YOURBEATS

YourBeats privacy policy

Effective date: 2 November 2026

Last updated: 3 November 2026

This policy explains what information YourBeats collects when you play, why, who else sees or handles it, how long we keep it, and what you can do about it. It covers the YourBeats app, our server, and our web pages at yourbeats.net, including for people who visit them, or write to us, without playing. If anything is unclear, write to us at support@yourbeats.net.

The short version

Contents

  1. Who we are
  2. What we collect, and why
  3. Why we are allowed to use it
  4. YouTube
  5. Who else sees or handles your information
  6. How long we keep it
  7. Deleting your account
  8. Your rights, and how to complain
  9. Children and teenagers
  10. Security
  11. Information that leaves the UK
  12. Changes to this policy
  13. Contact us

1. Who we are

YourBeats is a rhythm game played along to music videos on YouTube. It is published by Unbelievable Media LTD ("YourBeats", "we", "us"), a private limited company registered in England and Wales, company number 16790553, whose registered office is at 29 Riverside Walk, Wickford, England, SS12 0DU. Under UK data protection law, and the EU's for players in the European Union and the rest of the European Economic Area, we are the controller of the personal information described here: we decide why and how it is used.

2. What we collect, and why

2.1 Your account

Your age. When you first open YourBeats, before any account is made, it asks for your year of birth (and, if you turn 13 or 18 this year, whether you have had your birthday yet). The answer stays on your phone. If you are under 13, the app makes no account for you (section 9). Your age also decides whether YourBeats' YouTube features are open to you, by YouTube's own minimum age for your country (section 9). Our server only ever learns your age group, 13 to 17 or 18 and over, and only for an email account. We use it to keep accounts for players aged 13 and over, to give players under 18 safer settings (section 9), and to decide who may see the adverts at breaks (section 2.15).

Your guest account. Once you have answered, and if you are 13 or older, the app makes a guest account for you, so that your progress is kept safe from the start. It has a random account ID, an automatic handle made of two words and some digits (other players see it in rooms, and anyone can look it up: section 5), and a secret that stays on your phone (our server keeps only a scrambled form of it, with the label "YourBeats app"). Your runs, progress, achievements, avatar and chart drafts are kept with it on our server. It has no email address, and only a phone that holds its secret can use it, or, on Android, a phone that Google Play Games signs in with the profile it is linked to (below). To limit abuse, when a guest account is made we keep a scrambled form of the internet (IP) address it came from for one day.

An email account. If you add an email address to your account, or sign in with one, we keep:

If you played as a guest first, signing in moves the guest's progress into your account, and we keep a note of the move (the guest's old ID, when, and how much was moved); the same happens when Google Play Games brings two of your accounts together (below). We never show your email address to other players and never use it for marketing.

Signing in with Google Play Games. On Android, if Play Games has signed you in on your phone (section 2.14), YourBeats uses it to sign you in to your own YourBeats account when it starts or you come back to it, without a button. You can also connect it yourself where you save your progress or sign in, or in Settings, then Account. It never does so for a player under 13 or whose age is not known, and it does not do it by itself on a phone where you tapped Sign out (Settings, then Account), deleted your account or chose "Not you?", until you sign in or connect it there. To sign you in, the app asks Google for a one-time code and sends it to our server with the label "YourBeats app" (for a guest account, also its ID and secret, which our server checks only if the guest's sign-in has lapsed, as when the app renews it). Our server gives the code to Google, which tells it your Play Games player ID. Google's answer also carries other details of your Play Games profile, such as its name and picture, which our server does not read or keep. We keep only a scrambled form of the player ID, made with a secret key of our own, with the account it opens, when it was linked and last used, and the app's label. Then:

Settings, then Account also shows your Play Games name, which the app reads from Google on your phone and never sends to us, and lets you unlink Play Games (section 2.14).

"Continue with Google". On Android, where you save your progress or sign in, "Continue with Google" lets Google give us your email address instead of you typing it. In the current version of the app, Google shows its own list of the Google accounts on your phone each time, and you choose one; the first time you use an account with YourBeats, Google tells you what it shares. Google then gives the app a sign-in it has signed, with your Google account's email address, whether Google has verified it, an ID for your Google account, your name and your profile picture, and the app sends it to our server with your age group, as adding an email address does. Our server checks Google's signature and uses only the email address, whether it is verified, whether it belongs to an organisation's Google Workspace, and the account ID: it does not keep your name or profile picture. Earlier versions of the app ask Google Play Games instead (signing you in to it first, if it has not) for a one-time code that also covers your email address; our server gives that code to Google, which tells it your Google account's email address, whether Google has verified it, an ID for your Google account and your Play Games player ID. Either way, if Google has verified the address and it is a Gmail address, or belongs to an organisation's Google Workspace, we take Google's word that it is yours; otherwise we first email it a six-digit code, as when you type an address. The address then becomes your account's email address or, if it already has a YourBeats account, this phone's guest progress joins that account (as above). We keep only scrambled forms of the IDs we receive (your Google account's, and with earlier versions your Play Games player ID), with your account, as for Play Games. If you close Google's list or decline its consent screen, we receive no address and keep nothing, and you can type your address instead. We use what Google gives us only to sign you in and to keep your account, never for advertising, and we never sell it or give it to anyone except as section 5 says, in line with the Google API Services User Data Policy.

