Privacy
Last updated 22 August 2026
MapSongs is a practice tool for memorizing songs. It is run by one person as a personal project. It has no advertising, sells nothing, and shares nothing about you with anyone for marketing purposes.
What is stored about you
- Your email address, so you can sign in. Sign-in is a magic link or a password you set yourself. Authentication is handled by Supabase.
- The songs you create — title, artist, key, tempo, capo, an optional source URL, and the chord and lyric content you type or paste. Every row is scoped to your account by database row-level security: no other user can read your songs, and there is no public library. Sharing does not change that — a share link carries the song inside the link itself, so what you send travels with the link and is never stored on, or seen by, MapSongs.
- Recording links and calibration — if you link a song to a YouTube video, MapSongs stores that video id, the calibration points you set, and the video's title, channel and duration so the playback bar can display what is linked.
- Anything you email me — if you write to the contact address, your message and address sit in that mailbox. They are used to answer you and to fix what you reported, including any chord sheet you send to reproduce an import problem. Nothing from an email is added to your account or published, and if you would like a conversation deleted, ask and it will be.
What stays in your browser
Playback and display preferences, your library's sort and filter, and whether you have dismissed the support note. These live in your browser's local storage and cookies, are never sent anywhere, and are cleared by clearing site data.
Cookies
MapSongs sets cookies for two things only: keeping you signed in, and remembering how you last sorted and filtered your library. Both are functional. Neither tracks you, and neither follows you to any other site.
No third party is permitted to set advertising or tracking cookies here. There is no ad network, no data broker, and no cross-site profiling. The site analytics are cookieless by design, which is why you have not been asked to dismiss a cookie banner.
Two third parties can set one. Google can, through the embedded YouTube player, and only once you actually play a video — see the next section. Cloudflare's bot check on the sign-in page may set a short-lived one while it works out whether you are a person; it is functional rather than advertising, and it does not follow you to another site. You can clear or block all of it from your browser's own site-data settings; blocking cookies for this site will sign you out and reset your library view, and nothing else.
YouTube
MapSongs embeds the YouTube player so you can check a chart against a recording. By using that feature you are also agreeing to the YouTube Terms of Service.
The embedded player is Google's software running inside this page. It collects data about your use of it, and that collection is governed by the Google Privacy Policy rather than by this one. MapSongs does not receive that data.
MapSongs loads the player in YouTube's privacy-enhanced mode, from youtube-nocookie.com. That means it does not set tracking cookies when the player merely appears on screen, only once you actually play something. It reduces what is collected. It does not make playing a video private, so if you would rather Google saw nothing at all, do not press play.
MapSongs stores only the video id and your calibration points. It does not use YouTube's API to obtain anything about you, and it asks for no YouTube or Google account access. You can revoke any access an application holds on your Google account at Google's security settings.
Other services
- Supabase stores the database and handles sign-in. Their privacy policy.
- Vercel hosts the site and provides analytics. Their privacy policy. The analytics are cookieless and record page views and country only. They do not identify you, which is why this site has no cookie banner.
- Cloudflare does two jobs here, and both involve your IP address. It runs the bot check on the sign-in page, which is what stops the form being used to send mail to strangers; and it provides a second set of site analytics, cookieless and page-level in the same way Vercel's are. Neither identifies you and neither follows you to another site. Their privacy policy.
- Resend delivers the sign-in emails. It therefore holds your email address and the links sent to it. It is not used for anything else — there is no newsletter, and no marketing mail is ever sent from here. Their privacy policy.
- Deezer is used only if you press the tempo lookup button, which sends that song's title and artist to Deezer's public API to fetch a suggested BPM. Nothing about you is sent. Their privacy policy.
- Buy Me a Coffee handles donations, entirely on their own site. MapSongs never sees a payment detail, and donating is not linked to your MapSongs account. Their privacy policy.
- Ultimate Guitar receives nothing from MapSongs. The import search opens a link in a new tab, and the bookmarklet reads a page you already opened. MapSongs makes no request to them at all.
What is never done
Your songs and lyrics are not read, mined, published, sold, or used to train anything. There is no advertising and no third-party tracking beyond the cookieless analytics named above.
Deleting your data
Deleting a song deletes it and its recording links. To delete your account and everything attached to it, email privacy@mapsongs.com from the address you signed up with and it will be removed. There is no backup copy kept afterward for any purpose other than routine database backups, which age out on their own.
Changes
If this policy changes in substance, the date at the top changes with it.