Privacy Policy

Last updated: 30 September 2026

What we collect

When you sign in with Google we receive your name, email address, and profile picture. If you choose to connect Spotify, we also receive your Spotify user ID, email, country, top artists, and recently played tracks. Connecting Spotify is optional. We never receive your Google or Spotify password.

We also store what you do in the app: the genres you pick, the artists you back, and any bookings you make.

Your calls and League results are public

When you call an artist, we create a permanent receipt with a public link. Anyone with the link can see the artist, the date, your backer number, and your handle (or display name if you have no handle). Receipts cannot be edited or backdated. You can withdraw an open call, but the receipt stays on record, marked as withdrawn. If you delete your account, your receipts are deleted with it.

If you play the League, the standings show your handle (or display name) and your points. Your crate and transfers are private to you; private leagues are visible only to their members.

What we do with it

We use this data to run your account, recommend artists that fit your taste, and remember which artists you've backed or booked. We do not sell your personal data to anyone.

Aggregated insights

We may publish or share aggregated statistics about which artists fans are backing, for example “this artist gained 200 backers this week”. These statistics never include your name, email, or anything else that identifies you, and we only report groups large enough that no individual can be picked out.

Where it's stored

Your data is stored with our database provider, Supabase, which encrypts stored data at rest. Spotify access tokens are kept in a private table that only your own session and our servers can read; they are never shown on public profiles.

Cookies

We use first-party cookies to keep you signed in and remember your Spotify connection. We do not use third-party advertising cookies or trackers.

Your rights

You can disconnect Spotify at any time from your profile, which deletes the Spotify tokens we hold for you. You can ask us for a copy of your data, or ask us to delete your account and all associated data, by emailing the address below. We'll action requests within 30 days.

Contact

Questions or requests: hello@undrgrnd.tech