including connected displays such as CarPlay, so you can control playback outside the app.

Who receives information

Your friends can see your display name, profile photo, and trophy selections. Nearby participants can receive the discovery/profile information needed to recognize and connect with you. Trading participants receive the information and card artwork needed to complete and display their exchange.

Reports and block records are available to authorized Green Noise Records personnel for moderation, service administration, and support. Blocking removes the friendship and prevents pairing and trading between the two accounts. Reporting is a separate action and does not automatically block the reported account.

We use Amazon Web Services Lightsail to run the API and Cloudflare to provide network delivery, security, database storage (D1), file storage (R2), and this policy page. We also use Google Workspace to send the one-time welcome email and account-recovery emails; Google processes recipients' email addresses and message content to provide this service. These providers process information to operate those services. Authorized Green Noise Records personnel can access account and activity records for service administration and support.

We do not sell personal information or use the app's data for targeted advertising or cross-app advertising tracking. The current app does not include an advertising SDK. We may disclose information when required by law or when reasonably necessary to protect the service, investigate abuse, or protect people's rights and safety.

Infrastructure providers may process data in countries other than your own. External sites you choose to open, including support or store pages, have their own privacy practices.

Retention and security

We keep account, library, listening, friendship, trade, block, and report records while your account exists to provide these features, maintain ownership history, and support moderation. Temporary friend invitations expire after three minutes, and pending trades expire after ten minutes. Expiration prevents further use; it does not mean that every related database record is immediately erased.

Operational logs are retained according to system storage and rotation limits; a fixed time-based deletion period is not currently configured. Administrative backups may contain earlier copies of account records until those backups are replaced or deleted. Backup copies are not part of the active app account. Contact us to discuss a deletion request that includes retained logs or backups; we may need to retain limited records for legal or security reasons.

Production connections use HTTPS. Passwords are hashed, API requests require authenticated sessions where appropriate, and private media is delivered using authorized, short-lived URLs. No storage or transmission system can guarantee absolute security.

Delete your account or request deletion

Account deletion removes the active account, password hash, uploaded profile photos, trophy selections, friend, pairing, block, and report records, play records, and related redemption and trade activity records. The owner reference is removed from your physical card instances. The card records remain marked redeemed and tagged out-of-service to prevent reuse; deleting your account does not make those cards redeemable again. The retained-log and backup limitations described above apply.

You can change your display name and profile photo in the app and control camera, photo, Bluetooth, and local-network permissions through your device settings. Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or object to certain processing. Contact us to exercise those rights.

Contact and policy updates

Green Noise Records, LLC
Privacy questions and requests: legal@gnr-music.com

We may update this policy as the app or our practices change. The current version will remain available at gnr-music.com/jukebox/privacy, with its effective date.