Privacy Policy

SmartBeat saves game progress under a public player ID such as Viper#1234: a nickname followed by four automatically assigned digits. This ID is also used to open the profile. We do not ask for an email address, a real name or a password. You can play as a guest without creating a profile.

Who to contact

For SmartBeat privacy questions and requests, contact the operator at [email protected].

What we store and why

• Player profile: your chosen nickname, its assigned four-digit suffix, an internal profile identifier and profile creation information. These let you open the same profile on another device without giving us contact details. Choose a nickname rather than your real name.
• Game progress: your coin balance, earned coin history, owned skins, equipped skin and game runs. These provide the game features you choose to use. Your full player ID and earned coin totals are shown on the public leaderboard. Spending coins on skins does not reduce those totals. Spendable balances and skin collections are not included in leaderboard entries, but anyone with the public player ID can open the profile, spend its coins, change its skin or delete it. The ID is not a secret or proof of ownership.
• Sign-in sessions: hashed session credentials and expiry information. The browser receives a separate protected sign-in cookie. We do not store a player password or recovery key. A browser session does not make the public player ID private.
• Technical information: requests, network addresses and diagnostic logs may be processed to deliver the site, limit abuse and investigate errors. Profile request bodies are not deliberately logged.

Profile and progress processing is necessary to provide the game features you request. Technical security processing supports our legitimate interest in operating a reliable, abuse-resistant service. A nickname or network address can still be personal data; using a short public ID does not remove that protection.

Cookies and browser storage

The smartbeat_guess_wallet cookie keeps you signed in for up to 30 days. It is HttpOnly, so page scripts cannot read it, and uses SameSite restrictions. Signing out ends that session. An administrator who signs in also uses an essential smartbeat_admin cookie.

We use browser storage to remember recently played song identifiers in the current tab. These features support the game and sign-in experience; this release does not add advertising or analytics trackers.

How long data stays

Your profile, coins and skins remain until you delete the profile. Associated game history is removed with the profile. Expired sign-in sessions are periodically removed. Technical logs are limited by file rotation and overwritten as the configured log limit is reached. You can clear browser storage separately in your browser settings.

Providers and links

Cloudflare handles website traffic for delivery and protection. Music search and short preview requests use the existing Apple music provider through the SmartBeat server. SmartBeat passes preview audio to your browser without storing it as a music library. Following an “Open Music” link opens a provider's own service, where its privacy practices apply. Infrastructure providers may process network information under their own service arrangements.

Read Cloudflare's Privacy Policy and Apple's Privacy Policy for their processing, including international transfers. We do not sell player profile data.

Your controls and rights

You can see your balance, earned coin total, owned skins and selected skin in the game, sign out, or permanently delete your profile from “Profile & privacy” by typing the current player ID to confirm deletion. Deletion removes the associated game data from the live service. Remember your full ID to open the profile again; it remains visible while you are signed in and on any associated leaderboard entries.

Contact [email protected] to request access, correction, deletion, portability or restriction of personal data, or to object where applicable. For requests involving personal data, we may ask for enough context to identify the relevant data. A public player ID alone does not establish ownership. You can also complain to the Czech Office for Personal Data Protection or your local supervisory authority.