Your profile. Your handle (unique, 3 to 16 characters) and the handles you have held before; your avatar (a set of shapes and colours you choose in the app, never a photo); with an email account, your profile page: its look (a stage set, a style for your handle and a status) and what it shows (up to three of YourBeats' own songs as its soundtrack, a wall of your records, rankings, achievements, skill or shared charts, the order of its parts and which ones you hide, a crew of up to eight of your friends, whether you appear in your friends' crews, and whether it takes cheers), each chosen from what YourBeats offers, never words of your own; your privacy choices (kept on your phone, and on our server for an email account); and a name you set in an earlier version of the app, if you did. Every new account gets an automatic handle made of two words and some digits, never anything from your email address. With an email account you can change the automatic handle at any time, and after that once every 30 days; your old handle is kept for you for 30 days so that nobody else takes it straight away. As you type a new handle, the app asks our server whether it is free, so the handles you try reach our server.

We also note when each account was last active, when the app signs in or sends runs. Friends see it only if you share your activity with them (section 2.3).

Your preferences. The difficulty you play songs at (and whether you chose it), your note speed, and what you have told the "Ready for more" suggestions (switched off, not now, or not again) are kept with your account, guest or email, so that they follow you to another phone.

Favourites. With an email account, the songs you mark as favourites are kept with your account, so that they follow you to another phone; a song you take off the list keeps a note of that for 400 days, so that an older change from another phone cannot put it back. A guest's favourites stay on the phone.

2.2 Playing

Runs. When you finish a song, alone or in a room, your phone sends the run to your account, guest or email: the song and chart, the difficulty and mode, your score, accuracy, longest combo, whether it was a full combo or all perfect, the phrases you played cleanly, your medal, whether Assist or "never stop the music" was on, whether part was skipped or interrupted, the day and time you played, and the phone's own number for the run. The first time a phone sends runs, it also sends the bests, achievements and weekly challenge progress it already holds. Practice runs, and the runs the game plays by itself in demos, are never sent. We use runs to work out your XP, level, skill, achievements and weekly challenges, and to keep your bests safe across phones. They also help choose songs, counted with everyone's and never shown by player: Ranked's weekly set leans towards the languages players played most the week before, and quick play picks a song in a language every player in the match has been playing.

Playing without a connection. Runs you finish offline wait on your phone and are sent when you are back online, with the time of your last sync, so that their dates stay honest.

The YourBeats Originals. Our own songs play from the app itself, without YouTube, with or without a connection, and nothing of their music is sent anywhere. A run of an Original is sent and counted like any other run (above): it adds to your XP, level, skill, achievements and weekly challenges. A run you play online, with a connection when it starts and when it ends, also counts for song records and friend challenges, as a run of any song does (below, and section 2.3); a run played offline never goes on song records. If you share usage data, it names the Original you played, as it names a catalogue song (section 2.9). A version of the app that includes the Originals checks its offline settings with our server when it starts and when you come back to it; that check sends no account or ID, and our server reads your country from it only to answer YouTube's minimum age (section 9). Under 13, no account is made, and the runs and usage data of an Original are never sent, not even after the player turns 13; only crash reports, which carry nothing that could identify anyone, are sent as for every player (section 9).

Your own copy of a song. If you have bought a song as a music file, "Use your own copy" on that song's page lets you choose the file in Android's own file picker, and the song can then play from it. YourBeats reads only the file you choose, only on your phone: it never copies the file, and never sends any of it anywhere (if you tap "Find it" below, sound prints made from it go to Apple: section 2.7). For a song we hold a print of, the check below tells whether your file is that song. For any other song, the app first reads the file's own title and artist (its tags) on your phone, and uses the file if they name the song. If they cannot say which song it is, the app may ask you whether to find the song by its sound (section 2.7) and, if you tap "Find it", uses the file if it is the song. Otherwise the file is not used and nothing is kept. A file you bring in through "Use your own music" is checked instead for the song you find or add there (section 2.7). Your phone then checks the file against the song: it downloads from our server the song's charts and the timing data the check compares your file with (for a song we hold a print of, the print too, which our server sends only with your account's sign-in and counts for an hour to limit overuse: section 2.11), and the check itself runs on your phone. A file the check refuses is not kept. If it passes, the song plays from your file when you have no connection, and also when YouTube will not play the song's video inside YourBeats. A run played from your own copy is sent like any other run (above), but it never goes on song records. If the file carries a cover picture, the app shows it as the song's cover, read and kept small on your phone only. What the app keeps about the file stays on your phone (section 2.10); "Forget" on the song's page removes it, and your file stays where it is.

Song records. With an email account, your best run on each chart goes on that chart's public song record. It shows your handle, your avatar, your handle's style and your public player ID (or "A player", and none of these, if you hide your name), and your result: score, accuracy, longest combo and streak, whether it was a full combo, and when you set it. We also keep a compact log of your timing on each note, and we check each record against its chart with that log, keeping the result with the record, so that scores stay genuine. Anyone can see the song records of YourBeats' own songs, including each chart's full rankings and the records set on its earlier versions; the records of a song players added are seen only by the players who added it (section 2.7). For the top three rows that show a name, our server also gives out an internal account number. If you finish a run as a guest and choose to sign in to post it, your phone keeps that run (at most five, each for up to 24 hours) and posts it once you have signed in, with the phone's own number for the run, so that it counts only once.

