Privacy Policy

1. Who we are

Hit Reveal (“we”, “us”) is a daily music game operated by Hit Reveal Ltd, a company based in the United Kingdom. For any privacy questions or requests, contact support@hitreveal.com.

2. Age

Hit Reveal is for people aged 13 and over. If you’re under 13, please don’t use it or give us any information.

3. What we collect

• Account: your email address, username, display name, and timezone.
• Sign in with Google or Apple: if you use these, we receive your email address (or, with Apple, a private relay address if you choose to hide it) and a sign-in identifier. We never see your Google or Apple password.
• Your activity: the songs you pick each day, any note you add, and which prompts you’ve played.
• Social: your friends, group memberships, and anyone you block.
• Spotify: searching for songs sends your search terms to Spotify to return results.
• Push notifications: if you turn on reminders, we store a push token for your device so we can send them. You can switch them off at any time in Settings or in your device’s notification settings.
• Usage analytics: which screens and features you use, tied to your account ID and username (not your email), so we can see what’s working.
• Crash and error reports: if something goes wrong, we receive the error, your device and browser type, the app version, and the screen you were on.
• Reports: if you report a problem, we receive your message plus basic technical context (the screen you were on, your device and browser type, and screen size) to help us fix it.
• Technical: standard information our hosting providers process to run and secure the service, such as your IP address and app logs.

4. How we use it, and our legal basis

• To run the game and your account — basis: performance of our contract with you.
• To send essential emails (confirming your address, password resets) — contract.
• To send the reminders and notifications you’ve turned on — your consent, which you can withdraw at any time.
• To keep the service secure, prevent abuse, and find and fix crashes and bugs — our legitimate interests.
• To understand how Hit Reveal is used and improve it — our legitimate interests.

We do not sell your data, and we don’t use advertising trackers.

5. Who we share it with

We use trusted providers who process data on our behalf:

• Supabase — database, accounts, and backend.
• Vercel — website hosting and cookieless traffic analytics.
• Resend — sending our emails.
• Spotify — song search.
• PostHog — product analytics (hosted in the EU).
• Sentry — crash and error reporting.
• Google and Apple — sign-in, if you choose it, and delivering push notifications to Android and iOS devices (Firebase Cloud Messaging and Apple Push Notification service).

We share data with them only to run Hit Reveal. We may also disclose information if required by law.

6. Keeping and deleting your data

We keep your information while your account is active. You can delete your account at any time in Settings → Account, which permanently removes your profile, picks, friends, and groups. Some minimal records may persist briefly in backups or where we’re legally required to keep them.

7. Your rights

Under UK data protection law you can ask to access, correct, or delete your data, object to certain uses, or receive a copy. Contact support@hitreveal.com and we’ll respond. If you’re unhappy with how we handle your data, you can complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies and local storage

We store a small amount of data on your device to keep you signed in, remember things like which one-time tips you’ve seen, and give our analytics a stable identifier. We don’t use advertising or cross-site tracking cookies.

9. Security

We protect your data with access controls and encryption in transit, but no online service can be guaranteed 100% secure.

10. Changes

We may update this policy; we’ll change the date above and, for significant changes, let you know in the app.

11. Contact

Questions? Email support@hitreveal.com.