Privacy Policy

1. Overview

This Privacy Policy describes how Sophon Player (“we”, “our”) collects, uses, and protects your information when you use our music streaming service. We are committed to handling your data responsibly.

2. Information We Collect

Account Information

• Email address (for registration and OTP verification)
• Username and display name
• Password (stored as a bcrypt hash — never in plain text)

Discord OAuth (optional)

• Discord user ID, username, and avatar
• Email address from your Discord account

Usage Data

• Songs you play, like, or add to playlists
• Play history and listening patterns
• Playlists you create

3. How We Use Your Information

• To create and manage your account
• To send one-time passwords (OTP) for authentication
• To personalize your experience (liked songs, play history, playlists)
• To improve the Service and diagnose technical issues

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Temporary Data (Redis)

During authentication, we temporarily store OTP codes in Redis with a 10-minute expiry. Once verified or expired, they are automatically deleted. Rate-limiting data (to prevent OTP abuse) is retained for up to 1 hour.

5. Third-Party Services

We integrate with the following third parties:

• Discord — optional OAuth login. Subject to Discord's Privacy Policy.
• SMTP provider — used only to deliver OTP emails. No email content is stored by us after sending.

6. Data Retention

Your account data is retained as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Play history is kept to power recommendations and may be cleared from your profile settings.

7. Security

We implement reasonable technical measures to protect your data, including password hashing (bcrypt), HTTPS, OTP-based authentication, and rate limiting. No system is completely secure — please use a strong, unique password and keep your email account secure.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Disconnect your Discord account from your profile

To exercise these rights, contact us via our Discord server.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised date. Continued use of the Service after changes constitutes your acceptance.

10. Contact

For privacy concerns or data requests, please contact us via our Discord server.