Ghost races. You can race a saved run as a "ghost" beside you: your own record, a friend's, or another player's record just above yours or at the top. To race one, your phone receives that record's score and its per-note timing log, with its player's handle, name and avatar as the song records show them. "Ghost races", among your privacy choices, decides who can race yours: everyone, your friends or nobody. It starts at everyone for players known to be 18 or over, and at friends for younger players and while your age is not known. A player who is not your friend can race only a record that has passed our score checks, and never across a block in either direction. You can always race your own.

Most played. We count how many players played each song this week. The list shows songs and numbers, never names.

2.3 Friends, challenges, blocking and reports

Friends, your inbox, challenges and your activity need an email account. Blocking and reporting are open to guest accounts too.

2.4 Rooms, quick play and events

2.5 Charts you make

When you share a run, the app makes a link (yourbeats.net/s/...) with a picture card. We keep the link with your account, the run's details (the song, difficulty and mode, medal, accuracy, score and combo, whether Assist or "never stop the music" helped, and its place on the song records) and your choice about showing your name. Guests can make share links too. A run on a song you added can be shared like any other: its page and card then show the song's title and artist as YouTube gives them, read from our list of prepared songs each time it is shown, never kept with the link.

2.7 Songs you add

2.8 Purchases

You can buy Premium, a subscription, and Full-length charts, a one-off purchase, in the app, through Google Play (our terms of use say what each gives). Buying needs an email account.

The supporter mark. With Premium, you can choose to show a supporter mark beside your handle on your profile page. It is off unless you switch it on, and shows only while you have Premium, to whoever can see your page's stage set and status (section 5), so they can tell that you have Premium. It never appears on song records, boards or rooms.

2.9 Crash reports and usage data

Crash reports (every player). When something goes wrong inside the app, it sends us a report so that we can fix it:

A crash report has no account, email, name or device ID, and nothing that links it to you, your phone or another report. Each carries a random reference of its own, used only so that a report sent twice is counted once, and kept for 7 days. We group reports of the same error and count them by app version and day. A group is deleted 400 days after the error was last seen. There is no switch for crash reports: they are how we find and fix faults in the game you are playing.

Usage data (unless you switch it off). "Share anonymous usage data" in Settings starts switched on for players old enough (below), and you can switch it off at any time. While it is on, the app makes a random number for this app on your phone (it is not your phone's own ID, and it has nothing to do with your account or email) and sends short notes of what happens in the game, each with that number, the time, the app's version and build, the platform, and a running count. They cover:

Usage data never carries your account, email, name or handle, anything you type, your search words, or your internet address (our server receives your address to answer, as it does for everything, and does not keep it with usage data). A song is kept only if it is one of YourBeats' own catalogue songs or Originals, never a song that is only a player's own. We use usage data, in totals, to see whether the game is fair and working: for example, how many new players finish a first song, and whether each difficulty is as hard across songs as it should be. No usage data is sent about a song whose video YouTube marks as made for children.

Google Analytics for Firebase (with the same switch). While "Share anonymous usage data" is on, Google Analytics for Firebase, Google's app measurement service, which we use to understand how the app is used, is on too. While it is on, Google receives: that the app was opened, for how long, and which of the app's screens you visit; when the app is first opened, updated or removed; your phone's Android version and language, and the app's version and the store it was installed from; once purchases exist, what you buy in the app (the product and its price, never your card details); and roughly where you are (a country or region, worked out from your phone's internet address, which Google does not keep). Google files this under a random number that Google Analytics makes for this app on your phone (its "app instance ID"), never your name, email, handle, account or anything you type. YourBeats removes Android's advertising ID permission from the app, and tells Google Analytics not to collect the advertising ID, not to use the data for adverts and not to personalise anything. It never starts for a player under 13, or younger than YouTube's minimum age where they live, because the switch is not offered to them.

2.10 On your phone

YourBeats keeps these in the app's own private storage on your phone:

Your phone's heat. So that the game's effects can ease off between songs when your phone runs hot or is saving battery, the app asks Android for its heat status, its battery-saver setting and its animation setting when a song ends, when it starts and when you come back to it, never during a song. The readings stay on your phone and are never sent to us: the app keeps only the reason and the time of an ease-off. (Separately, if you share usage data, the note sent when a song starts says the phone's heat as one word: section 2.9.)

Song covers come from YouTube. So that they show quickly, and when you are offline, the app keeps each one on your phone for up to 30 days, and fetches it again from YouTube after 7 days when you are online; it deletes them all for a player under 13 or younger than YouTube's minimum age, and when you use "Remove offline data". (The cover picture from your own copy's file is kept as described above.) Settings, then About, then Reset timing and scores (under "This phone") clears this phone's timing, bests and the progress kept on it, and nothing else. Uninstalling YourBeats, or Android's "Clear storage", clears everything it keeps on your phone. Android's backup to your Google account copies nothing of YourBeats. If you set up a new phone directly from your old one (Android 9 or later), everything above is copied to the new phone, your sign-in and your guest account's secret included.

2.11 Technical information

2.12 Features that are not switched on yet

These are built but not switched on in YourBeats today. Before any of them is, we will update this policy if what is collected changes.

