Privacy notice

Who we are

Top Tracks Solo (part of Top Tracks®) is run by Tastic Games Ltd (“we”, “us”), a company registered in England and Wales (company number 17512365), registered office 66 Paul Street, London, EC2A 4NA, United Kingdom. We are the controller of the personal data described here. Questions or requests: hello@tasticgames.com.

Top Tracks Solo is a quick music game: you and three others — real players or bots — each pick a track for a card, listen to everyone’s previews and rank them. We collect as little as we can.

What we collect

• Email address and your 13+ confirmation — only if you sign in. We use your email to send sign-in links (there’s no password) and to know it’s you. We record that you confirmed you’re 13 or over (an account can’t be created without it), when your account was created (an account must be a week old before its reports count — see below) and, if we’ve given you one, that your account is ad-free (no ads and no daily limit).
• Your plan — if you’re signed in, whether you have a Tastic Games plan: which plan, its status (for example renewing, cancelled or a payment problem), until when it makes you ad-free, and when we last checked. Top Tracks, which handles the billing for all our games, tells us this (see “Who we share it with”). We never see or store your card details, what you paid or your billing address.
• Random ids and tokens — a random id made in your browser (not your name or email), a random account id if you sign in, and random tokens that keep you signed in and keep your seat in a match. We store sign-in tokens only in a scrambled (hashed) form.
• Playing a match — your seat, the tracks you pick, how you rank the others’ tracks and your points. To search the right Apple Music catalogue we use the country your browser’s language setting points to (for example “GB”); it stays with your own seat and tracks and is never shown or sent to other players.
• Public name, rating and boards — signed-in players aged 13+ who play other people get a made-up public name (like “Velvet Otter 482”) — never your email. You can choose your own display name instead on the account page: other players see it in matches and on the boards, so don’t use your real name or anything that identifies you. Chosen names are checked by a strict filter, can be reported, and can be reset by us; you can go back to a generated name at any time. Ranked matches (at least two signed-in 13+ people) give you season points and a skill rating, which we use to match you with players of a similar level and to place you on the boards. We keep your rating, your last 20 rated matches (the rating before and after each) and your place and score on each board. We don’t record how many matches you’ve won.
• Saved tracks — tracks you choose to “☆ Save for later” (up to 500). As a guest they stay in your browser; signed in, they’re kept with your account so you see them on any device. They’re private.
• My tracks — a list of your recent matches: the card, the tracks played, the names shown in that match (the public names of the other players and the bots), your points and your final place. Signed in, it’s kept with your account; as a guest, in your browser only.
• Your music app — the app “Open in” goes to (for example Spotify or Apple Music), kept in your browser and, if you’re signed in, with your account.
• Free matches — how many free matches you’ve played today, and whether you’ve had today’s extra matches for watching an ad or sharing your result. Counted against your account, or your browser’s random id as a guest.
• Reactions — the fixed reactions (“Great pick”, “New to me”, “Tune!”, “Good game”, “Unlucky”, “Ha!”) are passed straight to the other phones in the match and not stored. We only keep a short counter (up to 2 minutes) to stop flooding.
• Blocks — if you block a player we keep who you blocked (their account, the name you saw and when), so you’re never matched together again and you don’t see their reactions. At most 200. You can unblock on the account page.
• Reports about players — if you report someone in your match we keep the reported account, the reason you chose (“Offensive track”, “Unfair play” or “Something else” — there’s no free text), the match, the reported player’s tracks in that match and when. You are recorded only as a one-way scrambled code (a keyed hash), not by your name, email or account id. The reported player is never told who reported them.
• Pauses on playing people (restrictions) — reports only count towards a pause when they come from established players (at least 10 rated matches and an account a week old) in 3 different matches from 3 different players within 30 days. Then matches against people are paused — you can still play bots — for 30 days from the last of those reports, unless a person at Tastic Games lifts it sooner (or, after looking at the reports, sets a longer pause). You’re told on screen and can appeal by emailing hello@tasticgames.com. Nothing is decided about you automatically beyond this pause.
• Leaving a match early — if you leave a ranked match that has other people in it, we count it (for 24 hours) and you wait a little before your next match: 2 minutes, then 10, 30, and 2 hours for repeated leaves in a day.
• Track reports — “Report track” (doesn’t fit the card, explicit or offensive, or wrong song / broken preview) is about the track, never the person who picked it: we keep the track, the card, the reason, when, whether you were signed in and whether a bot or a person picked it — but never who picked it. You are recorded only as a one-way scrambled code made from your account id or, as a guest, your browser id. Reports help keep unsuitable tracks out of the bots’ picks. You can undo your own report for a day.
• Ads — Top Tracks Solo shows ads from Google while you look for players, between some rounds, after a match and on the boards, plus an optional “Watch an ad” for more free matches. To show an ad, your browser sends Google your IP address, browser details, the page type (just the first part of the address, like “/boards”) and your consent choice. For guests and anyone who hasn’t confirmed they’re 13 or over we always ask Google for child-directed, non-personalised, limited ads, whatever is chosen in the consent message. Personalised ads are off for everyone unless you choose them: only a signed-in player aged 13 or over who turns on “Personalised ads” on the account page (off until you do)and agrees in Google’s consent message (in the UK and EU) can get them; elsewhere a US state opt-out in Google’s message always wins. Where consent is needed, Google only sets advertising cookies if you agreed; non-personalised and child-directed ads may still use cookies or similar for frequency capping, reporting and fraud prevention where the law allows. Sign-in, the account page, the plans pages and these legal pages load nothing from Google.
• Technical data — your IP address and browser details reach our hosting provider with every request. To stop abuse (rate limits) we keep only a scrambled code made from your network with a secret key — without the key it can’t be turned back into your IP address — never the address itself. While the game is open and connected to our server we keep a connection record (that network code, your browser’s random id and, if you’re signed in, your account id) for up to 3 hours. Our firewall keeps a small sample of requests (including the IP address) for up to 3 hours to spot attacks, and our own service logs (kept for 30 days) are designed not to include your email or IP address.

