Privacy Policy
Last updated: September 2026
1. Data controller
Gradigang Solutions — adriendoy@gmail.com
2. Data collected
Melomatch collects the following data:
- Authentication data: email address, first name (Google) or username (Discord), and profile picture, provided during SSO login. The name and picture are shown publicly (leaderboard, profiles, rooms); the name can be changed in Settings.
- AI API keys: voluntarily provided by the user, encrypted with AES-256 before storage. They are never accessible in plain text.
- Game data: scores, answers, nicknames, game history.
- Guest players: only the chosen nickname is collected, without any personal data.
- In-game answers: aggregated and anonymised (no nickname, no player identifier), to improve playlists.
3. Purpose of data processing
- Authentication and user account management.
- Game operation (scores, rankings, game history).
- Quiz generation via AI APIs using keys provided by the user.
5. Data retention
Account data is retained as long as the account is active. Game data (rooms, scores) is associated with games and retained for history. Expired rooms are automatically cleaned up.
6. Your rights (GDPR)
Under the GDPR, you have the right to access, rectify, delete, and port your data. You can delete your account and all your data at any time from the settings. For any other request, contact: adriendoy@gmail.com
7. Third-party services
Melomatch interacts with the following services: Google and Discord (SSO authentication), Apple Music and Deezer (public APIs for audio previews), AI providers (Claude/Anthropic, OpenAI, Google Gemini) via API keys provided by the user, and Umami for audience measurement — self-hosted by the publisher, so browsing statistics never leave its infrastructure. No personal data is shared with these services beyond what is necessary for their operation.
8. Contact
For any questions regarding your personal data: adriendoy@gmail.com