Version 1 · 15 September 2026
We collect very little, because the game needs very little.
That is all of it. When you sign in, we ask Discord for a permission called identify and nothing further, so we never see your email address, your messages, your friends, or your other servers. We could not show them to you if you asked.
Why we need it: so that you are still you tomorrow. Your profile, stats, gang and cosmetics need something to attach to.
If a community Discord server is set up, signing in also asks permission to add you to that server. Discord shows you this on its own permission screen, and it is the only additional thing we ask for.
This is the item people care most about, so here is the whole of it.
Why we need it: bans, and honestly nothing else. Somebody is banned for harassing people, and shortly afterwards they return on a new account. The account is new, but the connection and the browser usually are not. Without these two pieces of information, a ban is only a suggestion.
We look at them when investigating somebody, and a person makes the decision. There is no button that bans everybody sharing an address, because households, shared wifi and mobile networks place strangers behind a single one.
Matches played, wins, tracks submitted, ratings given and received, level and XP, creds, wagers, your gang, and the cosmetics you are wearing.
Why we need it: it is the game itself. Your profile and the leaderboards are made of it.
Lobby chat, gang chat, your display name, your bio, your social links, track titles and gang names.
Why we need it: so that other people can read it, which is what a chat is for.
Everything typed is checked against a list of slurs as it passes through. That happens in memory and stores nothing additional.
Your tracks, beats and samples, and the titles you give them.
Why we need it: so that the room can hear them.
Why we keep the ratings specifically, since it is the least obvious: it is the only way to distinguish friends who play together from friends who arrange results together. The list of who was in a room cannot do that, since a great many people play with people they know. What they scored each other can.
A count, and the site that referred you. No IP address, no device mark and no browser string is stored on a visit. It is four columns, and none of them is you.
Why we need it: to know whether anybody is finding the game.
Stated plainly, because these are the ones people assume:
| What | How long |
|---|---|
| The audio the room plays | Deleted when the lobby closes. Held at a random, unguessable address while it exists |
| The 90 second moderation clip | 30 days, or until a person resolves the report if one is open |
| Match records and ratings | 30 days, same rule |
| Lobby chat | 30 days |
| Gang chat | For as long as the gang exists |
| Your IP address and device mark | Until replaced at your next login |
| The ban log | Kept indefinitely. It is the record that gives a ban meaning |
| Your account, profile and stats | Until you ask us to delete it, or we close it |
| Daily totals, such as how many played or signed up | Kept, although they are totals with nobody's name in them |
We do not sell your data, share it with advertisers, or hand it to anybody for their own purposes. Selling cosmetics in the game does not change that. The shop sells items to you; it does not sell you to anybody.
Three suppliers necessarily handle your data in order to run the game: Discord for sign in and the bot, Cloudflare for storing audio and serving the site, and Railway for running the server and database.
If the law genuinely requires us to disclose something, we have to.
In the United States. SONG WARS is run from Massachusetts and the servers are American, so if you are playing from Europe, the UK, Brazil or anywhere else, your account details are handled in the US.
This is worth stating plainly, because it is the sort of thing that often goes unmentioned. It does not change what you are owed. If you are in the UK or EU, your GDPR rights follow your data, and everything in the section below applies to you exactly as though the servers were local.
These are stored on your machine rather than on our servers, and you can clear them whenever you want:
Clearing your browser data signs you out and resets your settings. It does not delete your account.
Wherever you live, you can ask us to show you what we hold, correct anything that is wrong, delete it, or stop using it for a particular purpose.
Please email songwarsofficial@gmail.com. We will need to be sure that it is really you, which for a linked account means asking from Discord.
There are two things we cannot delete, and both have a reason:
If you are in the UK or EU and believe we have handled something badly, you can complain to your national data protection authority. We would much rather you told us first and gave us a chance to put it right.
SONG WARS is not for under 13s, and we do not knowingly hold data about one. If you believe a child has an account, please email songwarsofficial@gmail.com and we will remove it.
Thirteen is not an arbitrary number. US law draws its line there, and collecting anything about a younger child would require a verified parental consent process that this game has no honest way to run. The answer is therefore not to have them.
If something meaningful changes, we will ask you to read it again before your next match, and we record which version you agreed to.
SONG WARS is made and run by one person in Massachusetts, in the United States, rather than by a company. The person deciding what is collected and why is the person who built the game.
songwarsofficial@gmail.com
They do not publish their legal name, which is a safety decision. If you need it in order to exercise a data right or make a formal complaint, please email and ask, and you will be told.