Skip to content

Privacy

What the software actually stores, in plain language. This describes how the product behaves; it is not legal advice, and we are not lawyers.

Last reviewed 12 September 2026

What we store

  • Your account. An email address, and authentication records held by Supabase Auth. Passwords are hashed there; we never see or store the plain text. If you sign in with a provider instead, we store the identifier that provider gives us.
  • Your profile. Whatever you choose to fill in — display name, avatar, instruments, genres, vocal range, the communities you belong to. All of it is optional except the name you go by.
  • Your messages and activity. Messages you post in channels and direct messages, reactions, community and channel membership, invitations, and moderation records where a report has been made.
  • Your recordings. Audio you record or upload, the project and take metadata around it, and who you have granted access to. These are stored in object storage and served through short-lived signed links, not public URLs.
  • Your settings. Device selections, audio preferences, effect presets and saved scenes, so your setup survives a reload.
  • Operational records. Ordinary server logs — request paths, timestamps, error traces — kept to keep the service running and debug failures.

Your recordings stay yours

A recording is visible only to you when it is made. Nothing is published automatically, there is no feed you are opted into, and no recording becomes public as a side effect of anything else. Sharing is per recording and reversible: one friend, a chosen community, a room, or everyone.

Vocal effects, monitoring, pitch correction and the rest of the realtime chain are computed in your browser. Your microphone signal is not streamed to a server to be processed. When you are in a live room, audio is sent to the other participants so they can hear you — that is what a room is — but it is not retained unless the room is recording and you are told so.

YouTube and Spotify

Those services are used for finding music and for playing it inside their own embedded players. We do not download, capture, transcode or store their audio, and none of it enters our effects chain, recorder or analysis. What we keep from them is metadata — a track title, artist, artwork URL and identifier — cached for a short period so a repeated search does not spend the same daily quota twice.

When one of their players is embedded in a page you are viewing, that service loads its own code and may set its own cookies and see its own usage of its player. That interaction is between you and them, under their privacy policy, not ours. If you connect a YouTube or Spotify account, we store the access tokens needed to act on your behalf and nothing more, and you can disconnect at any time. The boundary is explained on the home page.

Where it lives

Application data and authentication run on Supabase, in a Postgres database hosted in the Mumbai (ap-south-1) region. The web application is served by Vercel from its global network. Recordings and other media are held in object storage. Access to your rows is enforced in the database itself with row-level security, so a bug in the application cannot hand another user your messages or takes.

Cookies

A session cookie keeps you signed in, and that is the whole of it on our side. There are no advertising cookies, no cross-site trackers and no data sold or brokered to anyone. If error reporting or product analytics are enabled later, this page will say so before they are switched on, and they will remain optional.

What you can do

  • Edit or clear anything in your profile from your account settings.
  • Delete any recording, which removes the stored audio and its metadata.
  • Delete messages you have sent, subject to a community’s own retention rules.
  • Ask for your account and its data to be deleted. Self-service account deletion is still being built; until it lands, the request goes through the project’s issue tracker and is done by hand.

Children

Golden Karaoke is not intended for children under 13, and accounts are not knowingly created for them. If such an account is reported, it is removed along with its data.

Changes, and the honest caveat

This page changes as the product does, and the review date at the top moves with it. Golden Karaoke is in preview: it runs on free infrastructure, it has no uptime guarantee, and data loss is a real possibility rather than a theoretical one. Keep your own copy of any recording that matters to you.