Bringing your music into YourBeats. Section 2.7 describes the ways you can bring your music in today. We are building more, below; they are not switched on yet, and we will update this policy before each one is. None would be offered to players under 13, and those that use YouTube would stay closed, like the rest of YouTube in YourBeats, until a player reaches YouTube's minimum age for their country (section 9). They would work as follows.

Connect YouTube

Connect YouTube would let you bring in your own YouTube playlists and the videos you have liked, private ones included, without making anything public. It would always be your choice, and you could stop at any time.

Apple Music

You could connect Apple Music through Apple's own sign-in (MusicKit for Android, with the Apple Music app). Apple would give the app a key for your Apple Music account, a Music User Token, which would stay in the app's private storage on your phone and never reach our server; disconnecting deletes it.

Our server would give the app a short-lived key that identifies YourBeats to Apple, and would look up which Apple Music songs match YourBeats' songs; neither sends Apple anything about you. Apple handles your account and your library under Apple's privacy policy.

For players who have told YourBeats they are 18 or over, YourBeats could show a few links to Apple Music and, in the UK, to Amazon (for example to wired headphones, which keep timing steady), each marked "Ad". They would never be on or over YouTube's player, on the play screen, during a song or in a pop-up, tapping one would never earn anything in the game, and you could hide them. The "Listen on Apple Music" link that Apple requires beside a song identified by its ShazamKit (section 2.7) is shown to everyone who can use that feature, but would carry YourBeats' commission code only for these players.

A link would open in your browser, or in Apple's or Amazon's own app if you have it. There, Apple (through Partnerize, which runs Apple's programme) or Amazon would see that you came from YourBeats, using cookies, your internet address and your browser's details under their own privacy policies, and would pay YourBeats a commission if you subscribe or buy. The links would carry YourBeats' own codes and nothing about you, and we would count taps without knowing who tapped.

2.13 Notifications

Notifications (only if you say yes). YourBeats can tell you when something happens while the app is closed: your song is ready (or could not be prepared), news about your songs and charts, a friend request, a challenge, an event about to start, your Ranked results, news from YourBeats, and reports and account matters. Settings, then Account, then Notifications has a switch for each group of these ("Your song is ready", "Your songs and charts", "Friends and challenges", "Events and Ranked", "News from YourBeats" and "Account and safety") and quiet hours (from 22:00 to 08:00, or 21:00 to 08:00 for players under 18, until you change them). News is off until you switch it on.

2.14 Google Play Games

On Android, Google Play Games starts with YourBeats only once you have told the app that you are 13 or older: never for a player under 13, or whose age is not known. Then, if your phone has a Play Games profile, Play Games signs you in with it when YourBeats starts, as it does in other games that use Play Games (Google may first ask which account to use, and may show a short "signed in" message). YourBeats never asks Google to make a Play Games profile for you by itself: without one, Play Games does not sign you in when YourBeats starts. If you have none and connect Play Games yourself (Connect in Settings, then Account, or Play Games where you save your progress or sign in) or tap "Continue with Google", Google may offer to make one, on its own screen. Google collects its own information about the sign-in, including its own analytics and diagnostics, under the Google Privacy Policy (what Play Games collects). YourBeats uses it to sign you in to your own YourBeats account (section 2.1): our server receives your Play Games player ID from Google and keeps it only in scrambled form, and the app reads your Play Games name on your phone to show it to you there, never sending it to us. We also start Play Games so that YourBeats' achievements appear in it: the achievements you earn are unlocked in Play Games, which Google keeps with your Play Games profile, and Google may show its own short message when one is unlocked. If you share usage data, it tells us whether Play Games signed you in, and how signing in to YourBeats with it ended, so that we can check that it works (section 2.9).

To stop it. Signing out of an email account on a phone (Sign out, in Settings, then Account; a guest account has none) stops Play Games signing you in to YourBeats there, until you sign in again or connect it yourself. Unlink, under Google Play Games in Settings, then Account, removes the link between your account and your Play Games profile, and Play Games then no longer signs you in to YourBeats on that phone until you sign in, add an email address where you save your progress, or connect it again. For an account with no email address, the app asks you first, because a new phone could then no longer bring it back. Neither Sign out nor Unlink stops Play Games itself: it still starts when YourBeats starts and, while it has signed you in, the achievements you earn are still unlocked in it. YourBeats has no switch of its own for that. To stop Play Games signing you in by itself, sign out of it in Google Play (in the Play Store app, tap your profile picture, then Settings, General, Play Games profile and Sign in account). After that, Google may show its own Play Games sheet when YourBeats starts, asking you to choose a profile: if you close it, Play Games does not sign you in, YourBeats may tell you once that it did not, and YourBeats works as before without it. Signing out in Google Play does not sign you out of YourBeats, and your account stays linked to your Play Games profile until you unlink it. Google warns that signing out of all games might lose you access to your progress and settings in other games. You can manage or delete your Play Games data in your Play Games profile or your Google Account.

2.15 Adverts

Without Premium, YourBeats may show you adverts from Google AdMob, in the two ways below. They never appear during a song, or over YouTube's player, and they are never personalised. Nobody under 13 sees one.

Adverts at breaks. If you don't have Premium, the app may show a full-screen advert at some breaks in the game, for example when you leave a song's results; never during a song, and never when the app starts or closes. Premium turns them off; other purchases, such as Full-length charts, do not. These adverts are shown only to players who have told YourBeats they are 13 or over, and never to players younger than YouTube's minimum age where they live, or younger than 15 in Denmark, or whose age is not known (section 9). To decide, our server reads whether your account has Premium and, for an email account, your age group (section 2.1), and keeps nothing new; your phone decides the rest from a record it keeps (section 2.10).

