Privacy Policy
Last updated September 30, 2026
Delphi is a free music game run by the Delphi team: you “call” artists you think are about to grow and see how your calls do. No real money is involved. This policy explains what we collect, why, who else sees it, and what you can do about it. Questions or requests: privacy@example.com.
What we collect
If you make an account
- Email address — to sign you in and, if you use a password, to confirm your account and reset it. Never shown publicly.
- Display name, bio and profile picture — shown publicly on your profile and next to your activity. If you sign in with Google or Spotify we start with the name and photo they give us; you can change or remove them.
- Your Spotify top artists (Spotify sign-in only) — when you sign in with Spotify we ask for permission to read your top artists, once per sign-in, to suggest artists you could add. Only you can see this list. It’s replaced each time you sign in and deleted with your account.
- Your activity — the artists you call and drop (with the price and time), artists you add (“scout”), who you follow and who you block. Calls, scouts, follows and your follower count are public; your block list is private.
- When you joined and when you agreed to our Terms — “member since” is shown on your profile.
If you don’t make an account
- A random ID in a cookie, so calls you make without an account are kept on your device. If you later sign up or log in on that device, those calls move to your account.
What we don’t collect
- No advertising or analytics trackers, no selling or sharing of personal information for advertising, and no payment details.
- We don’t read your listening history beyond the top-artists list above, and we never post to your Spotify or Google account.
Cookies
Only cookies the site needs to work:
- Sign-in cookies (from our database provider, Supabase) — keep you logged in.
- bm_voter — the anonymous ID described above; lasts one year.
- theme, palette, sidebar — your display choices on this device.
Who else handles your data
- Supabase stores the database, sign-in and profile pictures. Vercel hosts the site. Both process data only to run Delphi.
- Google and Spotify, if you sign in with them, under their own privacy policies.
- Images and audio load straight from other services — artist photos and covers from Spotify and Deezer, tour photos from Ticketmaster, profile photos from Google, 30-second previews from Deezer. Your browser contacts them directly, so they see your IP address like any website you visit. Links to Wikipedia and Ticketmaster take you to their sites.
- We may disclose information if the law requires it, or to protect people or the site from harm.
Your choices and rights
- Change your name, bio or picture any time in Settings.
- Download everything we have about your account in Settings → Your data.
- Delete your account in Settings → Your data. Your profile, picture, email, Spotify list, follows and blocks are deleted right away. Your past calls stay in artists’ history but are no longer linked to you or your name.
- Depending on where you live (for example California or the EU/UK), you may also have rights to correct your data, object to or restrict how it’s used, and complain to your data protection authority. Email us and we’ll respond within 30 days. We don’t sell or share personal information as defined by California law.
How long we keep it
For as long as you have an account. When you delete it, personal data is removed immediately from the live database and from backups as they cycle out. Anonymous calls made without an account are kept as part of each artist’s history.
Children
Delphi is not for children under 13, and you must be 13 or older to create an account. If we learn an account belongs to someone younger, we delete it. If you’re a parent and think your child has an account, email privacy@example.com.
Security
Data is encrypted in transit, passwords are handled by Supabase and never stored by us in readable form, and other people’s private data can’t be read through the site. No system is perfectly secure; if a breach affects you, we’ll tell you as the law requires.
Changes
If we change this policy in a way that matters, we’ll update the date above and ask you to review it the next time you sign in.