Privacy Policy

Placeholder: this page is a plain-language MVP draft written for early beta. It needs review by a real lawyer before any wider public launch. Do not treat it as final legal terms.

This policy explains what collects, why, and what we do (and don't do) with it. Battle TraX is currently a small beta — we are not selling, renting, or advertising against your data.

1. What we collect

Account info: username, email address, and a password (stored as a salted hash — we never see or store your plain-text password).
Content you submit: uploaded audio files, song/artist metadata, comments, voice-note comments, ratings, votes, and profile links you add.
Automatic/technical data: session cookies (to keep you signed in), basic request logs (timestamps, IP address, user agent) used only for security, abuse prevention, and debugging — not for tracking or advertising.
We do not use third-party ad trackers or analytics/ad pixels.

2. Why we collect it

Email is used to verify your account and to send account-related messages (verification links, password resets). We do not send newsletters or marketing email, and we do not share your email with other users or third parties.
Uploaded audio and profile data are used to operate the core product — playing songs in battles, showing your artist profile, and displaying comments/ratings.
Technical logs are used only to keep the service running securely (rate-limiting, detecting abuse, diagnosing bugs).

3. Who can see what

Your artist name, uploaded songs, comments, and public profile links are visible to other users of the platform — that's the point of a battle/voting app. Your email address and password are never shown to other users and are not displayed anywhere on the public site.

4. Third-party services we use

Resend — sends verification and account-recovery emails on our behalf.
Railway — hosts the application server and database.
YouTube / Spotify / Apple Music — if you add a linked song instead of uploading audio, playback happens through that platform's own embedded player, governed by that platform's own privacy policy, not this one.

We do not sell your data to anyone, and we do not share it with advertisers.

5. Cookies

We use a single session cookie to keep you signed in. It is not used for advertising or cross-site tracking, and we do not use third-party tracking cookies.

6. Data retention & deletion

We keep your account data for as long as your account exists. If you want your account and associated data deleted, contact us at clydecoop00@gmail.com and we will remove it, except where we're required to keep limited records (for example, to enforce the DMCA policy against repeat infringers).

7. Children's privacy

is intended for users who are 18 years of age or older. We do not knowingly collect information from anyone under 18. If we learn an account belongs to someone under 18, we will close it and remove the associated data.

8. Changes to this policy

As this is an early beta product, this policy may change as the platform grows. Material changes will be reflected on this page with an updated date.

9. Contact

Questions about this policy or your data: clydecoop00@gmail.com.