Privacy Policy
Last updated: 2026-09-18
This Privacy Policy explains what data LyricHunt ("we", "us", "the App") collects, why, and how you can control it. LyricHunt is operated by Maksym Romanovych Horak, a registered private entrepreneur (FOP) under Ukrainian law — ФОП Горак Максим Романович, state registration record № 2010350000000578131 — Lviv, Ukraine ("the Operator", "data controller").
Contact for privacy requests: legal@lyrichunt.org
1. Data we collect
Guest play (no account)
If you play as a guest, we store:
- an anonymous device identifier (a random ID generated on your device, not tied to your name or email), used to track your energy/progress and prevent abuse of free-play limits.
We do not collect your IP address in our application database.
If you create an account (Google Sign-In or email)
If you choose to sign in with Google, we additionally store:
- your email address, as provided by Google Sign-In;
- your Google account identifier, used to recognize your account on future sign-ins;
- your display name, initially set to the name on your Google account (you can change it at any time in Settings — changing it does not affect your actual Google account);
- your profile picture URL, as provided by your Google account, to show your avatar in the App;
- your device time zone, used to calculate daily challenges and streaks correctly for your local day;
- gameplay data tied to your account: XP, levels, streaks, achievements, daily challenge history.
If you choose to sign in with email (a one-time code, no password), we store:
- your email address;
- a display name, which defaults to a generic placeholder ("Player") and is not derived from your email address — you can set your own display name at any time in Settings;
- your device time zone and account-linked gameplay data, as above.
Signing in merges any progress you made as a guest into your new account.
If you purchase premium
If you buy a premium subscription or item, we store:
- a Google Play purchase token, used to verify your entitlement with Google Play and to detect refunds or cancellations. We do not receive or store your payment card details — those are handled entirely by Google Play.
Analytics
We use Google Firebase Analytics to understand how players use the App and to improve it. Firebase Analytics collects:
- automatic screen views (which screens you visit);
- gameplay events: game started, game ended, and per-guess outcomes (correct/incorrect, word length, how many letters were newly revealed — never the word or lyric text itself);
- purchase funnel events (paywall viewed, purchase completed) tagged with which part of the App linked to the purchase screen;
- user properties: whether you're a premium subscriber, your level, and your streak length.
Firebase Analytics is provided by Google. Google acts as our data processor for this data and may process it in accordance with its own privacy terms — see Google's Privacy Policy and Google Analytics for Firebase's terms. Analytics collection is currently on by default, based on the notice you see and agree to on the App's welcome screen; a more granular in-app consent control is planned for a future update.
2. What we never collect or store client-side
Consistent with the design of the game itself, LyricHunt never sends full, unmasked song lyrics to your device outside of an active, in-progress guessing round, and never logs full lyric text on our servers in a form accessible via the App's API.
3. Why we process this data (legal basis)
- Guest device ID, gameplay data: necessary to provide the game (contractual necessity / legitimate interest in operating the service).
- Email, Google account data: necessary to provide account features you requested (contractual necessity).
- Purchase token: necessary to fulfil and verify a purchase you made (contractual necessity).
- Analytics: legitimate interest in understanding and improving the App, based on the consent notice shown before you start playing. Where applicable law requires opt-in consent for analytics, we rely on that notice as the consent mechanism until a more granular control ships.
4. Third parties we share data with
| Purpose | Third party | What they receive |
|---|
| Sign-in (Google) | Google (Google Sign-In) | Your Google ID token, used to verify identity |
| Sign-in (email) | Google (Gmail, for outbound delivery) | Your email address and one-time sign-in code, to deliver the code to you |
| Payments | Google Play Billing | Purchase/subscription data (handled by Google; we receive only a purchase token) |
| Analytics | Google (Firebase Analytics) | Events and properties listed in §1 |
| Song metadata | Third-party music catalog APIs | Search queries (artist/song names) — no personal data |
| Lyric fragments | Third-party public lyrics APIs | Song title/artist to look up lyric text server-side — no personal data |
We do not sell your personal data to anyone.
5. Data retention
- Guest device data is retained while your device continues to play; you can reset it by reinstalling the App or clearing app data, which starts a new guest identity.
- Account data is retained until you delete your account.
- Purchase tokens are retained as long as needed to verify entitlements and respond to Google Play refund/chargeback notifications.
6. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing (for example, under the EU/UK GDPR).
- Delete your account and data: in-app, via Settings → Account → Delete Account. This removes your account record and account-linked gameplay data from our active systems.
- Access or export your data: contact us at legal@lyrichunt.org.
- Opt out of analytics: a granular in-app control is planned; until it ships, contact us and we will disable analytics collection for your account/device on request.
You also have the right to lodge a complaint with your local data protection authority.
7. Children's privacy
LyricHunt is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us at legal@lyrichunt.org and we will delete it.
8. International data transfers
Our service providers (including Google) may process data outside your country of residence, including in the United States. Where required, such transfers rely on the provider's own applicable safeguards (for example, Google's Standard Contractual Clauses for EU data transfers).
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
10. Contact
Privacy questions or requests: legal@lyrichunt.org