In short
- We do not sell data and we do not hand it to advertisers. There are no ads, measurement networks or cross-site trackers in this app.
- You can listen without an account. What is stored then stays on your device only.
- With an account, your listening is stored on the server to build the journey. That is what the engine runs on.
- Deleting your account from the settings screen erases everything held about you on the server, and the login itself.
- The app does not use your microphone, camera, contacts or files.
- The service uses YouTube API Services, and using it is also subject to the YouTube Terms of Service.
Who is responsible for the data
The operator of the service is responsible for the data collected here, and is the address for any question, access request or deletion request. Contact details are at the end of this document.
Account and sign-in
You can open an account with an email address and password, or sign in through Google, Facebook or Spotify. Whichever door you use, the account itself is held by our authentication provider, Supabase.
- Email and password: your email address, your password in encrypted form, and the display name you chose. We cannot read the password.
- Google, Facebook or Spotify: the provider hands us a name, an email address and a profile picture. Your password stays with the provider and never passes through us.
- Spotify: signing in also asks for permission to read your top tracks and your saved library. That permission exists for a planned library import and is not used today - nothing beyond your name and email is read. You can revoke it at any time from Spotify's connected-apps settings.
- We have no access to your YouTube account and do not ask for any. Signing in with Google is sign-in only.
What is stored on the server, when you are signed in
Every item here exists because of a feature you can see on screen. Nothing is collected just in case.
- Profile: display name, profile picture or the character you chose, the styles you picked at first run, the crossfade length between tracks, your discovery rate and the room's display settings.
- Plays: for every track that played - when, for how long, whether it played to the end, whether it was skipped, whether you rewound, whether you raised the volume, whether you opened the discovery screen from it, and which stage of the journey it sat in. Each session also records the time of day it started.
- Reactions: likes and dislikes on tracks.
- A summary per track: play count, skip count, total listening time and last played. The cooldown - how long a track rests before it returns - is derived from this.
- Taste profile: computed weights for styles, labels and artists, plus measures such as appetite for the new and a leaning toward sets. All of it is derived from listening, none of it is typed in.
- Inspiration sources: links or names you entered in the inspiration box, and what was recognised in them - styles, artists and labels.
- Channels you follow and artists you muted.
- Reports you sent about a track filed in the wrong room, and the room you suggested.
- Feedback you sent from the settings screen: the category, the text, the screen it was sent from, the app version, and whether it came from a browser or the Android app.
Usage measurement
To know whether the product works - how many people open it, how long a journey lasts, which rooms are alive and which buttons nobody taps - the app sends usage records to our server. It is our own system, not a third-party provider's, and no record in it influences which music is chosen.
- What is recorded: opening the app, moving between screens, starting and resuming a journey, switching style, a track ending (how long, whether to the end, whether skipped), a like, a share, a shared link opening, an inspiration import, and taps on buttons marked for measurement.
- What identifies you: a random id created in your browser and kept there, and a session id that rotates after half an hour of silence. If you are signed in, the account id is recorded too. The device class (phone, tablet, desktop) and whether it is a browser or the Android app.
- What is not recorded: IP address, name, email, location, or any text you typed.
- Who sees it: the service operator only, on an internal dashboard, including a per-account view.
- How long: records are deleted after 180 days. On account deletion its records are detached from the account and remain anonymous until they expire.
Sharing
A link to share a track carries the track's id only. It contains nothing about you, and whoever opens it cannot see who sent it.
What is stored on your device, for everyone
Even without an account the journey needs a memory, or the same track would come back every time you opened the app. That memory lives in your browser's storage on your device and is not sent to the server.
- Listening memory: which works you heard and when, what you skipped, the last room and format, and where the journey stopped. It stays until you clear the site's data.
- Display settings: backdrop, lighting, character, battery-saver mode and language. The language is kept in a cookie for a year.
- The location you granted, if you granted one. See the next section.
- A random measurement id, not tied to the account. See "Usage measurement".
- Until the tab closes only: the state of your last search, the measurement session id, and whether you dismissed the invitation to sign up or install the app.
Location
The events screen asks for location permission once, to show parties and festivals near you. Without it the screen works by searching for a place name.
If you grant it, the device hands over your position at whatever precision its system provides. It is kept in your browser, sent to our server to fetch events within a radius around it, and is not stored on the server against your account.
To give the position a name - a town, an island or a region - and to turn a typed search into a point, our server queries OpenStreetMap's Nominatim service. The request leaves from our server, so your IP address does not reach them - the point does.
