Privacy Policy

Hitify respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your data when you use our service.

The controller of your personal data is Klappe Development (trading as Hitify), owned by Dennis Klappe, Boersenserf 10, 3871RK Hoevelaken, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 71434577. Contact for anything about privacy: [email protected].

We collect the following data: • Spotify account information (name, email) when you connect to Spotify • Email address when creating a pack (optional) • Usage data such as scanned cards and created packs • Technical data such as browser type and IP address

When you upload a photo for personalized cards, it is securely stored on our protected servers. Your photos are used exclusively for processing your order and generating your cards. Photos are not shared with third parties and are only accessible for order fulfillment.

We use your data for: • Providing our service (creating packs, scanning cards) • Improving our service • Communication about your orders • Preventing abuse

When you connect to Spotify, we gain access to your public profile and playlists. We do not store Spotify passwords and have no access to your Spotify account other than what is necessary for importing playlists. You can revoke this access at any time through your Spotify account settings.

We use Google Analytics 4 (GA4) to analyze website usage. GA4 collects anonymized data about your visit, such as pages viewed, session duration, and language preferences. This information helps us improve the website. You can decline analytics cookies via our cookie banner or your browser settings.

We use functional cookies that are necessary for the website to function. These cookies remember your session and preferences. We also use analytical cookies (Google Analytics) for website analysis. See our cookie policy for more details.

We do not share your data with third parties, except when necessary to provide our service (e.g., payment processors) or when legally required.

You can create a Hitify account on the website or in the Hitify Play apps. You sign in in one of three ways: • With your email address: we send a six-digit code to that address, valid for 10 minutes • With Google ("Continue with Google") • With Apple ("Sign in with Apple") With Google or Apple we receive a verified email address and the identifier that provider uses for you. We do not store your name from Google or Apple. If you use Apple's private relay address, your account is that relay address until you link your real email address with a code we send to it. For Apple we also store an encrypted token, only so that we can tell Apple to revoke the connection when you delete your account. On the website a sign-in session lasts 7 days (a cookie). In the apps it lasts up to 180 days; the app stores a secret token and we store only a one-way hash of it. The legal basis is the performance of our agreement with you (providing your account).

Your public name on Hitify is your username (3 to 20 letters, digits, dots, hyphens or underscores). Usernames are unique, reserved words and names that would impersonate Hitify are refused, and an offensive-word filter in all sixteen site languages applies. You can change it once for free and after that once every 14 days; the name you leave is reserved for you for 30 days. Your avatar is generated from a random seed that we store with your profile. You cannot upload a photo as an avatar. You may add a short tagline (at most 60 characters, no links, no @ and no phone numbers). New profiles are public by default as soon as you have chosen a username. In your settings you can choose between public (anyone with the link), friends only (your confirmed friends who are signed in) and private (only you). A public profile shows: your username, avatar, tile colour, tagline, the month you joined, your level, the number of friends, achievements, your daily challenge streak (current and best), games played, duels won, lost and drawn, the last 14 daily results as coloured tiles (score only, no dates), the days of the last 12 weeks on which you played the daily, up to three favourite decks or categories (you can switch this off) and your last five duels (result, deck, points and how long ago; never your opponent). It never shows your email address, real name, friend code, IP address or exact times. The page is not indexed by search engines. If you already had an account before public profiles existed and had not made a choice, we showed you a notice that your profile is visible to other players. If you had still not chosen 14 days after the notice was first shown, your profile became public. You can hide it or limit it to friends at any time. Deleting your account removes the page immediately.

