Melody Privacy Policy

Effective date: September 8, 2026

Melody is a browser-based game operated by Raymond Miller under the RuneRock Interactive name. We collect the information needed to run accounts, save game and editor activity, protect the service, respond to support requests, and understand basic site reliability. We do not sell personal information or use it for targeted advertising.

Information we collect

• Account and identity information: email address, display name, avatar, authentication provider identifiers, and account-security records. Google sign-in requests only basic identity, email, and profile access.
• Game and community information: profiles, preferences, levels and other content you create, publications, favorites, playlists, ratings, completion records, and moderation or safety reports.
• Support information: messages, contact details you choose to provide, and the operational records needed to respond to feedback or account-help requests.
• Technical information: security, authentication, request, error, and performance data such as timestamps, browser or device characteristics, network address, page views, and Core Web Vitals.

How we use information

We use this information to authenticate players; provide, save, and improve Melody; publish content at your direction; maintain community and account safety; prevent abuse; diagnose failures; operate backups and incident response; communicate about accounts or requested support; and comply with applicable obligations.

Service providers

Melody uses service providers that process information for these purposes: Supabase for authentication, database, and file storage; Google for optional Google sign-in; Vercel for hosting, page-view and gameplay/conversion analytics, and performance measurement; Cloudflare for the human verification shown on email-authentication forms; Resend for transactional email; and Asana for private support workflow. Optional links such as Ko-fi take you to an independent service governed by that service's own privacy terms.

Browser storage and cookies

Melody and its authentication or security providers use browser storage, cookies, or similar technologies where needed to keep you signed in, protect authentication, preserve settings, and operate the service. Melody does not use advertising cookies.

Melody measures Official-level starts and wins, confirmed signups, first draft saves following an observed signup, and accepted feedback. These events include only approved public source and campaign labels, without account identifiers, emails, level names, or feedback contents. Custom-event URLs omit query strings and account or authored-content paths. Source labels are retained in a browser tab for up to 24 hours. To connect a signup with its confirmation and first draft save, Melody also keeps its acquisition labels, times, completion flags, and account identifier locally in that browser for up to seven days. That identifier is never sent to Vercel. Expired measurement state is removed when measurement next runs. Clearing site data or using another browser can prevent these actions from being linked.

Melody's administrators can exclude an internal browser profile from Vercel page-view analytics, gameplay/conversion events, and performance measurement. Melody stores that choice only in the browser. Clearing Melody's site data, using private browsing, or changing browsers, profiles, or devices removes or does not carry the choice, so it must be set separately again. This choice does not disable the authentication, security, support, or game records needed to operate Melody.

Sharing and public content

We share information with the service providers above only as needed to operate Melody, and when required for security, legal compliance, or protection of users and the service. Content you deliberately publish, together with the public profile information associated with it, may be visible to other players. Drafts, private account details, and exact moderation evidence are not made public merely because you have an account.

Retention and choices

We retain information for as long as reasonably necessary to provide Melody, preserve account and community integrity, maintain security and audit records, resolve disputes, and meet legal obligations. You may sign out at any time, edit available profile information in Melody, revoke Google access through your Google Account, or contact us about access, correction, or deletion. Some public content, moderation evidence, backups, or records required for safety and legal purposes may remain for a limited period or be preserved in de-identified form.

Security and international processing

We use access controls, encryption in transit, backups, monitoring, and other safeguards appropriate to an Early Access service. No online service can guarantee absolute security. Melody and its providers may process information in the United States and other locations where they operate.

Changes to this policy

We may update this policy as Melody changes. We will post the revised policy here and change the effective date. Material changes may also be communicated through Melody or the account contact information available to us.

Contact

For privacy questions or requests, email melodythegame@outlook.com.