To find events we do not yet have, the server sends Google Gemini your area rounded to a grid of roughly ten kilometres - not the exact point. Results are cached per area, not per person.
To stop: revoke the permission in your browser or device settings. The stored point is erased when you clear the site's data.
What is not collected
- Microphone, camera, contacts, calendar, photos or files. The app does not ask for access to them.
- A precise address or movement tracking. Location is measured once, not continuously.
- Passwords for other services.
- Audio. Nothing that plays is recorded or analysed from your device.
What it is used for
- To build the journey: choose the next track, keep variety and prevent repetition.
- To learn your taste over time - likes, skips and listening duration.
- To show events in the area you are in.
- To keep your settings across devices.
- To improve the catalogue's classification, based on the reports sent.
- To secure the service and diagnose faults.
YouTube
PsyJourney uses YouTube API Services. Using our service is also using YouTube, and by using it you agree to be bound by the YouTube Terms of Service.
The catalogue is built from the public information YouTube's interface provides about videos: title, channel, thumbnail, duration and description. That information is refreshed or deleted within 30 days, as YouTube's developer policies require.
Music plays through an embedded YouTube player. That means YouTube and Google receive data directly from you while it plays - your IP address, what is playing and cookies on their own domain - under their policies, not ours, and whether or not you are signed in to a Google account.
We do not access your YouTube account, read your history there or write to it.
Who else sees the data
Only providers that run a part of the service, and only what their part requires. None of them receives data for marketing.
- Supabase - database and authentication. Your account, plays and preferences live there.
- Vercel - hosting. Your IP address and browser identifier appear in their technical logs on every request, for security and fault diagnosis.
- Google · YouTube - the player and public information about videos.
- Google Gemini - finding events by rounded area, and extracting event details from public pages. No identifying data is sent.
- OpenStreetMap Nominatim - naming a location and searching for places. It receives a point, not an identity.
- Discogs - information about artists, releases and styles. Requests are artist and record names, not personal data.
- Google Fonts - the interface fonts load from Google's servers, so your browser connects to them.
- Google, Facebook and Spotify - only if you chose to sign in through them, and only for the sign-in.
Cookies
Only essential cookies: the ones that keep you signed in, a language cookie kept for a year, and a short-lived cookie set at the moment you sign in so that a journey you began as a guest continues instead of being cut off - it is removed straight after. No advertising cookies and no cross-site tracking. Blocking cookies will prevent signing in, but listening as a guest will keep working.
The embedded YouTube player may set cookies of its own on Google's domain. Those are governed by Google's policies.
How long it is kept
- Account data and preferences: for as long as the account exists.
- Listening history: for as long as the account exists. It is what stops the engine from playing you the same thing twice.
- Information about YouTube videos in the catalogue: refreshed or deleted within 30 days.
- What is stored on your device: until you clear the site's data, or until the tab closes for the temporary items.
- Technical logs: per the retention policies of the hosting providers.
- Event search results and archive lookups: cached per area or name, and not tied to a person.
- Usage measurement records: 180 days.
Deletion and your rights
You can delete your account at any time from the settings screen. Deletion removes the profile, plays, sessions, reactions, summaries, taste profile, inspiration sources, follows, mutes, reports and feedback - and the login itself. Usage measurement records are detached from the account and remain anonymous until they expire. It is irreversible and completes in full, including backups, within seven days.
What is stored on your device is not deleted from the server, because it was never there. Clear it by clearing the site's data in your browser, or the app's data on Android.
You have the right to see the data held about you, to correct it and to request its deletion. An email will be answered.
Deleting data here does not affect data held by YouTube, Google, Spotify or Facebook. That is deleted and revoked in your account with them.
The Android app
The Android app is the same service, wrapped as an app. It asks for internet and network-state access, and for location only when you open the events screen and only if you grant it. This policy applies to it in full.
Age
The service is not intended for children under 13, and we do not knowingly collect data about children under that age. If such data is found to have been collected, it will be deleted.
Security
Traffic is encrypted. Data access is enforced at the row level in the database, so one account cannot read another's data. No system is completely immune, and we do not claim otherwise.
Changes to this document
If the policy changes, the date at the top of the page changes with it. A material change will be shown inside the app and not hidden in a silent update.
Service operator
PsyJourney
Contact
For questions about stored data, an access request or a deletion request:
A contact address has not been set yet. Until it is, you can reach us through the project page.