Most of this comes from you or your device. Some comes from other players: reports and blocks about you, and the names and tracks in their own My tracks. We never collect or show: chat or messages of any kind, profiles, photos, friends lists, contact details, or your precise location (the plans page uses only the country your connection comes from, to show prices in your currency). Nobody can look you up, invite you or contact you outside a match the game made.

What other players can see

• In a match with other people: your public name (generated, or the display name you chose), the tracks you picked once they’re revealed, your points and your reactions. Never your email or country. Guests only ever play bots, so no other person sees them.
• On the boards: the top 100 public names and scores for the month’s season and for the rating — anyone who opens the Boards page can see them. Nothing else about you is shown.
• The other players’ “My tracks” keep the names and tracks shown in a match they played with you, for 90 days. Someone who blocked you keeps the name they saw on their block list until they unblock you or you delete your account.

Why we use it, and our lawful bases

• Running matches, your account, sign-in, saved tracks, My tracks, your music app, free matches, public names, ratings and the boards you take part in — performance of a contract (our terms).
• Checking and applying your Tastic Games plan — including sharing your email address and plan status between our games, and selling you a plan — performance of a contract (our terms and Top Tracks’ terms).
• Blocks, player reports, pauses on playing people, leaver waits, track reports and the short safety note we keep after deletion (below) — legitimate interests in keeping players, including children, safe and matches fair (and our online safety duties).
• Security, preventing fraud and abuse, and keeping the service working — legitimate interests.
• Ads: advertising cookies and personalised ads — your consent (the “Personalised ads” switch, and Google’s consent message in the UK and EU; withdraw any time by turning the switch off or with “Privacy settings” under an ad); non-personalised, child-directed ads — legitimate interests in funding the free game.

We don’t sell your data and we don’t build advertising profiles ourselves. Your rating is a game skill score used only to pair players and order the boards; it decides nothing else about you.

Who we share it with

• Amazon Web Services — hosts the service. Our data is stored in London, UK; the website is delivered worldwide through Amazon’s content network, and the firewall that protects it runs in the United States.
• Postmark (ActiveCampaign) — sends our sign-in emails. It handles your email address and the message in the United States.
• Top Tracks (our other game) — Top Tracks is also run by Tastic Games Ltd, and handles the billing for Tastic Games plans in all our games. So that your plan works here, when you sign in, while you use the game (at most every 6 hours), when you open the plans page or Manage plan, tap “Restore purchases” or buy a plan, Top Tracks Solo sends Top Tracks your account email address and Top Tracks answers with your plan’s status (which plan, its status and until when); when your plan changes, Top Tracks tells us the same. To show prices, the plans page also passes on the country your connection comes from. Nothing about your own matches, tracks, rating, reports or blocks goes to Top Tracks. Aggregate daily counts are shared with Top Tracks to run the service (how many people played, signed up or played as guests, and how many matches of each kind) — numbers only, nothing that identifies anyone. If you start buying a plan here (tap Buy) and don’t have a Top Tracks account, Top Tracks creates one for your email address to hold your plan and payment records (no game data); you can delete it on Top Tracks’ account page (sign in there with the same email) or by emailing hello@tasticgames.com — deleting it ends your plan in all our games. Top Tracks’ own privacy notice covers what it keeps.
• Stripe — if you buy a plan, Stripe processes the payment for Top Tracks. You give your card details to Stripe on its payment page; we never see them. Stripe handles them under its own privacy policy.
• Apple — tracks, artwork and 30-second previews come from Apple’s iTunes services. When you search, your device sends the search words to Apple (or through our server if that doesn’t work), and it loads artwork and previews from Apple, so Apple sees your IP address. Apple’s privacy policy applies. Top Tracks isn’t affiliated with Apple.
• Google — shows the ads (Google Ad Manager / AdSense) and runs the consent message. For personalised ads Google acts as a separate controller under its own privacy policy (policies.google.com); child-directed and non-personalised requests are handled under Google’s restricted-processing terms.
• Your music app — only if you tap “Open in”: you leave Top Tracks Solo for that service, under its own privacy policy. We don’t send it anything about you.
• Professional advisers, or authorities where the law requires it.