The ad song. With an email account and without Premium, once your free song is used (or while it is held by a song still being prepared), YourBeats may offer you more songs, one for each advert break you choose to watch (one or more adverts, back to back), up to the number in any 24 hours that the app shows. The app shows how many free songs and ad songs you have. The offer sits on a song's page and on a room's "Add to your own songs", and only for players who can add songs (section 9).

For both:

3. Why we are allowed to use it

What we do Our reason under data protection law
Your guest or email account (and "Continue with Google", when you choose it), syncing your runs, progress, preferences and favourites, song records and ghost races, Ranked, friends, challenges, rooms (and your results in them), events, charts (and nominations and suggestions for official charts), share links and the links that open them after installing the app, adding songs (and asking for the advert break you chose to watch to add one, and checking Google's confirmation of it), importing your music, finding your music file's song by its sound when you tap "Find it", purchases, loading YouTube's player and covers for the songs you choose, checking and playing your own copy of a song, and deleting your account when you ask Providing YourBeats to you, as you asked (our contract with you)
Keeping YourBeats safe and fair: the age question and YouTube's minimum age for your country, reports and moderation (including reports and complaints from people who do not play, section 2.3), word filters, limits against spam and overuse, checking scores, scrambled internet addresses, the country check for videos, the country that chooses your Top charts, and counting each player's confirmation of a song's match once Our legitimate interests in a safe, fair and working game, and yours
Crash reports, technical logs, counting what is played (in totals, with no names), getting the next song's player ready when the app starts, the typefaces of our web pages, and sharing search results between players for a day Our legitimate interests in finding and fixing faults, a quick start, a working site and searches that go further within YouTube's limits. The law also allows the app to store and read what it needs on your phone to detect technical faults
Starting Google Play Games on Android for players who have told the app they are 13 or older, so that Play Games signs in a player who has a Play Games profile, as it does in other games, and signing you in to your own YourBeats account with it, which also brings that account back on another phone (sections 2.1 and 2.14) Our legitimate interests, and yours if you use Play Games, in YourBeats working with Play Games as other games do: keeping your progress with your Play Games profile, so that it stays safe without an email address and comes back on another phone, and offering YourBeats' achievements in Play Games. Our server keeps your Play Games player ID only in scrambled form, never your Play Games name, and Google uses what it collects under its own privacy policy. The law allows a sign-in like this, to a profile you already use, without asking you first. You can stop it as section 2.14 says
Notifications (section 2.13) Your consent: they start only when you say yes, and you can withdraw it at any time by switching them off, in the app or in Android's own settings. Only players old enough to give this consent themselves are asked (section 9).
Showing your activity to friends Your consent: it starts switched off, and you can switch it off at any time in the app. It is offered only to players who have reached the minimum age YouTube sets in their country (13 in the UK; 13 to 16 in the European Union, depending on the country), so that only players old enough to give this consent themselves can switch it on; until the app knows the ages that apply where you live it uses 16. Below that age, it is hidden and switched off.
Usage data, and Google Analytics for Firebase with it (section 2.9) Our legitimate interests in seeing, in totals, how the game is used, so that we can keep it fair and working and make it better. It is on only for players who have reached the age at which they can agree to it themselves in their country (13 in the UK; 13 to 16 in the European Union, depending on the country), and at least 13 and YouTube's minimum age there; until the app knows the ages that apply where you live it uses 16. Below that age, it is hidden and switched off. You can switch it off at any time in the app, which stops it at once and deletes what our server holds (section 2.9).
Adverts at breaks for players without Premium, and deciding who sees them from Premium and the age group (section 2.15) Our legitimate interests in paying for a game that is free to play, with adverts that are never personalised and shown only to players of 13 or over, with Google's protections for teenagers for those under 18 (section 2.15). Where the law requires agreement before Google's ads code stores or reads information on your phone, Google's consent form asks you first, and Google uses what it receives under its own privacy policy (section 5).
Keeping or sharing information when the law requires it, including our company's accounts (section 2.8), and dealing with reports and complaints that the law requires us to handle (section 2.3) Complying with the law

What you must give. No law requires you to give us anything. To play, the app needs your year of birth. Without an email address you can still play as a guest, but you cannot post song records, play Ranked, add friends, add songs, share charts or buy.

Automatic decisions. Some decisions are made by our systems: the word filters refuse a name or a message, the checks refuse a chart that cannot be shared yet, the score checks can take a record off the boards, and two failed score checks in a season pause Ranked for an account until a person on our team has looked. None of them has a legal or similarly significant effect on you, and you can always ask a person on our team to look again (section 8).

You can object to anything we do on the ground of our legitimate interests (section 8).

4. YouTube

YourBeats uses YouTube API Services.

Apart from YouTube's own player, and Google AdMob's adverts with Google's own consent and privacy options forms for them (section 2.15), YourBeats does not let any other company show adverts or other content in the app. (Google Play Games may show its own sign-in message, its own message when you unlock an achievement and, when you connect it yourself or tap "Continue with Google", Google's own sign-in and consent screens: sections 2.1 and 2.14.) YourBeats' own links to music services, marked "Ad", are not switched on yet (section 2.12).

