Privacy policy
What GuessTheSong.io collects, why, and how to get it removed. Written in plain language. Last updated 24 October 2026.
Who we are
GuessTheSong.io ("we", "the site") is an online music quiz operated from the Netherlands. For anything related to this policy, including data access or deletion requests, email [email protected]. We aim to answer within one month.
What we store
- Guest players: the nickname you type, the room you are in, your guesses and chat messages, and your score. This lives in server memory for the duration of the game and is discarded when the room closes. We keep anonymous statistics about finished games (theme, number of rounds, number of players, round time and start time) to see which themes are popular.
- Registered players: your username, email address, a salted hash of your password (never the password itself), whether the email is verified, your avatar choice, and your results: games played, games won and total score for the leaderboard. Usernames and scores on the leaderboard are public.
- Support messages: if you contact us, we keep your email address and message for as long as needed to reply.
- Server logs: standard web server logs with IP address, browser type, requested page and time, used for security and debugging and rotated regularly.
Real-time connections
Games run over a persistent Socket.IO (WebSocket) connection between your browser and our server. While a room is open, your IP address, nickname, guesses, chat messages and emoji reactions pass through this connection so they can be shown to the other players in the room. Chat messages are not stored after the room closes.
Cookies we set ourselves
These are first-party cookies needed for the game to work or to remember your preferences:
| Cookie | Purpose |
|---|---|
| session / csrf | Keeps you in your room and protects forms against cross-site requests. |
| session_token | Keeps registered players logged in. |
| emoji | Your chosen avatar. |
| visualizer, nightmode, disable_word_censor | Display and chat-filter preferences. |
Advertising: Google AdSense
We use Google AdSense to show advertisements. Google, as a third-party vendor, uses cookies and advertising identifiers to serve ads on this site. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this site and other sites on the internet (ad personalisation). Google may also collect your IP address, device information and which ads you saw. How Google uses data when you use our site is described at policies.google.com/technologies/ads.
You can opt out of personalised advertising by visiting Google Ads Settings. You can opt out of many third-party vendors' use of cookies for personalised advertising at aboutads.info or, in Europe, youronlinechoices.eu. Visitors in the European Economic Area, the UK and Switzerland are shown a consent message before personalised ads are served, and can change their choice at any time through the link in the footer of that message. You can also block or delete cookies in your browser settings; the game will still work.
Analytics and error reporting
- Google Analytics (gtag.js) tells us how many people visit which pages, roughly where they are from and which affiliate banners are clicked. Google processes this data under its own privacy policy. You can opt out with the Google Analytics opt-out add-on.
- Sentry receives a report when something breaks in the game or on the server. A report can include your IP address, browser and operating system, the page you were on and the error itself, so we can reproduce and fix it. Reports are kept for 90 days.
- Google reCAPTCHA protects the registration, login and password-reset forms against bots and is subject to Google's privacy policy.
- Amazon affiliate links may appear as banners. If you click one and buy something, we earn a small commission; Amazon sets its own cookies when you arrive on their site.
Who can see what
Other players in your room see your nickname, avatar, chat messages, wrong guesses and score. Leaderboard entries (username, score, games played and won) are public. We do not sell personal data and we do not share it with anyone other than the service providers listed above, who process it on our behalf.
Children
GuessTheSong is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.
Your rights
Under the GDPR and similar laws you can ask for a copy of the data we hold about you, have it corrected, have it deleted, or object to how it is processed. Registered players can delete their account by emailing us from the registered address. Send any request to [email protected]. You also have the right to complain to your national data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
Changes
If this policy changes in a meaningful way we will update the date at the top of this page. Continued use of the site after a change means you accept the updated policy. See also our terms of service.