Privacy Policy

Who we are

BeatGuess is operated by Pierre Wigardt ("we", "us"), a sole trader based in Sweden, trading under the name "BeatGuess". The service is available at beatguess.app and lets you create and play live music quizzes. For privacy-related questions, contact hello@beatguess.app.

Pierre Wigardt is the data controller for personal data processed through BeatGuess. This Privacy Notice explains what we collect, why, and how long we keep it.

Data we collect and why

• Account data (email, unique user id) — to authenticate you and run the service. performance of contract.
• Quiz content (quizzes, questions, answers you create) — to provide the core product. performance of contract.
• Game session data (player display names, answers submitted in live games) — to operate live games. performance of contract.
• Spotify tokens (access + refresh token) — only if you connect Spotify, to call the Spotify API on your behalf. consent.
• Payment metadata (payment processor customer/transaction ids, country, purchase status) — to grant Pro access and handle support. Payment card details are handled solely by our payment processor (Stripe) and never reach our servers. performance of contract / legal obligation.
• Approximate location (one-time IP lookup) — to pick a default UI language. The IP is not stored. legitimate interest.
• Operational logs (error logs, basic request metadata) — to keep the service stable and secure. legitimate interest.

We do not sell personal data, do not run advertising, and do not profile users.

Sub-processors

We share personal data with the following processors strictly to deliver the service:

• Supabase Inc. — authentication, database, file storage (hosted in the EU).
• Cloudflare, Inc. — application hosting, CDN, DDoS protection.
• Stripe Payments Europe, Ltd. — our payment processor. Stripe handles checkout, payment processing, tax calculation, and acts as an independent controller for that transactional data. See Stripe's Privacy Notice.
• Spotify AB — only when you choose a Spotify-powered mode and connect your Spotify account.
• Lovable AI Gateway — for AI-generated quiz questions when you choose an AI mode. Prompts are sent over TLS and are not used for model training.

International transfers

Some sub-processors (e.g. Cloudflare, Stripe, Spotify) may process data outside the EU/EEA. Where this is the case, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep data

• Account & quiz data: kept while your account is active. Deleted within 30 days after you delete your account.
• Live session data (player names, in-game answers): up to 90 days after the session ends, then deleted.
• Spotify tokens: deleted when you disconnect Spotify at spotify.com/account/apps or delete your account.
• Payment / invoicing records: retained for up to 7 years to comply with Swedish bookkeeping law (Bokföringslagen).
• Operational logs: typically 30 days.

Security

We apply industry-standard technical and organisational measures: TLS in transit, encryption at rest at our hosting providers, row-level security in the database so users can only read their own data, scoped API keys, hashed auth credentials managed by Supabase, and least-privilege access for administrative operations. Payment card data is handled exclusively by Stripe within their PCI-DSS environment and never reaches our infrastructure.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, email hello@beatguess.app — we respond within one month. You also have the right to lodge a complaint with the Swedish data protection authority, IMY (imy.se).

Cookies

We use only strictly necessary storage (an authentication cookie/local-storage token and a language preference). No advertising or analytics cookies are set.

Spotify integration

BeatGuess uses the Spotify Web API and Web Playback SDK to let hosts play tracks and view metadata. Spotify Content (covers, artist names, track names) is provided by Spotify and is subject to Spotify's own terms. BeatGuess is not endorsed by, affiliated with, or sponsored by Spotify AB.