Privacy Policy

This policy explains what data Aux Battles collects, why, and your rights over it. Playing a regular room needs no account, so we collect as little as possible. Streamers and viewers who use Twitch Battles do connect a real Twitch account, described in section 1b below.

1. What we store to run the game

To make a multiplayer game work, we store the following in our database (hosted on Supabase) for the lifetime of a room:

• The room’s 4-letter code.
• The display name you type when you join (a nickname you choose).
• The songs you submit and the topics/prompts used.
• The votes and ratings cast during rounds.

You don’t need to give us your real name, email, or any account details to play a regular room. This game data is strictly necessary for the Service to function, so it’s processed on the basis of providing the game you asked for.

1b. Twitch Battles - connecting a Twitch account

Twitch Battles let a streamer connect a Twitch channel so their chat can vote and submit songs live. Voting by typing a number in chat needs no account at all. Nothing is collected from viewers who only vote that way.

If a streamer connects Twitch to host a battle, or a viewer logs in with Twitch to submit a song through the submit link or to use mod-view, Twitch’s OAuth login (handled by our authentication provider, Supabase Auth) gives us:

• Your Twitch user ID, username/login, display name, and avatar URL.
• A short-lived access token, used only to ask Twitch whether you moderate the streamer’s channel (for mod-view access). We don’t use it for anything else, and we never see your Twitch password.

We don’t receive your Twitch email or any other Twitch account details beyond what’s listed above. You can disconnect your linked Twitch account at any time from the room lobby, or by revoking Aux Battles’ access in your Twitch connections settings.

2. Retention - old rooms are deleted

Rooms are temporary. A scheduled cleanup job automatically deletes inactive rooms and all their associated data (nicknames, submissions, votes) after 24 hours. We don’t keep game data beyond that window.

A linked Twitch account is different: it’s a real account, not room-scoped game data, so it persists across sessions and rooms until you disconnect it yourself.

3. Analytics and third parties

We rely on a small number of third-party services:

• Google Tag Manager / Google Analytics - measures usage (pages viewed, general location, device type). This uses cookies and only runs if you consent via the cookie banner. We use Google Consent Mode v2, so nothing analytics-related is stored until you accept.
• PostHog - measures how the game is actually played (which screens you reach, when songs get submitted and rated) and records errors so we can fix them. Your data is processed in the EU.
  • Before you accept, and if you decline, PostHog stores nothing on your device: no cookies, no local storage. It still counts anonymous usage, keyed to the same temporary player id the game already needs to run.
  • Session replay - a reconstruction of what happened on screen during your visit - only runs if you accept the cookie banner. Passwords are never recorded, and we don’t record anything on Twitch’s or Spotify’s own pages.
  • We strip login tokens out of any address before it is sent.
• Vercel Analytics & Speed Insights - privacy-friendly, cookieless measurement of traffic and performance. It does not use cookies or track you across sites, so it runs without consent.
• Vercel - hosts the site. Like any web host, its servers process request logs (including IP addresses) to deliver and secure the site.
• Supabase - hosts the database that stores the game data described in section 1.
• Spotify - songs play through Spotify embeds/links. When you interact with Spotify, its own privacy policy applies. We don’t receive your Spotify account details.
• SoundCloud - SoundCloud tracks play in an embedded SoundCloud player, which loads their widget script and may set its own cookies. When you interact with SoundCloud, its own privacy policy applies. We don’t receive your SoundCloud account details.
• YouTube - YouTube tracks play in an embedded YouTube player. This is a full Google-hosted iframe, so it may load Google/YouTube scripts and set their own cookies, and your interaction with it is subject to Google’s privacy policy. We only send the video URL you paste to YouTube’s oEmbed endpoint to fetch the title and artwork; we don’t receive your Google or YouTube account details.
• Twitch - used only for Twitch Battles. Connecting a channel or logging in as a viewer goes through Twitch’s OAuth login; see section 1b for exactly what we receive. Twitch’s own privacy policy applies to your Twitch account itself.

5. Your rights

Depending on where you live (for example under the GDPR in the EEA/UK), you have rights to access, correct, or delete your personal data, and to object to or restrict its processing. Because game data is anonymous nicknames that auto-delete within 24 hours, the simplest way to remove yours is to leave the room, and it will be cleared automatically. For anything else, contact us and we’ll help.

6. Children

Aux Battles isn’t directed at children under 13, and we don’t knowingly collect their data. See the age requirements in our Terms of Service.

7. Changes to this policy

We may update this policy from time to time. Material changes to how we use cookies will also re-trigger the consent banner. The “Last updated” date above always reflects the current version.

8. Contact

Questions about your privacy or this policy? Email mikalajunas.emilis@gmail.com.