Privacy

Last updated October 24, 2026

Lyrext collects as little as it can to work. We don't sell personal information, we don't show ads, and we don't use advertising or analytics trackers. This page explains what we do keep. It covers the Lyrext site and the Android and iOS apps, run by TODO operator name in British Columbia, Canada.

What we collect

When you sign in with Google: your Google account ID, email address, name and picture. Google tells us these; we never see your Google password.
Your profile: your handle, your name, and a picture if you upload one. You can change these in Settings.
Your lyrexts: the song or uploaded audio, the moment you picked, the words, tags, whether it's Public or Link only, and when you created or removed it.
A device ID: a random code your browser or phone creates the first time you use Lyrext, so lyrexts you create before signing in stay yours and can move to your account when you sign in. It isn't linked to your name until then.
Plays: a count of how many times each lyrext was played, per day. So each listener counts only once a day, we keep a scrambled (hashed) code made from your account, or from your device ID and IP address, for two days. The code changes every day and can't be turned back into your device or address. We don't record who played what.
Sign-in sessions: on the web, a cookie that keeps you signed in for up to 90 days; in the apps, a token stored on your phone. We store only a scrambled (hashed) copy.
Server logs: like most websites, our server briefly logs requests, including IP addresses, to keep Lyrext running and secure. These logs are deleted after about two weeks.

We don't collect your location, contacts, or anything from your phone beyond what's listed here.

Uploaded audio

When you create a lyrext from a file, we keep only the moment you picked, and throw away the rest of the file as soon as the lyrext is created.

What other people can see

Your handle, name and picture appear with your lyrexts.
Public lyrexts can be seen and played by anyone, and appear in Browse. Link only lyrexts can be played by anyone who has the link.
Play counts on your lyrexts are shown to you in Stats.

Who else is involved

Google handles signing in, under Google's privacy policy.
Apple provides song search, artwork and previews. Your browser or phone loads these from Apple's servers directly, so Apple receives your IP address, under Apple's privacy policy.
Chat apps you send a lyrext to fetch its preview card from us to show the link; they don't receive anything about you from Lyrext.

Lyrext's server and data are in Canada. If we move them or add a service that handles personal information, we'll update this page first. We share information with others only if the law requires it, or to protect people from harm.

Why we use it

To run Lyrext: keeping your lyrexts and account, showing your lyrexts with your handle, counting plays for you, preventing abuse, and answering you when you write. We don't use it for advertising, and we don't build profiles of you for anyone else. If artists or labels are ever shown numbers, they'll only be totals, never anything about one person.

How long we keep it

Your account and lyrexts are kept until you delete your account.
A removed lyrext stops playing and leaves Browse right away; its record stays with your account so its link can say it was removed.
When your account is deleted, your profile, picture and sessions are deleted, and so are your lyrexts.
Backups are kept for a short time for recovery, then overwritten.

Your choices and rights

You can see and change your profile in Settings, and remove any lyrext from My lyrexts. You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account, by emailing TODO@example.com. We'll answer within 30 days. These rights come from Canada's privacy law (PIPEDA), Quebec's Law 25, and, where they apply to you, the GDPR and US state laws. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada or your local authority.

Children

Lyrext is for people 13 and older. If we learn that someone younger has an account, we delete it. If you think that's happened, email us.

Security

Lyrext is served only over encrypted connections, sign-in sessions are stored hashed, and access to the server is limited to the people running Lyrext. No system is perfect; if a breach puts your information at risk, we'll tell you and the authorities as the law requires.

Changes

We'll post changes here and update the date above, and tell you in Lyrext before an important change takes effect.

Contact

The person responsible for privacy at Lyrext is TODO operator name, at TODO@example.com.