Privacy policy

Who runs Exonance

Exonance is run by Triqzel. Questions and requests about your data: disintegration80@gmail.com.

What we collect

• Your account: email address, username, display name and password. Passwords are stored only as a salted PBKDF2 hash, never in plain text.
• Discord: if you sign in or connect with Discord, your Discord user ID.
• Your profile: profile picture, banner, bio, pronouns, status, theme and any profile song you choose.
• Listening: what you're playing now and listening stats your app sends, if you leave those on. You can turn either off in your profile settings.
• Library copy: your library data is stored on our server, one copy per account, so it can be synced. Your music files stay on your device.
• Social: who you follow, follow requests and friends.
• Support: if you support Exonance through Ko-fi, we record your supporter status and date, matched by the email or code you give Ko-fi.
• Security and technical: your IP address, used briefly to slow down repeated sign-in attempts, and the standard logs our hosting keeps.

How we use it

To run your account and profile, show your profile to the people you allow, sync your library, handle support, keep the service secure, and send password reset emails. We don't sell your data and we don't show ads.

Who else handles it

• Cloudflare: hosts the service, the database, and profile pictures.
• Resend: sends password reset emails to the address on your account.
• Discord (if you use Discord sign-in) and Ko-fi (if you support us) under their own policies.
• LRCLIB: lyrics lookups send the track title, artist, album and length.
• Spotify: imports look up public playlist and album details. We don't send your account details to Spotify.
• YouTube: music plays through YouTube's embedded player, so Google's privacy policy applies to that playback.

What other people can see

Your profile (name, username, pictures, bio, status and, unless you turn them off, what you're playing and your stats) is visible to other signed-in people. If your profile is private, only your name, pictures and badges are visible to people who aren't accepted followers.

How long we keep it

We keep your account data until you delete your account. Deleting it in Exonance removes your profile, pictures, library copy, stats, follows, votes, support records, sign-in sessions and reset links. Copies in our providers' backups may remain for a limited time after that. Ko-fi keeps its own payment records.

Your choices

• Change or correct your profile in the app at any time.
• Delete your account from inside the app: Edit profile → Delete account.
• Reset a forgotten password from the sign-in screen. Reset links expire after 30 minutes.
• Ask us for a copy of your data or for deletion by emailing the contact address above.

Children

Exonance isn't meant for children under 13.

Changes

If this policy changes, we'll update the date above and tell people in the app.