5. Who else sees or handles your information

Other players and visitors. Other players see what you let them see: your handle, avatar and level; your song records; and, depending on your privacy choices, your profile, bests and activity. Anyone who knows your handle, signed in or not, can look up its avatar and level; the rest of your profile (the month you joined, your skill, highest difficulty cleared and achievements, and, for adults, a chosen name) only as your privacy choices allow. Your handle's style shows wherever your handle does. Your page's stage set and status show to anyone if your profile is open to everyone; if it is open to friends, to your friends, and to anyone for a player known to be 18 or over; if it is set to only you, to nobody else (the supporter mark follows the same rule: section 2.8). The rest of your page (its soundtrack, wall, crew and cheers) shows to your friends unless your profile is set to only you, and to anyone else only if your profile is open to everyone and you are known to be 18 or over; places and scores on it follow your choices for song records. In rooms, players see each other's handles, avatars and levels. Other players can race your saved runs as ghosts, as your "Ghost races" choice allows (section 2.2), and other Ranked players can race your ranked runs for 14 days (section 2.4). The records of a song you added are seen only by the other players who added it (section 2.7). If our team adopts a melody setting you suggested, the song's page may name you (section 2.5). Share links, link pages and shared charts show what sections 2.5 and 2.6 describe.

Companies that run parts of YourBeats for us. They handle your information only to do this work for us:

Company What it does for YourBeats What it handles
Cloudflare, Inc. (privacy policy) Runs our server, database, rooms, card pictures and web pages, and passes on emails sent to support@yourbeats.net Everything our server keeps (section 2). Our database is kept in Cloudflare's Western Europe region; rooms and technical logs may be handled in any of Cloudflare's locations.
LAYANET LTD (laya.net, a private limited company registered in England and Wales, company number 17430595), our email system, which acts for us as our processor under a data processing agreement and sends through Amazon Web Services, Inc. (Amazon SES, privacy notice) Sends every email with a sign-in or deletion code Your email address and the code. The email system keeps a record of each email (the address, which email it was, when it was sent and whether it was delivered, with the message saying why if it was not), never the code, for as long as section 6 says. The emails carry no tracking: no hidden image that reports when one is opened, and no links that report a click. For an email sent before 24 October 2026, the record may also show whether it was opened.
Resend, Inc. (privacy policy) Sends our replies when you write to support@yourbeats.net (the outgoing server for our support mail) Your email address and our replies
Modal Labs, Inc. (privacy policy) Runs the preparation service that makes charts for the songs players add The video's details (section 2.7), never anything about you
Google LLC (Firebase Cloud Messaging and Google Analytics for Firebase), under the Firebase Data Processing and Security Terms and Google Analytics' data processing terms Delivers notifications, and measures app use for players who share usage data For notifications: the installation ID, each notification's content (section 2.13) and, sent by Firebase itself, the app's version and your phone's make, model and Android version. For Google Analytics: the app instance ID and what section 2.9 lists.

Google, under its own policies. Google decides for itself how it uses what it receives in these cases:

Google's ad partners, under their own policies. In the UK, the European Economic Area and Switzerland, Google also sends the app's advert requests to the ad partners it works with there, which Google's consent form lists (section 2.15). They may receive some of what Google's ads code collects, and decide for themselves how to use it. Our server sends them nothing.

Apple, when you tap "Find it". To find the song (section 2.7), Apple's ShazamKit receives the sound prints, with your language and region settings and, as with any connection, your phone's internet address.

Our team. The few people who run YourBeats can see account information, only to run the game, answer you and moderate. Changes made through our admin panel are logged (what was done, when, from which internet address, and the account, record, chart or email address it concerned), and the log is kept for 2 years.

Otherwise, we share information only if the law requires it, to protect players or the public, or if YourBeats is sold or reorganised, in which case the new owner must keep to this policy. We do not sell your information. The only information shared for advertising is what Google's ads code collects for AdMob's adverts, which Google may also send to its ad partners (section 2.15).

