Last updated: July 25, 2026
K-Pop Heardle (“we”, “us”) is a free music-guessing game. This page explains what data we collect and how it is used. You can play the whole game without an account; creating one is optional and only adds cross-device stats.
Local storage
When you play without an account, your game progress, statistics, theme preference, and other game settings are stored locally in your browser (via localStorage). This game data stays on your device and is not transmitted to us.
Accounts
If you choose to create an account, we collect and store the information needed to run it: your email address, a username, an optional display name, and an optional profile picture you upload. Once signed in, your game results and statistics (scores, streaks, and guess history) are saved to our servers so they stay in sync across your devices.
If you played as a guest before signing up, we make a one-time copy of your existing local stats into your account as a separate “pre-account” record. It is clearly labelled as unverified and is never mixed into your account’s official stats.
Account data is processed by Supabase (authentication, database, and profile-picture storage) and Resend (sending verification, password-reset, and security emails). If you sign in with Google, Google shares your email address and basic profile with us to create the account.
Data retention & deletion
We keep your account data for as long as your account exists. You can delete your account at any time from your profile settings; this permanently removes your email, profile, and stored stats from our servers. You can also request deletion via the contact channels below.
Donations
If you choose to support K-Pop Heardle, payment checkout is provided by Stripe. Stripe may collect your name, email address, billing details, payment information, and device or fraud-prevention data. We send Stripe the donation amount and receive the Checkout Session and payment status. K-Pop Heardle does not receive or store your full card number, and it does not keep a separate donor database.
Feedback
The feedback form collects a category, your message, and an optional reply email. Submissions are sent to the site operator through Resend and are not written to the application database. They may remain in the operator's inbox and Resend's delivery systems as needed to review and respond.
The form uses Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. Cloudflare may process browser, device, and network information for that security check.
Advertising
We display one manually placed Google AdSense banner on the home page. Artist game pages may display a horizontal banner after gameplay on mobile, a banner below the artist's catalog context, and Google-managed side rail ads when enough desktop screen space is available. The mobile banner is separated from game controls to reduce accidental interactions.
The artists directory, account, privacy, multiplayer, donation, feedback, guide, error, and temporary pages contain no manual ad units. We exclude non-artist routes from Auto Ads so side rails are reserved for artist game pages. Google's AdSense code may still load elsewhere to provide regional privacy controls.
Google and its partners may use cookies and similar technologies to serve and measure ads. Outside regions that require prior consent, eligible ads may load automatically. In the European Economic Area, the United Kingdom, and Switzerland, Google's certified consent platform asks for applicable choices before using data for personalized advertising. Personalized ads are eligible only when the required consent has been provided. If consent is refused or unavailable, Google may serve limited ads when eligible.
In covered US states, Google provides a “Do Not Sell or Share My Personal Information” control for applicable advertising choices. You can learn more about Google's advertising technologies at Google's Advertising page.
Analytics
We use privacy-friendly Vercel Analytics to understand aggregate traffic and performance. It does not use cross-site tracking cookies or identify individual visitors.
Your choices
Where Google displays regional privacy controls, use the “Privacy and cookie settings” or “Do Not Sell or Share My Personal Information” link to review or change your choices. You may also use your browser or Google Ad Settings to control ad personalization.
Contact
You can delete an accessible account from your profile settings. For other questions, corrections, or requests, use the feedback form.