PRIVACY POLICY

What Music MMO is

Music MMO (musicmmo.com) runs small game worlds that are broadcast live on YouTube. You sign in with Google to create a pilot, and typing commands like /ready in a YouTube live chat makes your ship appear in the stream.

Information we collect

• Google account basics — when you sign in with Google we receive your name, email address and Google account ID. We use these to create and identify your account.
• YouTube channel identity — with your permission (YouTube read-only scope) we read your YouTube channel ID and channel name. This is the link that lets chat commands you type in a live chat be matched to your pilot. We do not read your subscriptions, videos, playlists or watch history.
• Game data — your pilot name, ship, resources, experience points, purchases and time in the stream.
• Public live chat messages — while a broadcast is running we read the public YouTube live chat of our own stream to detect commands (like /ready and /leave). We only store the resulting game state, not your chat history.
• A session cookie — a single encrypted cookie keeps you signed in. We do not use advertising or tracking cookies.

How we use it

Solely to run the game: signing you in, matching your chat commands to your pilot, showing your ship and name in the broadcast, and saving your progress. Your ship name is visible to everyone watching the stream.

What we never do

• We do not sell or share your personal data with third parties.
• We do not send you marketing email.
• We do not post to YouTube on your behalf. (Replies from the stream's chat bot are posted from the streamer's own channel, never from viewer accounts.)

Where your data lives

Account and game data are stored in our database (hosted on Neon, PostgreSQL) and the site runs on Vercel. Google sign-in tokens are used only during login and are not stored for viewer accounts.

How we protect your data

• Encryption in transit— all traffic between your browser, our servers and our database is encrypted with TLS (HTTPS). Connections to Google's APIs use TLS as well.
• Encryption at rest — our database provider (Neon) encrypts all stored data at rest.
• Token protection — OAuth tokens are exchanged server-side only and are never exposed to the browser or to other users. Sign-in tokens for viewer accounts are discarded after login instead of being stored. The session cookie that keeps you signed in is encrypted and HTTP-only.
• Access control — production data is accessible only to the administrator of the service, protected by credentials and two-factor authentication. No third party has access to the database.
• Data minimisation — we only store the fields listed above (profile basics, YouTube channel ID and name, and game state). We never store your Google password, chat history, subscriptions or watch history.
• Retention — data is kept only while your account exists. If you ask us to delete your account, all associated data is permanently removed from the database.
• Incident response — if we become aware of a data breach affecting your personal data, we will notify affected users by email without undue delay.

YouTube API Services

Music MMO uses YouTube API Services. By using the site you also agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. You can revoke Music MMO's access to your Google account at any time via Google security settings.

Music MMO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Deleting your data

Email us at chann1anim@gmail.com from the address linked to your account and we will delete your account and all associated game data.

Changes

If this policy changes we will update this page and the date at the top.