Friends. Every account has a friend code. You can add people by code, username or a shared link. A friend request shows only your username and avatar. You can pause incoming friend requests, remove a friend and block someone. When a friend request is accepted, you and that friend can see each other's daily challenge streak, weekly daily score, duel wins, head-to-head record, last daily played and recent activity (finishing the daily, streak milestones of 7, 14 and 30 days, duel results against you, new friendships), and you appear on each other's friends leaderboards (daily streak, weekly score, duel wins). Being friends is the basis for this: there is no separate switch yet, so remove or block a friend to stop sharing with them. There is no chat and no free-text message between players. Duels. Duels need an account. The person you play against sees your username and avatar and, once the duel is finished, your points. A duel link can be opened by whoever receives it. We store the duel with its players, the songs, the answers and the result. A duel that nobody finishes expires after 7 days. Finished, expired and cancelled duels are deleted 90 days after they were created. Your finished duels also update your own counters (duels won, lost and drawn, favourite decks and the last five results) and the head-to-head counter with a friend. Daily challenge. Everybody gets the same songs each day. Without an account your result and streak stay on your own device. With an account we store the first result of each day (score and the result of each card), your streak, best streak and average, so that your streak survives a new device. Practice rounds are not stored. Plays from the archive are stored separately and do not count towards your streak. You can download your stored daily results from your account. If you switch the daily reminder on, we also store your consent, the hour you chose and your time zone. Your choice of a country daily is stored with your account; country daily results stay on your device.

You can report a player or a profile (reasons: name, harassment, spam, other; there is no free text) and block them. A block works one way and removes the friendship and pending requests. We store the report with the opaque ids of the reporter and the reported person, the reason, where it happened and the name that was shown. If three different people report the same person within 7 days, that person's username is automatically replaced by a generated name. Our team can also reset a username or switch off the social features of an account. You can reach us about abuse at [email protected] and we aim to answer within 24 hours. You can also report a deck ("Report this pack"): you choose a reason (offensive, copyright, spam, other) and may add a note of up to 500 characters. No account is needed. We store the reason, the note, your language, a salted hash of your IP address (not the address itself) and the ticket number, and we limit how often one connection can report. If a person whose account is deleted appears in reports, the reports are kept without any link to them.

In the apps you can switch on push notifications. For that we store, per device, the push token, the platform (Android or iOS), your language, your time zone and the app version, for at most 10 devices per account. Android push goes through Google Firebase Cloud Messaging and iOS push through the Apple Push Notification service, which means the token and the message pass through Google or Apple. A token is removed when you sign out, switch notifications off, the device is no longer reachable or you delete your account. There are six kinds of notification: the daily reminder, a duel invite or your turn, a friend's nudge, a duel result, a friend request and news and offers. For each kind you choose push and email separately in the settings of your account (web or app). Push is on where you have a device and have allowed it; duel emails and news emails are off unless you switch them on, and news email follows your marketing consent. You can pause everything for 1 to 30 days. Friend requests, nudges and news are held back between 22:00 and 07:59 in your device time zone, and the daily reminder only goes between 08:00 and 21:59. The apps also keep an inbox with copies of the notifications you received (the last 30 days are shown). Emails about orders, downloads, sign-in codes, privacy requests and support replies are not affected by these settings. Every notification email has a link to switch it off without signing in.

The sections on the scanner apps below apply to the Hitify scanner apps only, which need no account. The Hitify Play apps (Android and iOS) are different: some features, such as unlocking decks, making a deck, friends, duels, your daily challenge history and notifications, need an account (see above). The apps send what is needed for those features to hitify.app, and game statistics as described under "Game statistics and advertising measurement". The apps contain no advertising SDK and no third-party analytics SDK and do not use the advertising identifier. The Android app uses Google Firebase Cloud Messaging for push notifications only. In-app purchases. A purchase is made and paid through the Apple App Store or Google Play; Apple or Google processes the payment and we never see your card details. We receive proof of the purchase: the product, the transaction identifier (Apple) or purchase token (Google), the deck it unlocks, the date and its status; from Apple we also receive the price and currency. We link the unlock to your account. If Apple or Google tells us a purchase was refunded or revoked, we remove the unlock. We keep the purchase record as accounting evidence; when you delete your account the record is kept but your email address is replaced by a one-way code. Apple and Google keep their own records of your purchase under your store account. Android testing. If you sign up for the Android app testing programme, we store the email address you used to sign in, together with your consent, to invite you as a tester.