6. How long we keep it

Information How long we keep it
Your account and what it holds (profile and page, handles, runs, progress, preferences, favourites, records, Ranked, your results in room songs, friends, challenges, drafts, charts, nominations and suggestions for official charts, share links, the free plays you used, songs you added, ad songs, purchases, event reminders, and the note of a guest account moved into it) Until you delete your account. A guest account is deleted after 24 months without activity; an email account is not deleted for inactivity.
A guest's drafts 30 days after they were last saved
Sign-in codes Until used, 15 minutes at most
Records of sign-ins Each sign-in lasts 120 days; its record stays until you sign out or delete your account
Your ways to sign in besides your email address: a scrambled form of your Play Games player ID or of your Google account's ID, when each was linked and last used, and the app's label Until the account is deleted; a Play Games link also goes when you unlink it (Settings, then Account)
The keys of other phones that Google Play Games brought a guest account back to (scrambled), with the app's label and when each was made and last used Until the account is deleted (sooner if it joins another account, or gets its email address through "Continue with Google"); at most 10 phones, the ones unused longest go first
A choice between two of your accounts (section 2.1): the two accounts and a scrambled form of your Play Games ID It can be answered for 10 minutes, and is deleted the next time any player is offered such a choice
Records of the emails with codes, in our email system (the address, which email it was, when, and whether it was delivered; never the code) Until they are erased, with no time limit before that. When you delete your account, we ask our email system to erase your address from them (section 7). If laya.net cannot be reached, we keep your address for up to 7 days while we try again, then delete it. If laya.net cannot be reached in all that time, your address may stay in those records: write to us (section 8) and we will erase it by hand. If a code went to an address that has no account with us, you can ask us to have them erased (section 8)
If an email to you bounces permanently, or you mark one as spam: your address on the lists of addresses our email system must not send to Our email system's own list: until erased, as above. Amazon SES's list for our email system: until it is taken off, so that no more emails are sent to it. Amazon's own list for all its customers (permanent bounces only): up to 14 days
Resend's records of our replies to your emails (the emails themselves, their delivery events and logs) 30 days, Resend's published retention
Emails you send to support@yourbeats.net or legal@yourbeats.net, and our replies 24 months after the last message in the conversation
Inbox messages 60 days, removed the next time you open your inbox
Your activity for friends (only while switched on) 30 days, removed the next time your runs reach our server
Friend requests They stop working after 30 days; their note is removed when either account is deleted
Rooms and their chat Until the room closes: 12 hours at most (your own results in room songs stay with your account: section 2.4)
Event check-ins, with your room, place, points and songs Until a day after the event
Codes and connections for carrying on at a computer Codes: 10 minutes. Connections: 12 hours, removed a day after they end
Scrambled internet addresses 1 day (with an ad song's ticket too: section 2.15)
An ad song's ticket that added nothing, and Google's transaction numbers 30 days (a ticket that added a song is your ad song, kept with your account)
Counts of link pages opened, previewed or leading to Google Play (per song or kind of page and day, with nothing that identifies anyone) Kept as totals
Our log of what Google Play tells us about purchases and of our checks of them (a short code for the purchase, never its token, the product, the account, when, and the outcome) 120 days. If you delete your account sooner, the log no longer says it was yours
Notes of each time an account asked us to check its purchases, to limit them to 30 an hour 2 days
Google Play's sales and earnings reports, kept with our company's accounts (section 2.8) 6 years after the end of the financial year they belong to
Counts that limit overuse An hour; a day for wrong sign-in codes; until YouTube's day ends for searches (section 2.11)
Search results shared between players (a scrambled form of the words, linked to no one, and the videos' IDs) Used for 24 hours; deleted after 2 days
Counts kept with your account to stop spam Replaced the next time you do the same thing after 2 days, and deleted with your account
Scrambled codes that make each player's confirmation of a song's match count once 90 days
The shared song list (songs' names in YourBeats' own form, recordings' ISRCs and videos' IDs, with nothing about who confirmed them) As part of YourBeats' catalogue; each video is checked with YouTube at least every 30 days and removed when it can no longer be played
A favourite you took off the list (email accounts) A note of it for 400 days
Crash reports (grouped by error, with no link to you) 400 days after the error was last seen
Usage data (while it is on) Events: 90 days. Daily notes and first steps: 400 days. All of it is deleted as soon as you switch sharing off
Google Analytics' detailed records (only while you share usage data) 2 months, kept by Google. Switching usage data off also asks Google to delete them (section 2.9)
A phone registered for notifications (its installation ID and settings) Until you turn notifications off, sign out or delete your account; while our notifications are switched on, a phone the app has not confirmed for 270 days, or that Google says is gone, is removed
A notification decided for you 30 days (its words' details are cleared once it is sent, or once it will not be)
Reports, chart appeals and our team's decisions 2 years after the report or appeal is closed, or 2 years after it was made if it was never closed
Reports and complaints from people who do not play (their emails or letters, our replies and our decisions) 24 months after the last message in the conversation, as for other emails to us. A copy of an intimate image is deleted once its report is dealt with (section 2.3)
A handle removed by our team Kept from everyone for a year
Our team's action log, and failed attempts to sign in to our admin panel (by internet address) 2 years
The note that an account was deleted (section 7) 6 years
Cloudflare's technical logs 7 days
Our database's restore history, kept automatically by Cloudflare so we can recover from a fault 30 days
Backups of our email system's database, kept automatically by laya.net 14 days
Copies of our email system's database that laya.net makes before updating its own software No time limit yet
A search our team makes for your address in our email system's records (for example, to find out why a code did not reach you) 30 days, in our email system's logs
Prepared charts and songs players added Kept as part of YourBeats' catalogue, not linked to you

7. Deleting your account

How. In the app: You, then Privacy and account, then Delete account, or Settings, then Account, then Delete account (for a guest account, Delete guest data in the same places). For an email account, you can also use our web page, without the app: https://yourbeats.net/api/v1/account/delete/web. You can always write to support@yourbeats.net from your account's email address instead, and we will delete it.

What happens. Your account stops working at once. Apart from what is listed under "What stays" below, everything we hold for it is removed at once; if any part fails, our server retries it automatically until it is done, within 7 days at most.

On your phone. Deleting your account signs this phone out but does not clear what the phone keeps (your bests, progress, settings and drafts). The next time you open YourBeats, it makes a new guest account and sends it this phone's run history, so that you can carry on playing. Google Play Games does not sign this phone in to YourBeats by itself again until you sign in or connect it yourself (section 2.1). If you want nothing to come back, uninstall YourBeats (or use Android's "Clear storage") after deleting your account.

