Privacy policy

The short version

• There are no accounts and no sign-in. We never ask for your name, email or password.
• There are no ads, and nothing is sold or shared for advertising.
• Your progress lives on your device. We do use an analytics service (Amplitude) that records how the game is used, including a replay of each visit. Details below.

What stays on your device

Your game progress, stats and streaks, your light or dark theme, which help screens you have seen, your daily reminder choice (on or off, and the time you picked; iPhone app only) and a cache of song preview links are kept in your browser’s storage on your device. We never receive them.

In the iPhone app, a copy of your progress and these settings is also kept in the app’s own storage on the device, so it survives if iOS clears the app’s web storage. We never receive that copy either. It may be included in your own device backups (iCloud or a computer), like other app data.

Clearing your browser’s site data, or deleting the app, removes all of this. That also resets your streaks.

Analytics and session replay

We use Amplitudeto understand which games people play and where they get stuck. It is on for everyone, in the browser and in the app. There is no setting to switch it off yet; see “Your choices” below.

What it collects:

• Game events: a game started, finished or given up, with the game, crate, result and your streak and score totals, when a result is shared (only how it was shared, not the text), and when the tip jar is opened (never whether you tipped).
• Automatic usage events: page views (with the page address, including any campaign tags, ad click identifiers or referrer it was opened from), taps and clicks on buttons and links with their labels, scrolling, frustrated taps such as repeated or dead clicks, page speed and responsiveness measurements, and server errors.
• Session replay: a recording of every session, meaning what was shown on screen and how it was used (taps, scrolls, mouse movement). Text typed into inputs, such as the song guess box, is masked. Everything else on screen is recorded as shown, including song titles, artists, hints, results and scores.
• Device details: your browser or app, operating system, screen size and language. In the app the browser details include a “TrackdownApp” tag, and the app marks its visits as app visits, so we can tell them apart from website visits. That mark is not a user ID.
• A device identifier: a random ID generated on your device and attached to every event, so one device’s visits can be grouped together. It is not tied to your name or any account. We never set a user ID.
• Your IP address, which Amplitude uses to work out an approximate location (country, region and city). Our server passes the address along when it forwards analytics.

Most of this is sent through our own domain (playtrackdown.com), which forwards it to Amplitude. Amplitude’s software also talks to Amplitude directly from your device: it loads scripts from cdn.amplitude.com, contacts gs.amplitude.com, and in a small share of sessions sends diagnostics about the analytics software itself. So Amplitude receives some data, including your IP address and device identifier, straight from your device as well.

Amplitude keeps the analytics data and acts as our service provider. It is kept for as long as our Amplitude settings retain it; see the Amplitude privacy policy for how it handles data. We do not know who you are: there are no accounts and no user ID, and we never connect this data to your name or email. It is tied to the random device identifier and to the approximate location worked out from your IP address, which is why Apple’s privacy labels count it as linked to you. We do not combine it with data from other companies’ apps or websites, and it is not used for advertising or for tracking you across other apps and sites.

Cookies and browser storage

Amplitude stores a first-party cookie (its name starts with AMP_) for up to a year, plus a few entries in local and session storage. They hold the device identifier, the current session, queued events and where a visit came from. We set no other cookies, and there are no advertising cookies.

Song previews and artwork

The audio clips and cover art are short previews. Our server looks songs up with Apple’s iTunes Search API and, as a fallback, Deezer’s API. Those requests contain only the song, never anything about you.

Your device then downloads the preview and artwork directly from Apple’s or Deezer’s servers, so they can see that request, including your IP address. Tapping “Listen on Apple Music” takes you to Apple. Their privacy policies apply to what they do with it.

Daily reminders (iPhone app)

If you turn on the daily reminder, the app asks iOS for permission and schedules a notification on your phone at the time you pick. It is scheduled and delivered by your device: there is no push server, and no notification token is created or sent anywhere. Turn it off in the app, or in the Settings app under Notifications.

Sharing and hosting

When you share a result, your device’s share sheet or clipboard is used and we never see where it goes. The site is hosted on Vercel, which, like any web host, processes request details such as your IP address and browser to serve the pages.

Tips

Tipping is optional and unlocks nothing. On the website, “Buy me a coffee” takes you to Ko-fi, which handles the payment under its own privacy policy; we see only what Ko-fi shows creators, such as a name or message you choose to leave. In the iPhone app, tips are in-app purchases handled by Apple: we never receive your payment details, and the app only remembers on your device that you tipped, so it can say thanks.

Your choices

There is no analytics on/off switch in the site or app today, and we would rather say so than pretend otherwise. You can email support@playtrackdown.com and ask us to delete the analytics data associated with your device. Because there are no accounts, we can only find it through the device identifier, so we will work out with you how to locate it. Deleting the app or clearing site data removes the identifier and cookie from your device, but it does not remove data already sent.

Children

Trackdown is not directed at children under 13, and we do not knowingly collect personal information from them. If you think a child’s data has reached us, email support@playtrackdown.com and we will look into it.

Changes and contact

If this page changes in a way that matters, the date at the top will change with it. Questions? Email support@playtrackdown.com.