Privacy Policy

Tunebash uses YouTube API Services to help users discover music and match artists and tracks to official YouTube channels and videos. This includes retrieving public YouTube metadata and embedding public YouTube videos for playback where permitted.

Tunebash accesses the YouTube Data API using a server-side API key. We do not require users to sign in with a Google Account to access YouTube API functionality. Sign-in with Google or Facebook on Tunebash is for Tunebash account features only and is separate from YouTube API access.

YouTube data we may retrieve through the YouTube Data API includes public metadata such as:

• YouTube video IDs and titles
• Channel IDs, channel titles, and public thumbnails
• Public playlist and playlist item metadata (where used)
• Embeddability and other fields needed to show official videos

What we store: To reduce repeated API calls, Tunebash may cache YouTube video IDs and related public metadata (for example video title, channel name, and thumbnail URL) in our database when we match a track to a YouTube video. This cached YouTube metadata is treated as refreshable reference data and is refreshed or deleted within 30 days, consistent with YouTube API Services policies for non-authorized API data.

What we do not store from YouTube: We do not download or permanently host YouTube video or audio files. Playback uses the YouTube embedded player. We do not access private YouTube account data, uploads, subscriptions, or comments through the YouTube API.

Google's Privacy Policy explains how Google handles information in its services: https://policies.google.com/privacy

YouTube API Services terms and developer policies apply to our use of YouTube data: YouTube API Services Terms of Service · Developer Policies

Account information. If you sign in, we receive information from your identity provider (Google or Facebook), such as your name, email address, profile photo, and birthday when available.

Social features. If you use Facebook sign-in, we may receive a list of Facebook friends who also use Tunebash so we can show shared song likes. We do not receive your full Facebook friend list.

Activity on Tunebash. We store song likes, friendships within Tunebash, and preferences you create on the service.

Chrome extension. If you use the Tunebash Chrome extension, it stores player state on your device (queue, recent tracks, and local playback cache) and uses your signed-in Tunebash session for favorites and playlists. The extension only runs on Tunebash pages and does not access unrelated browsing history.

Listening measurement. The website and extension store a random identifier on your device and use temporary session identifiers to measure first opens, playback starts, meaningful listening, completed plays, and return visits. These measurements include the app version and country, but do not include your name, email, song titles, or unrelated browsing history. They help us understand usage and diagnose reliability problems. Website and extension installations are counted separately; an installation is not necessarily one person.

Technical data. Our hosting providers may log IP addresses, browser type, and request metadata for security and reliability.

Chrome Web Store links. When you choose an install link on Tunebash, we count the click and its page placement and country. The link includes campaign tags so the Chrome Web Store can report which Tunebash link led to a listing visit or install. This click measurement does not store your IP address, search terms, or listening history.

• Provide search, playback, artist intelligence, and social features
• Match tracks to official YouTube videos and enrich catalog records
• Improve reliability through caching and crowdsourced stream resolution
• Respond to support requests and protect against abuse
• Comply with legal obligations

We do not sell your personal information or your music library.

Tunebash relies on third parties to operate, including:

• Supabase (authentication and database)
• Vercel (hosting)
• YouTube / Google (video metadata and embedded playback)
• Other music metadata and preview providers where applicable

Each third party processes data under its own terms and privacy policies. Embedded YouTube content is subject to Google's policies when you interact with the player.

Tunebash uses essential cookies for sign-in sessions and preferences (for example chart region selection). We do not use third-party advertising cookies on the core service.

Account data is kept while your account is active. YouTube-derived metadata (video id, title, channel, and thumbnail URL used to resolve a track) is stored only to avoid repeat Data API lookups. We do not store or display YouTube statistics such as view counts, likes, or subscriber counts. Cached YouTube metadata is deleted on read if it is older than 30 days, and a daily job purges any remaining expired rows. Server logs are retained for a limited period for security and debugging.

Listening session summaries are retained for up to 30 days and daily installation summaries for up to 90 days, plus the interval until the next daily cleanup. Installation records expire after 90 days without measured activity. Clearing the website's local storage or uninstalling the extension removes its identifier from your device; previous measurement records expire under these retention periods.

You may sign out at any time from your account page. You may permanently delete your Tunebash account and associated profile, likes, and friendships from account settings.

Account settings → Delete account

To request deletion of other personal data, contact privacy@tunebash.com. We will respond within a reasonable time.

If Tunebash later adds features that access YouTube account data through Google OAuth, users will be able to revoke Tunebash's access through Google security settings, and we will delete associated YouTube authorization data when consent is revoked.

Tunebash is not directed at children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date.

Questions about this Privacy Policy or our data practices: privacy@tunebash.com