Before you delete. Deleting your account does not cancel a Google Play subscription. Cancel it in Google Play first. A subscription that is still running can be restored into a new account by the Google account that bought it.

YouTube and Google. Deleting your YourBeats account does not, in any way, delete or change what YouTube or Google keep about you under their own policies (sections 4 and 5). To delete what YouTube keeps, use YouTube itself: the YouTube app or the YouTube website. You can manage what Google keeps, such as your Play Games profile (section 2.14), in your Google Account, and Google's security settings page, https://myaccount.google.com/permissions, shows which apps can use your Google account and lets you remove their access.

What stays afterwards, and why:

Guest accounts. A guest account can be deleted only from a phone that holds it, because only such a phone can show it is yours. If you uninstall YourBeats or clear its storage first, we can no longer tell which guest account was yours, unless it is linked to your Google Play Games profile: then Play Games brings it back when you open YourBeats on an Android phone with that profile, and you can delete it there. Otherwise it stays on our server until it has gone 24 months without activity (section 6). It holds your handle, avatar, runs, achievements, preferences, drafts (for 30 days) and share links, and no email address.

8. Your rights, and how to complain

Depending on where you live, including in the UK and the EU, you can ask us to:

You can withdraw a consent at any time by changing the setting. Usage data (section 2.9) is not linked to your account, so it is not in the download: switching "Share anonymous usage data" off deletes it. We reply within one month, and may ask you to show that the account is yours, for example by writing from its email address.

Complaints. If you are unhappy with how we use your information, please tell us first, at support@yourbeats.net or by post to the address in section 1. Our contact page lists every way to reach us. We acknowledge every complaint within 30 days, look into it, and tell you the outcome. You can also complain to the UK's Information Commission (the ICO), or to the data protection authority where you live.

9. Children and teenagers

Under 13. Songs from YouTube, accounts and playing with other people are for players aged 13 and over. A younger player can still use YourBeats with those switched off, as below. When it first opens, YourBeats asks for the year of birth (section 2.1). If the answer makes the player under 13:

If we learn that we hold personal information about a child under 13 without a parent's consent, we delete it: a parent can write to support@yourbeats.net.

YouTube's minimum age. YouTube sets its own minimum age, and it depends on your country: it is 13 in most countries, including the UK and the US, and higher in some, for example 14 in Spain, Italy and South Korea, 15 in France, and 16 in Germany, Ireland and the Netherlands. The YouTube Terms of Service for your country give the exact age. If you are 13 or over but younger than YouTube's age for your country, you keep your YourBeats account, but everything that plays or searches YouTube videos (playing and previewing songs, searching, Add a song) stays closed until you reach it, and so do rooms, quick play, Ranked, events, friends and challenges, which are built on YouTube's songs.

To know which age applies, the app asks our server when it starts, and at most every 10 minutes when you come back to it, never while you are offline. It asks only for players aged 13, 14 or 15 (players of 16 or over need no check), except in a version of the app that includes the Originals, where the question goes with the app's usual check of its offline settings, for every player. Our server reads your country from your internet address for that answer only, and sends back YouTube's minimum age there and the age from which usage data can be on there, never the country itself. Your country is never kept in our database or on your phone: the app keeps only the minimum ages that apply where you are, though in a few countries those ages belong to that country alone. Until our server has answered, or if it cannot tell your country, YourBeats uses 16 for both.

13 to 17. Players under 18 start with safer settings: their profile is visible to friends only, their name is hidden on song records (and so in Ranked), only friends can invite them to rooms or challenge them, and only friends can race their saved runs as ghosts. Their handle, avatar and level can still be looked up by handle. Typed chat in rooms is never available to or from players under 18, they can be added as a friend only with their friend code, and share cards, our web pages and a song's credit for a suggested chart never name them.

Age not known yet. Until a player answers the age question, we use the settings for players under 18. The one exception is a name that was already shown on song records before the age question was introduced: it stays shown.

Links marked "Ad". Links to music services marked "Ad" are only ever shown to players who have told YourBeats they are 18 or over: never to players under 18, or whose age is not known.

Adverts. YourBeats' adverts from Google AdMob are never personalised, for anyone (section 2.15). The adverts at breaks are shown only to players who have told YourBeats they are 13 or over, and never to players younger than YouTube's minimum age where they live, or younger than 15 in Denmark, or whose age is not known. For players under 18, YourBeats asks Google to apply its protections for teenagers, and its protections for children for players younger than YouTube's minimum age where they live, or younger than 15 in Denmark, or whose age is not known; the ad song is never offered to players under 13 or younger than YouTube's minimum age for their country, who cannot add songs.

10. Security

11. Information that leaves the UK

Our database is kept in Cloudflare's Western Europe region. Most of the companies in section 5 are based in the United States and run services around the world, so your information may also be handled outside the UK and the European Economic Area. Where that happens, it is protected by the safeguards the law requires, such as the UK's data bridge with the United States and the EU-US Data Privacy Framework, for companies certified under them, or the standard contractual clauses (with the UK's addendum) in those companies' data processing terms. Write to us for a copy of these safeguards.

12. Changes to this policy

When we change this policy, we change the date at the top. If a change matters to you, we tell you in the app before it applies, and ask you to agree again.

13. Contact us

Unbelievable Media LTD, 29 Riverside Walk, Wickford, England, SS12 0DU

Email: support@yourbeats.net

Our contact page lists every way to reach us and to report a problem.