Privacy Policy
Last updated: 2026-07-29
1. Controller
Controller within the meaning of the GDPR:
Konstantin Albrecht
Rethener Winkel 8, 30880 Laatzen
Email: battlemysongde@gmail.com
2. Overview
BattleMySong processes personal data for registration, song submissions, battles, and profile management. We currently do not use advertising or analytics cookies.
Data subjects: registered users and website visitors.
3. Hosting & Database
The Platform is operated on servers of a hosting provider. Personal data is stored in a PostgreSQL database (data processing agreement per Art. 28 GDPR). Server log files (IP, timestamp, URL, browser) are generated on access and automatically deleted after a short period.
4. Registration & Login
We collect: pseudonym, email, password (hash only), timestamp of ToS acceptance.
Authentication uses NextAuth with JWT sessions. Session cookies are set accordingly.
Legal basis: Art. 6(1)(b) GDPR.
5. Profile
You may optionally provide a bio, avatar, social links, and AI tool information. Your pseudonym and public profile data are visible to others.
Legal basis: Art. 6(1)(b) and 6(1)(a) GDPR.
6. Song Submissions
Songs may be submitted via a public Suno link or as an MP3 upload (optionally with a cover image). Depending on the source, we store: the Suno link and metadata retrieved from Suno, or the uploaded audio file and optional cover, title and style notes, selected pools, license confirmations, and a submission snapshot. Uploads are stored in our file storage (e.g. object storage).
After submission, songs appear immediately on your profile and — if you choose — can participate in voting right away. There is no pre-publication review by moderators; the operator may remove content afterwards if it violates the rules.
Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR.
7. Battles & Voting
We process: votes (A/B/skip), points consumed, ELO ratings, matchmaking history, optional device hash for abuse detection. Votes are stored permanently for leaderboard integrity.
Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR.
9. External Services
Suno: For Suno submissions and when playing Suno previews, data (e.g. IP, referrer) may be transmitted to suno.com; their privacy policy applies.
File storage: Uploaded MP3 and cover files are stored with our storage provider (data processing agreement per Art. 28 GDPR).
10. Retention Periods
Account data is kept while your account exists. After deletion, data is removed unless statutory retention obligations apply. Battle/voting data may be retained longer for leaderboard integrity.
11. Legal Bases (Summary)
- Art. 6(1)(b) GDPR – Platform use, account, submissions, battles
- Art. 6(1)(a) GDPR – voluntary profile data
- Art. 6(1)(f) GDPR – security, moderation, stability
12. Your Rights
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), withdrawal of consent (Art. 7(3)) — each GDPR.
Contact: battlemysongde@gmail.com. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): bfdi.bund.de.
13. Changes
We update this policy as needed. The current version is available at /datenschutz. More info: ToS · Imprint.