Where a provider handles data outside the UK (Postmark, and parts of Amazon’s, Apple’s, Google’s and Stripe’s services), we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.

How long we keep it

• Sign-in sessions: 30 days after you last use Top Tracks Solo, or until you sign out. Sign-in links: 15 minutes.
• Matches (seats, picks, rankings, names): 1 day. Records that a ranked result was counted: 30 days.
• Free-match counters: 2 days. Anti-abuse counters: up to 2 hours. Connection records (network code, browser id and account id): up to 3 hours.
• My tracks: 90 days (the newest 200 matches with an account, 50 in a guest’s browser).
• Saved tracks: until you remove them or delete your account (in your browser as a guest: until you remove them or clear site data).
• Season boards: 13 months. Your rating and the rating board: until you delete your account.
• Blocks: until you unblock, or either account is deleted.
• Reports about players: 1 year. Pauses on playing people: 30 days from the last report that counted, unless lifted sooner or set longer by a person at Tastic Games. Leaving records: 24 hours.
• Track reports: 180 days.
• Your ad consent choice and the “Personalised ads” switch: in your browser until you change them or clear site data. Google’s own ad cookies: as set by Google (up to 13 months).
• Firewall request samples: up to 3 hours. Service logs: 30 days.
• Your plan’s status: with your account, updated whenever Top Tracks tells us of a change, and deleted with your account. Top Tracks keeps its records of purchases (without your email once its account is deleted) for up to 6 years, for tax and accounting.
• Your account: until you delete it.

Deleting your account

You can delete your account yourself on the account page. We then delete your email, your sign-in sessions, saved tracks, My tracks, free-match counters, rating, board places, leaving records, blocks (both ways), the reports about you, any pause and our copy of your plan’s status. Deleting your account here doesn’t cancel a Tastic Games plan or delete your Top Tracks account — the plan covers our other games too; cancel it in “Manage plan” first if you want it to stop (the account page reminds you). If you’re in a match at the time, your seat carries on under a new made-up name with no link to you. Track and player reports you made stay (they help keep the game safe) but are no longer linked to you.

One thing may stay for a short time. If, when you delete, matches against people are paused on your account, you’re waiting after leaving a match, or there are recent reports about you that count towards a pause, we keep a short safety note so that deleting and signing up again with the same email address (or a variation of it, such as with a +tag, different capitals or, for Gmail, dots) doesn’t wipe them. It’s filed under a one-way scrambled code made from your email — it doesn’t contain your email, account id or any tracks — and holds only the end of the pause, the end of the wait, and the counting reports from the last 30 days (each one’s reason, match and when, and the reporter’s scrambled code). It’s deleted at the latest of: the end of the pause (30 days after the last counting report, or longer only if a person at Tastic Games set it), the end of the wait, and 30 days after the most recent counting report. If you sign up again with that email (or a variation of it) before then, it moves back to your new account. If there’s a pause or a wait, the account page tells you before you confirm; we don’t say so when there are only reports, so nobody can use deletion to find out whether they’ve been reported. We keep this note because it’s still needed to keep a safety measure working, which is why it isn’t erased straight away.

Other players keep your public name (not your email) and the tracks you picked in their own My tracks for up to 90 days. Blocks other players made against you are deleted with your account.

Your rights

You can ask to access, correct, delete or receive a copy of your data, to restrict or object to how we use it, and to withdraw consent where we rely on it. Email hello@tasticgames.com — we reply within one month. You can delete your account yourself on the account page. If you’re unhappy, you can complain to the Information Commissioner’s Office (ico.org.uk).

Children and age

Anyone can play as a guest against bots — no email, no account, and no other people in the match. If you’re under 13, please ask a parent or guardian first.

Accounts are for people aged 13 or over — we ask you to confirm it when you sign up. Only signed-in players aged 13+ are matched with other people or appear on the boards. If you think a child under 13 has created an account, email hello@tasticgames.com and we’ll delete it.

High-privacy settings are on for everyone: no chat, no profiles, no location, clean (non-explicit) tracks only, generated names by default (a chosen display name is strictly filtered and can be reported), report and block on every other player, and no personalised ads unless a signed-in 13+ player turns them on.

Cookies and device storage

We only use what’s needed to run the game and your account, and — for ads — Google’s cookies (with your consent where the law requires it). The full list is in our Cookie notice.

Changes

We’ll update this notice when things change and show the date at the top. Significant changes will be highlighted in the game.