Draft — not yet in force. This document is under review and still contains unfilled placeholders. It does not yet describe a binding commitment.
Privacy Policy
What Hearso collects, why, how long it is kept, and what you can ask us to do about it. Last updated 23 August 2026.
Who is responsible
Hearso is operated by LEGAL_ENTITY_NAME, at BUSINESS_POSTAL_ADDRESS. We are the data controller for the information described here. For anything in this policy, write to PRIVACY_CONTACT_EMAIL.
What we collect
If you play as a guest, we store the nickname you are given, which room you joined, and your answers during the round. We do not ask for your name or email.
If you create an account, we store your email address and, if you provide them, a display name, full name, and avatar. Signing in with Google gives us the email address and basic profile that Google shares.
When you play, we store the rooms you create or join, your answers, and your scores.
If you contact us or leave a review, we store what you wrote and, for reviews, your rating.
Automatically, our hosting provider records your IP address and basic request information, as any web server does.
Analytics, and your choice
On the live site, Hearso collects no analytics at all until you agree through the banner. If you do not choose, nothing is collected. You can change your mind at any time in Settings, and it takes effect immediately.
When you do agree, we record which pages and features are used, using a random game identifier. Your name, email, country, and answers are never sent to our analytics provider, and we do not record your screen.
Separately, and whether or not you agree to analytics, Hearso keeps simple counts of how many rounds are played, how many people play, and how many are playing at once. These hold no names, emails, or room codes.
What becomes public
If you appear on the leaderboard, your display name and country are visible to anyone who visits it. Choose a display name you are comfortable showing publicly. Guest nicknames are generated and not tied to your identity.
Reviews are held for approval and are never published automatically.
Why we are allowed to use it
To provide the game and your account — because we need it to give you what you asked for (performance of a contract).
For analytics — only with your consent, which you can withdraw at any time.
To keep the service working and prevent abuse — because we have a legitimate interest in it not being overwhelmed by bots.
Usage counts — legitimate interest in understanding whether the product is used, using data that identifies nobody.
Who else sees it
We do not sell your personal information and we do not share it for advertising. We use these providers to run the service:
| Provider | Purpose | What it handles |
|---|---|---|
| Supabase | Database and authentication | Accounts, profiles, rooms, gameplay, and reviews |
| Vercel | Hosting | Page requests, IP addresses, and server logs |
| Cloudflare | Bot protection (Turnstile) | Challenge data when you sign up or submit a form |
| Resend | Confirmation and contact email | Email address and message content |
| PostHog | Analytics | Product analytics — only after you consent, and never your name or email |
| Amazon Web Services | Leaderboard | Display name, country, and score |
| Account sign-in | Your email address and basic profile, if you sign in with Google | |
| Typeform | Product feedback | What you write in the feedback form, and any contact detail you add |
These providers may store data outside your country, including in the United States. Where that involves a transfer out of the UK or European Economic Area, it relies on TRANSFER_MECHANISM.
How long we keep it
| Rooms and their players | Deleted by an hourly cleanup once the room is over 24 hours old, so up to about 25 hours |
| Account profile | Kept until you ask us to delete it |
| Daily active-player records | Deleted by a daily cleanup once older than 35 days, so up to 36 days; only totals remain |
| Live-player samples | Deleted by a daily cleanup once older than 90 days, so up to 91 days; only daily peaks remain |
| Usage counts | Kept indefinitely — these hold no names, emails, or room codes |
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, or to object to it. You can withdraw consent to analytics at any time in Settings, without affecting anything collected before.
Hearso is in beta, and these requests are handled by hand. Write to PRIVACY_CONTACT_EMAIL and we will respond within one month. We would rather tell you that plainly than offer a button that does not exist yet.
Deleting your account removes your profile, your account itself, your reviews, your leaderboard entries, and the daily records that link plays to you. The usage counts described above are not deleted, because they identify nobody.
If you are in the UK or European Economic Area and think we have handled your data badly, you can complain to your national data protection authority.
Children
Hearso is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us personal information, write to PRIVACY_CONTACT_EMAIL and we will delete it.
Changes
If we change this policy we will update the date above, and tell you in the product if the change is significant. See also the Terms of Service and the player guide.