Decks (packs) are public. Every deck you create is public, like a playlist on Spotify: it can be listed on /packs, found, opened, played and downloaded by anyone, and printed cards made from it keep working. Decks created before 7 November 2026 keep the choice made at the time (public, link only or private). A deck made for one person (for example with a custom field or a photo) is kept off the public list but can still be opened by link. The deck page and the apps show your username as the creator only if your profile is public; they never show your email address. We store your email address as the owner of the deck, so that it appears in your account. You can remove a deck from your account: the link between the deck and your email address is cut, the deck itself stays online and playable, and you can no longer edit it. We keep a record of the former owner in a separate table until you delete your account. We never delete a deck that was ordered, downloaded or paid for, because printed cards carry its codes; a private deck that was never ordered, downloaded or paid for can be deleted completely. Decks you only bought or downloaded stay with the buyer. Uploaded photos and custom text on cards are used as described under "Uploaded photos". Share cards. If you press Share after a game or the daily challenge, the image is drawn on your device and uploaded to our storage under a random identifier, so that the link unfolds in chat apps. It contains no names, room codes or email addresses. Share images are deleted after 90 days. Anyone who has the link can see the image.

In party rooms (a big host screen with players on their own phones) players join with a four-letter room code and a nickname, without an account. The other players in the room see the nickname and an avatar generated from it. Room data lives only in the temporary memory of that room and is deleted when the room has been idle for 4 hours or 15 minutes after the game ends. Nothing about a room or its players is written to our database. To prevent abuse we count, per IP address and per hour, how many rooms are created from it.

Game statistics. When you play the digital game, the daily challenge, duels or party rooms, we record events such as game started, card placed (and whether it was right), game finished, deck chosen, sign-in method used and share pressed. An event holds a random identifier of the visit, the platform (web, Android or iOS), the language, a deck or song code and a few numbers. It holds no email address, name or IP address. These events are kept for 90 days in our own database and the same events are sent to Google Analytics 4. On the website nothing is sent if you declined cookies. Advertising measurement. If you accept cookies, we use Google Ads conversion measurement and store the advertising click identifier of a visit that came from an advert in our own cookie for 90 days. The TikTok and Reddit advertising pixels load only after you have accepted cookies. Without your acceptance none of them loads (Google Analytics then works without cookies). You can change your choice in the cookie banner or your browser.

Hitify does not ask for your age and does not check it. An account needs only an email address or a Google or Apple sign-in. Between players there is no chat, no free-text messages, no photos, no real names and no location: the only things other players can see are your username, generated avatar, optional tagline and play statistics. You decide who can see your profile, you can pause friend requests and you can block and report players. You must be at least 16 to create an account. If you are younger, you may only do so where the law allows it and, where the law requires it, with the consent of a parent or guardian. We cannot verify this. A parent or guardian can ask us at [email protected] to delete a child's account. The songs in Hitify are real commercial recordings. Some contain explicit lyrics; we do not restrict songs by age. Decks made by other people are public and are not reviewed before they appear.

We use these providers, and only for what is described here: • Cloudflare: hosting, our database, file and temporary storage, the network, and the bot check (Turnstile) on forms • EmailIt: delivery of our emails • Shopify: checkout, payment and order handling for orders from our shop • Sendcloud: shipping labels and delivery of physical orders (name and address) • Google: Google Analytics 4, Google Ads measurement (only after you accept cookies), Sign in with Google, Firebase Cloud Messaging for push on Android and Google Play for purchases in the Android app • Apple: Sign in with Apple, the Apple Push Notification service, App Store purchases and, if you choose it, Apple Music (MusicKit) • Music services (Spotify, Deezer, Tidal, YouTube, Apple Music): playlists you paste are read through their interfaces, and song previews are played from them • TikTok and Reddit: advertising pixels, only after you accept cookies We do not sell personal data. Some of these providers are outside the European Economic Area; they handle data under their own privacy policies and the safeguards they offer.

