Privacy Policy

This Privacy Policy explains how Song Serpent (“we,” “us”) collects, uses, discloses, and protects information when you use our website, accounts, payments, desktop Software, and guest Fangcast™ live pages (for example, /live/… links shared by a karaoke host).

Third-party Engines (such as KaraFun or VirtualDJ) and payment processors have their own privacy policies. This Policy does not cover those services.

1. Information we collect

Account and profile

• Email address, name, country, and password (stored hashed).
• Account role and status (for example, admin flags or bans).

Commerce

• Order identifiers, amounts, currency, coupons, and fulfillment status.
• Payment provider references (for example, Stripe or PayPal IDs). We do not store full payment card numbers.

License and device

• License keys and activation records.
• Machine fingerprint, hostname, and activation/deactivation timestamps used to enforce seat limits and prevent abuse.
• API tokens or entitlement material needed to operate your license.

Fangcast™ (guest live page)

When you open a host’s Fangcast™ link on your phone or browser, we process limited technical data so the room feature works. We do not ask for your name, email, phone number, or social identity.

• Anonymous device identifier. When you vibe (or stay connected as a guest in the room), the page stores a random id in your browser (local storage) and we may set an http-only cookie for the same purpose. Tabs in the same browser share that id. That id is sent to our servers and stored as a one-way hash (not the raw id). We use this to allow roughly one reaction per song per browser, unlock Front row / hot-streak style features, limit cheer spam, and count connected devices. We do not set this cookie merely for opening the page. The cookie lasts up to seven days. Opening the link in another browser is treated as another guest. Private / incognito windows can watch the room but cannot vibe.
• Opt-out (Watch only). The guest page footer includes Watch only. That clears the local id and cookie, stops vibes from this browser, and is the control for objecting to this processing (GDPR) and for refusing the functional identifier. You can tap Vibe from this browser later if you want to participate. California residents: we do not sell or share personal information for cross-context advertising; we treat a Global Privacy Control (GPC) signal as an opt-out of sale/share.
• Reaction and room activity. Reaction kind, song key for the current performance, room code, and timestamps related to vibes, cheer floaters, and presence pings.
• Technical request data. As with other Site traffic, standard server logs may include IP address, user-agent, and approximate timestamps.

Hosts may see aggregate tallies and device counts on their overlay or tools. They do not receive guest names from Fangcast™, and we do not publish a public leaderboard of other guests’ identities.

Technical and support

• IP address, browser/user-agent, approximate timestamps, and diagnostic logs from the Site.
• Information you send to support.

Information we do not intentionally collect via Song Serpent

We do not operate your Engine catalogs. Song metadata you search or queue through Engines is processed under those vendors’ systems and policies. Local queue/history stored on your computer by the desktop app remains on your device unless you choose to share logs with support.

2. How we use information

• Provide accounts, licenses, activations, updates, and customer support.
• Operate Fangcast™ rooms: enforce fair vibing, power guest features, show live reactions to the host’s display, and prevent abuse.
• Process payments, prevent fraud, and handle refunds or chargebacks.
• Secure the Site and Software, enforce terms, and comply with law.
• Improve reliability and features (aggregated or de-identified where practical).
• Send transactional messages (receipts, security, license notices). Marketing emails only with consent where required.

3. Legal bases (EEA/UK where applicable)

Where GDPR/UK GDPR applies, we rely on: (b) contract / requested service when you vibe in a room a host shared; (f) legitimate interests in running that room fairly and preventing abuse; legal obligation; and consent where required (marketing email). You may object to legitimate-interest processing via Watch only on the guest page or by emailing support@songserpent.com.

4. Sharing

We may share information with:

• Payment processors (Stripe, PayPal, and similar);
• Hosting, email, and infrastructure providers acting on our instructions;
• Professional advisors (legal, accounting) under confidentiality;
• Authorities when required by law or to protect rights and safety; and
• A successor in a merger, acquisition, or asset sale.

We do not sell personal information for money. We do not share your data with Engine vendors as part of a partnership unless you connect your own Engine accounts on your devices.

Fangcast™ reaction tallies and device counts are available to the karaoke host who opened the room (and may appear on their audience display). Guests are not identified to the host by name through Fangcast™.

5. Retention

We retain account and order records as needed for the relationship, legal compliance, tax, and dispute resolution. Activation records may be kept while a license is active and for a reasonable period afterward for security and abuse prevention.

Fangcast™ room data (including hashed device ids, reactions, and related room snapshot fields) is retained while the room is open and for a limited period afterward as needed to operate the feature, resolve abuse, and maintain service reliability. When a host closes or rotates a room, prior guest activity is no longer needed for that live link.

6. Security

We use administrative and technical safeguards appropriate to our size and risk profile (including hashing guest device ids before storage). No method of transmission or storage is perfectly secure.

7. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Email support@songserpent.com. We may verify your request. You may also close your account subject to legal retention needs.

Fangcast™ guests can use Watch only on the live page, or clear site data / cookies / local storage in their browser, to discard the local device id; that does not automatically erase already-stored hashed records for an open room. Contact support@songserpent.com for guest-related requests when feasible.

California residents may have additional rights under the CCPA/CPRA, including the right to opt out of “sale” or “share” of personal information. We do not sell or share personal information for cross-context behavioral advertising. We honor the Global Privacy Control (GPC) signal as that opt-out. If that product model changes, we will update this Policy.

8. Children

The Site and Software are not directed to children under 16 (or under 13 where that is the applicable standard). We do not knowingly collect their personal information. Fangcast™ live pages are intended for use in venues under a host’s supervision; hosts should not encourage younger children to use the feature where local law restricts it.

9. International transfers

We may process data in the United States and other countries. Where required, we use appropriate transfer mechanisms.

10. Changes

We may update this Policy by posting a new effective date. Material changes will be highlighted when reasonably practical.

11. Contact

Contact: support@songserpent.com