Privacy Policy
十六 (JŪROKU, "the app") is a rhythm game that runs in your browser. This policy describes how the app handles information. Conditions of use are set out in the Terms of Use.
1. If you do not sign in
Every feature of the app works without signing in. In that case your best scores, World Tour progress and settings are stored only in your browser on your device (localStorage) and are never sent anywhere. The app uses no advertising, analytics or tracking of any kind (for the connections needed to load the page and audio, see section 8).
2. What we receive when you sign in with Google
You may optionally sign in with a Google account to carry your records across devices. When you do, the app receives the following from Google:
- Your Google account identifier (sub) — a stable ID used only to tell users apart
- Your email address — used only to show that you are signed in
The only scopes requested are openid and email. The app does not access contacts, calendar, Drive or any other data, and never receives your Google password.
3. What is stored, and where
While signed in, the following game data is stored in Cloudflare Workers KV (storage provided by Cloudflare, Inc., United States; data is replicated across Cloudflare's data centres worldwide):
- Best records per song (score, accuracy, judgment breakdown, max combo, date)
- World Tour progress (cleared songs)
- Song links you added (Suno URLs)
These are keyed by the identifier above. Device-specific settings (OFFSET, marker, hit sound, vibration) and any audio files you load are not stored and never leave your device.
Retention: stored game data is kept until you delete it as described in section 6. The sign-in cookie (section 7) expires after 90 days.
4. Purpose
The information is used solely so that you can use the same records and progress on multiple devices. It is not used for any other purpose.
5. Sharing with third parties
We do not sell, lend or otherwise share your information with third parties, except where disclosure is required by law.
6. Deleting your data
You can delete the stored information at any time with "Delete cloud data" in the app's Settings. Deleting also signs you out (records on your device are kept). You can revoke the app's access to your Google account from your Google account settings.
7. Cookies
One cookie is used to keep you signed in (valid for 90 days). No advertising or analytics cookies are used.
8. Connections to external services
Using the app causes your browser to connect to the services below. Technical information such as your IP address and browser type is sent to each provider and handled under its own policy. The app itself does not receive this information.
- Cloudflare, Inc. (United States) — hosts the app. The page, audio-processing code and fonts are all served from here (no third-party font service is used).
- Suno, Inc. (United States) content servers (cdn1.suno.ai / cdn2.suno.ai) — cover art, and audio only when you load a Suno link yourself. Audio for the bundled songs is served from the app's own server (Cloudflare), so your browser normally makes no audio request to Suno at all. For linked songs, if your browser cannot fetch the audio directly, the app's own server may fetch it on your behalf; in that case your browser does not contact Suno directly (your IP address is not sent to Suno).
- Link-resolution relays — only when you paste a Suno share link (e.g. a short link), the pasted URL may be sent to one of allorigins.win / codetabs.com / corsfix.com / jina.ai / thingproxy.freeboard.io to read the song title. Not used for bundled songs or local files.
- Google LLC — only if you choose to sign in, you are taken to Google's sign-in page (section 2).
9. Contact
For questions about this policy or your data, please open an issue on the GitHub repository.
10. Changes to this policy
When this policy changes, the "Last updated" date above will be revised.
Back to 十六