• Your account (email address, profile, friends, results, settings, devices): until you delete your account • Website sign-in session: 7 days. App sign-in session: up to 180 days. Sign-in code: valid for 10 minutes • Unfinished duels: expire after 7 days. Finished, expired and cancelled duels: deleted 90 days after they were created • Game events: 90 days • Share images: 90 days • Party rooms: deleted after 4 hours idle or 15 minutes after the game ends • A username you leave: reserved for you for 30 days • Orders and invoices: for as long as tax law requires (7 years in the Netherlands) • After you delete your account we keep a one-way hash of your email address so that you are not mailed again by mistake

You can delete your account yourself: on the website at the bottom of your account page, and in the Hitify Play apps in the settings. Deleting is permanent and removes: your sign-in sessions and codes, linked Google and Apple sign-ins (and, where we hold the token, the connection with Apple), your profile, username, friend code, friends, blocks, public profile and statistics, daily results and reminders, notification settings, devices and inbox, marketing consent and history, uploaded photos and your song corrections. Your decks stay online without an owner. Your seats in duels stay for your opponent as an anonymous "Player". Reports about or by you are kept without any link to you. We keep orders and invoices as the law requires, and purchase records of the app stores with your email address removed. Card designs and custom party card sets you made on the website are disconnected from you: your email address and the link to your browser are removed, and nobody can open or edit them from an account any more. We keep the design or set itself, because a paid order refers to it and printed party cards keep working. If it contains text you wrote and you want it removed, email [email protected]; we do that unless an order depends on it. You can ask for a copy of your data at any time at [email protected]; part of it (your daily results and your profile and social data) can be downloaded from your account. You have the rights described under "Your rights", including the right to complain to the Autoriteit Persoonsgegevens.

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

You have the right to: • Request access to your personal data • Request correction of inaccurate data • Request deletion of your data • Object to processing of your data Contact us at [email protected] for privacy-related questions.

The Hitify scanner apps for iPhone, iPad and Android need no account, no login and no purchase. When you scan a card, the app sends the following to hitify.app: • the code printed in the card's QR code (for a QR code we do not recognise, the text of that code) • the language you chose in the app • a random scan session ID: a random number generated on your device when you first open the app. It is not your advertising ID, not a hardware ID and not linked to your name or email address • the app version, device type and operating system version (in the user agent) • a random install ID: a random number generated on your device when you first open the app, used only to count how many devices use the apps. It is not your advertising ID, not a hardware ID and is renewed when you reinstall the app • the device model (for example iPhone16,1 or Pixel 8) Our server also sees your IP address, as every server does. We use this data to find the song or party card, to count which kinds of cards are scanned and from which country, to limit the number of requests, and to prevent automated copying of our card database. The camera is used only on your device to read the QR code. No camera image is stored or sent to us. The apps contain no analytics or advertising SDKs, do not use an advertising ID, do not track you across other apps or websites, and we do not sell data. Song previews: our server looks up where a short preview of the song can be found. Your phone then streams the preview from the music service you chose in the settings (Spotify, Tidal, Apple Music or Deezer). That service can see your IP address, as with any stream. If you choose Apple Music, the app asks for access to Apple Music and plays through MusicKit with your own subscription, under Apple's terms and privacy policy. If you send an appeal from the app after a temporary block, we receive the email address and the message you type, and we use them only to answer you.

• Scan record (type of card, device class, operating system, country): kept for statistics, with no IP-based identifier once the next item has been removed • Keyed hash of your IP address on the scan record: deleted after 90 days • Random install ID and device model on the scan record: deleted after 90 days • Short-lived request counters that contain your IP address or scan session ID: between 60 seconds and 24 hours • Temporary block after an unusually high number of different cards scanned in one hour (this stores your plain IP address, user agent and country, and your appeal if you send one): the block lasts 24 hours and the record is deleted after 30 days by an automated job • Text of a QR code we do not recognise: sent to us by email without your IP address or scan session ID, and kept in our mailbox until we have dealt with it The legal basis is our legitimate interest in running and protecting the service (GDPR article 6(1)(f)); for an appeal it is your request. Our service providers Cloudflare (hosting and network) and EmailIt (email delivery) process data on our behalf.

The apps have no accounts, so there is nothing to sign in to or delete in the app itself. Deleting the app removes the scan session ID from your device. Because the scan session ID is random and not linked to your identity, we may ask you for the approximate time of your scan to find a record. You have the right to access, correct and delete your personal data, to restrict or object to processing, and to data portability. Send your request to [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the supervisory authority in your own country.

We may update this privacy policy from time to time. The most recent version is always available on this page.