PRIVACY

Privacy policy

Effective October 19, 2026 · Operated by the Tunoop operator · Contact: liionksh11@gmail.com

Optional analytics runs only after you allow it. You can play without allowing analytics. Game connections and your chosen YouTube playback are separate. Advertising-related choices are managed separately in Advertising privacy settings.

1. Data used to run a game

The game needs nicknames, characters, a theme, submitted YouTube links and start times, guesses and off-theme votes, scores, chat, a room code, and participant authentication information. These support game progress, player displays, reconnection, and troubleshooting.

For new rooms, the host's browser manages the full game state. WebRTC sends each participant the state they need. Nicknames, characters, and chat are visible to room members; answers and scores appear at the appropriate stage. Guests do not receive hidden answer lists or other players' individual votes. However, the host holds the full state to run the game and can inspect it using developer tools.

Cloudflare provides the website, connection signaling, access limits, and TURN relay when needed. Network connections involve IP addresses, browser request information, authentication hashes, and connection metadata. New-mode game state, chat, and votes are not sent to the signaling server. Direct peer connections can expose network addresses to the other peer.

2. Browser and server storage

Information	Where and how it is used
Language, volume, character	Saved in this browser's site storage for return visits. Change the settings or clear site data to remove them.
Host recovery copy	Stored for the same site address and browser profile. Usable for 24 hours after the last save; expired records are cleared on the next client initialization. Includes the room's game state and recent chat.
Participant session	Session storage supports reconnection in the same tab. Persistence depends on the browser's tab and session management.
Signaling information	Cloudflare uses it for room connections and reconnection authentication. A 24-hour expiry policy applies and may be renewed while the host stays connected.
Analytics choice	Saved in this browser for 180 days. After expiry, optional analytics stays off until allowed again.
Event deduplication and referral category	Managed in browser session storage. Referral categories last 30 minutes; game personal information is not included in analytics values.

The game state keeps at most the latest 100 chat messages. Rooms created using the legacy server mode follow the existing Cloudflare game-state policy of deletion after 24 hours of inactivity. Clearing your browser's site data does not erase other players' copies, third-party records, or chat already delivered to them.

3. Optional analytics

• Google Analytics 4: Measures visits and approved referral categories, room creation and joining, submissions, game starts, completions, replays, sharing, and playback errors. Custom events use approved fields such as stage, player count, song count, and error code. Page location is fixed to the public home address; room codes, query strings, and the actual referrer are not sent.
• Microsoft Clarity: Uses heatmaps and session replay for clicks, scrolling, and interactions on eligible pre-game home pages. Inputs and text are masked. It does not record game rooms. Room-link visits, arbitrary query strings, and external referrers are excluded.
• Custom analytics events do not include nicknames, chat text, song URLs or video IDs, room codes, participant tokens, individual votes, scores, or ranks. Advertising personalization is disabled for optional analytics.

Providers may process cookies, device and browser details, timestamps, approximate location, and technical connection information such as IP addresses. Not all analytics information is completely anonymous. These about, help, contact, terms, and privacy pages do not load analytics scripts.

4. Changing your analytics choice

Use Privacy settings in the footer to allow or decline. Google Analytics and Clarity scripts are not downloaded before permission. Declining stops new analytics transmission and clears analytics cookies this site can access. It does not retroactively delete records already sent to providers. A browser's Global Privacy Control signal overrides an earlier allowance and disables optional analytics. Choices apply separately per browser and site address.

5. YouTube and external services

Choosing a video preview or playback connects to YouTube's official player and related services. Google/YouTube may process network and device information and cookies under its own policies. Declining analytics does not stop processing for the YouTube playback you choose.

Cloudflare, Google, and Microsoft operate international services, and data may be processed outside your country. See each provider's policies for its retention, transfer, and rights procedures.

• Google and YouTube privacy policy
• Microsoft privacy statement
• Cloudflare privacy policy

6. Contact and privacy rights

Send privacy inquiries to liionksh11@gmail.com. Your message and reply address are used to assess, answer, and resolve the request. Do not send passwords or participant tokens. We accept requests such as access, correction, or deletion under applicable law and explain the available procedure after identifying the information and where it is held. The service has no accounts, and the operator may be unable to inspect or remove information held only in your browser.

You can remove host recovery copies and preferences through your browser's site data controls. Doing so can also prevent game recovery in that browser. See the provider policies above for ways to exercise rights directly with those services.

7. Advertising privacy settings

Tunoop does not currently display Google AdSense ads. The separate Advertising privacy settings page loads Google's official consent tool to prepare and manage advertising-related choices. Ad requests remain paused and there are no ad slots. The home screen, game rooms, and this privacy policy page do not include that advertising or consent code.

Loading the consent tool contacts Google services before you allow or decline. Google may process technical information such as IP address, browser details, and page requests, and may read existing Google cookies. No ads being displayed or no consent being given does not mean there is no external data processing.

The tool's screens let you inspect purposes and advertising technology providers, consent, decline, or choose detailed options. Choices are managed using browser storage such as cookies and TCF consent signals. Available screens depend on region, service settings, and loading status. See Google's cookie information for cookie types and retention, and the Google privacy policy for its processing practices.

Reopen the form through Advertising privacy settings to change choices or withdraw consent. These choices are separate from optional Google Analytics and Clarity permission; changing advertising choices does not automatically change your analytics choice. Declining does not prevent playing. For requests to delete information already processed, use the privacy inquiry procedures above.

8. Policy changes

Before displaying ads, this policy will be updated to cover their placement and the relevant processing and choices. Important changes will be announced on the site, and the effective date will be updated.