Privacy Policy

Last updated: February 25, 2026

Planet Bluegrass (“we”, “us”) operates the Song Jury web application. This policy describes how we collect, use, and protect your information.

Information We Collect

Account Information

When you sign up via Google, Apple, or email, we collect your name, email address, and profile photo (if provided by your OAuth provider).

Profile Information

You may optionally provide a display name, phone number, mailing address, bio, website, and social media links.

Submission Content

Contestants may upload MP3 audio files, lyrics documents (PDF/DOCX), song titles, and notes. Judges provide scores and written feedback on submissions.

Automatically Collected Data

We collect IP addresses, browser user-agent strings, and session data for authentication and security purposes. We use Sentry for error tracking, which may capture session replays and performance data to help us diagnose issues. We also use PostHog to collect anonymous usage data such as pageviews, clicks, and feature interactions to improve the application.

How We Use Your Information

Authentication: Verify your identity and manage sessions.
App Functionality: Display your profile, process contest submissions, and facilitate judging.
Communication: Send magic-link login emails and contest-related notifications.
Error Monitoring: Diagnose and fix bugs via Sentry.

We do not sell your personal information.

Third-Party Services

Service	Purpose	Data Shared
Google OAuth	Authentication	Name, email, profile photo (received from Google)
Apple OAuth	Authentication	Name, email (received from Apple)
Cloudflare R2	File storage	Uploaded MP3s and lyrics documents
Sentry	Error tracking	Session data, errors, interaction replays
PostHog	Product analytics	Anonymous usage data, pageviews, feature interactions
SMTP provider	Email delivery	Email address

Data Retention

Your account data is retained as long as your account is active. You may request deletion of your account and associated data by contacting us.

Data Security

We use HTTPS, secure session tokens, and presigned URLs with short expiry for file access. OAuth tokens are stored securely and not exposed to the client.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at the email address provided in the application.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this policy, contact us at [email protected].