Privacy Policy

Last updated: July 10, 2026

Song Swap is a small, independent music-sharing app that lets friends trade songs one at a time. This policy explains what information the app stores and how it is used.

What we collect

When you create an account, we store your chosen username, your password (as a bcrypt hash — we never store or see your actual password), and your preferred music platform. As you use the app, we store your friend connections and the history of songs exchanged (title, artist, album, album art, and streaming links).

What we don't collect

We do not ask for your email address, real name, or any credentials for Spotify, Apple Music, YouTube Music, Amazon Music, Tidal, or any other service. We do not run ads, analytics trackers, or sell any data to anyone.

Cookies

Song Swap uses a single session cookie to keep you logged in. There are no advertising or tracking cookies.

Third-party services

When you paste a song link, our server looks it up via the Odesli song-matching API (and, as fallbacks, the iTunes Search and YouTube Data APIs) to find equivalents on other platforms. Only the song link is sent — never your account details. The site also loads the Inter font from Google Fonts. The app is hosted on Railway.

Data deletion

To delete your account and its data, open an issue at github.com/Mguaste/song-swap/issues and we'll take care of it.

Contact

Questions about this policy can be raised on the project's GitHub page: github.com/Mguaste/song-swap.