Privacy policy

What we collect

If you register: your email address, a display name, and a password hash — never the password itself.

If you don't: an anonymous account is created for you with a generated stage name and no email address, so that the room has something to attach your scores and membership to.

While you're in a room: which rooms you have joined, who is present, your microphone and camera on/off state, your position on the stage, chat messages you send, songs you queue, and scores from songs you sing.

If you record a clip: the video file itself, and who shared it. Clips are only created when someone deliberately records one.

If you buy time: a record of the purchase and the minutes it added, plus an identifier linking your account to your Stripe customer record. Card numbers are handled entirely by Stripe and never reach us.

Automatically: a session cookie to keep you signed in, and ordinary server logs (IP address, browser, pages requested) kept briefly for security and debugging.

What we don't collect

Your video and audio. Live video and audio between singers travels directly between browsers where the network allows it, and through a relay where it doesn't. We do not record, store or listen to it. The only video that exists on our servers is a clip somebody chose to record.

Your card details. Payment happens on Stripe's own pages. We receive confirmation that a payment succeeded, and never the card number.

Face data. The 3D avatars track your face in your own browser, on your own device. Nothing from that leaves your machine, and the resulting video is treated exactly like camera video.

Why we collect it

To run the rooms, keep you signed in, show who is present, sync songs and lyrics, keep score, meter room time, take payment, respond to reports about content, and prevent abuse. We do not sell personal information, and we do not run advertising.

Who else is involved

• Stripe — payments. Handles your card details directly.
• OVHcloud — hosting, database, email delivery, and storage for audio and clips.
• A TURN relay provider — relays live video for networks that block direct connections. Relayed media is encrypted end to end and passes through without being stored.
• Google's MediaPipe CDN — the face-tracking model your browser downloads for avatars.
• LRCLIB — synchronised lyrics, fetched by song, not by user.

How long we keep things

Anonymous accounts that never joined a room are deleted after 24 hours. Anonymous accounts that joined a room but never scored a song or shared a clip are deleted after 30 days. Accounts that performed, or that ever paid, are kept until you ask us to delete them.

Clips stay until you delete them or your account. Chat messages live only for the length of a room session and are not stored. Records of payments and the minutes they bought are kept as long as tax and accounting rules require, even after an account is deleted.

Your choices

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. Write to privacy@spif.fyi and we'll do it. Deleting your account removes your clips, scores and memberships; it does not remove records of payments we are required to keep.

Depending on where you live you may have additional rights over your personal data, including to object to processing or to complain to a regulator. Those rights apply here.

Children

spiffyk is not for under-13s and we don't knowingly collect their data. If you believe a child has an account, write to privacy@spif.fyi and we will remove it.

Security, honestly

Passwords are hashed, traffic is encrypted in transit, media between browsers is encrypted end to end, and payment details never touch our systems. No service can promise perfect security, and we won't. If something goes wrong that affects you, we will tell you.

Changes and contact

If we change this policy we will update the effective date at the top, and say so in the app if the change is significant.

Privacy questions: privacy@spif.fyi.