Legal

Privacy policy

Last updated 7 November 2026 · Version française

This is a translation. If it differs from the French version, the French version prevails.

Who is responsible

Your data is handled by the publisher of EarRush, described in the legal notice.

What we collect

Guest account: a random id, your nickname and your country, worked out from your connection (never your precise location).
Google sign-in (if you choose it): your Google account id and verified email address. We never receive your password or contacts.
Games: your answers, answer times and scores, solo, online and live.
Premium: when your access ends, the codes you used, and your subscription status (plan, renewal, cancellation). Payment is handled by our reseller: we never see your card.
Limits and security: how many games you played each day, and your IP address attached to a request counter to block abuse.

Why

To run the game, the leaderboards and your account (performing the terms of use).
To apply the free plan's limits and provide Premium (performing the contract).
To protect the service from cheating and abuse (legitimate interest).

No ads, no selling data, no advertising trackers. We only measure traffic in aggregate: visits and page views (Cloudflare Web Analytics, without cookies), and how many visits and games each of our shared links brings.

Cookies

We use a signed session cookie that keeps you signed in (1 year) and a language cookie (1 year). If you arrive through one of our shared links, a cookie remembers that link's name (30 days) to count, in aggregate, the games it brings. Your browser also remembers that you confirmed your age. These are either needed to run the service or used only for aggregate audience counts, so they don't need consent.

How long we keep it

Account and scores: as long as the account exists, until you ask us to delete it.
Games in progress: a few hours. Daily counters: 7 days. IP-based counters: about 1 day.

Service providers

Cloudflare, Inc.: hosting and delivery of the site (United States, under the EU-US Data Privacy Framework).
Supabase, Inc.: database, hosted in the United Kingdom (recognised as adequate by the European Commission), and live game updates.
Google: sign-in with Google, only if you choose it.
Lemon Squeezy (Lemon Squeezy, LLC, United States): sells Premium as our reseller, takes the payment and issues the invoice. It receives your email and payment details, under its own privacy policy.
Apple: clips and artwork load, and artist searches go, straight from your browser to Apple's servers, which therefore receive your IP address and what you searched for.

Your rights

You can access, correct or delete your data, get a copy in a readable format, restrict its use or object to it. To do so, contact us with your nickname. You can also complain to the CNIL, the French data protection authority (www.cnil.fr).

Children

The game is for players aged 15 and over. Under 15, a parent's agreement is needed. A parent can ask us to delete their child's account.

What we collect

Guest account: a random id, your nickname and your country, worked out from your connection (never your precise location).

Google sign-in (if you choose it): your Google account id and verified email address. We never receive your password or contacts.

Games: your answers, answer times and scores, solo, online and live.

Premium: when your access ends, the codes you used, and your subscription status (plan, renewal, cancellation). Payment is handled by our reseller: we never see your card.

Limits and security: how many games you played each day, and your IP address attached to a request counter to block abuse.

Why

To run the game, the leaderboards and your account (performing the terms of use).

To apply the free plan's limits and provide Premium (performing the contract).

To protect the service from cheating and abuse (legitimate interest).

Service providers

Cloudflare, Inc.: hosting and delivery of the site (United States, under the EU-US Data Privacy Framework).

Supabase, Inc.: database, hosted in the United Kingdom (recognised as adequate by the European Commission), and live game updates.

Google: sign-in with Google, only if you choose it.

Lemon Squeezy (Lemon Squeezy, LLC, United States): sells Premium as our reseller, takes the payment and issues the invoice. It receives your email and payment details, under its own privacy policy.

Apple: clips and artwork load, and artist searches go, straight from your browser to Apple's servers, which therefore receive your IP address and what you searched for.