Privacy policy

Account and sign-in information

When account features are available, we use your email address, a unique account identifier, and email-verification status to create and secure your account. Email and password authentication is handled by Supabase Auth. We do not receive your Google or Patreon password.

If you choose Google sign-in, we receive basic profile information such as your name, email address, profile image if provided, and Google account identifier. Website login requests basic identity information; it does not request access to your Gmail, Google Drive, spreadsheets, or YouTube account.

If you choose Patreon sign-in or connect Patreon, we use your Patreon identifier, name, and verified email address. Where membership benefits are offered, we may also check your membership, tier, entitlement, and relevant billing-status information. Optional Discord connections provide identity information needed to associate that account with your EML account.

Sign-in identities with the same verified email may be linked to one EML account. You can also explicitly connect supported providers from your account page.

How we use information

We use account information to sign you in, maintain your session, send confirmation and password-recovery emails, prevent abuse, and provide account features you choose to use. These may include recording song nominations and votes or checking access to member benefits. Song nominations and aggregate vote counts are public.

We do not sell Google user data, use it for advertising, or use it to train generalized AI models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Browser storage, analytics, and embedded videos

We use browser storage to remember your instrument preference and, when you sign in, maintain your session. Cloudflare Turnstile processes verification signals to help protect account and public submission forms from automated abuse.

The website uses Google Analytics, Cloudflare Web Analytics, and Cloudflare Workers Analytics Engine to understand page visits, website performance, and how features are used, including catalogue selection and playback controls. Google Analytics may use cookies and process browser, device, and usage information. Our application analytics exclude email addresses, passwords, authentication codes, and search text from the events and page URLs we send. Cloudflare feature events do not include account identifiers or use analytics cookies.

Playthrough pages embed YouTube videos. Loading and interacting with those players allows YouTube to process information under Google’s privacy policy. You can manage cookies and site storage in your browser; clearing session storage signs you out and may reset saved preferences.

Services that process information

We use service providers to operate the website: Cloudflare for hosting and security, Supabase for authentication and database storage, and an email delivery provider for account messages. Google, Patreon, and Discord process information when you choose their sign-in or connection features. Google Analytics, Cloudflare Web Analytics, and YouTube process information for the purposes described above.

Hosting and security services may process IP addresses, request times, browser information, and operational logs. Authorized operators and service providers may access information as needed to run and protect the service. Information may be processed in countries other than where you live. We may also disclose information when required by law or to investigate abuse and protect users.

Retention and your choices

We retain account and related feature records while needed to provide your account and operate the service. Security logs and backups may remain for their operational retention periods. Information needed to meet legal obligations or resolve abuse may be retained longer. Aggregate information that no longer identifies you may be retained.

You can sign out at any time and revoke Google access through Google Account connections. You can revoke other provider connections through their account settings. Revoking a provider does not automatically delete your EML account or existing website records.

To request access to, correction of, or deletion of your account information, contact us using the address below. We may need to verify account ownership before acting. We will explain any information that must be retained and any backup-related delay when responding.

Contact and policy updates

For privacy questions or account-deletion requests, email easymusiclessondelivery@gmail.com.

We will update this page when our data practices change and revise the date above.