Privacy Policy

Effective 10 October 2026

PlayPresence lets you share the song playing on your Android phone as a live "now playing" status on a public profile page, website widget, SDK or API. The service is run by bridgeapi.top ("we", "us"). This policy explains what we collect, why, and the choices you have.

The short version: your live playback status is public by design: anyone with your username or share link can see it. We keep it in memory only while your phone is connected, and we do not keep your listening history on our servers. We never sell your data.

1. What we collect

Account information (when you sign in with Google)

Your Google account identifier, email address, display name and profile photo URL.
The PlayPresence username (@handle) you choose.
Security data: hashed device publishing secrets and, if you set one, a hashed security PIN. We never store these in plain text.
Settings such as your multi-device mode.

Device information

A device identifier generated by the app, the device name (for example "Pixel 8"), and when each device was last seen.

Live playback status

While broadcasting is on and your phone is connected: track title, artist, album, artwork URL, playback state and position, the music app's name and package name, and the device name.
This is held in memory only. It is cleared when your device disconnects and is not written to our database. We do not keep a listening history.

Music app icons

Icons of music apps (for example the Spotify icon) may be uploaded and stored so they can be shown next to your status. These are app assets, not personal data.

Technical data

IP addresses are used briefly, in memory, for rate limiting and abuse prevention.
Our servers and network provider may keep short-lived operational logs, such as request paths, timestamps, errors, IP addresses and usernames, for security and debugging.

2. What stays on your phone

Notification access is used only to detect active media sessions from music apps. Notifications that are not media playback are ignored. They are never read, stored or sent anywhere.
Listening history shown in the app is stored only on your device. You can clear it in the app at any time, and uninstalling the app removes it.
The list of apps on your phone (music players, plus the apps in your app drawer) is used only on your device, so you can choose which players to share. It is never uploaded, except for the name and icon of the app that is currently playing.

3. What is public

Your public profile (/@your-username), the widget, the SDK and the public API can show: your username, display name, profile photo, the names of your connected devices, whether you are online, and your current playback status. Anyone who knows your username or share ID can see this. You can stop sharing at any time by turning broadcasting off in the app, signing out, or deleting your account.

4. How we use data

To provide the service: authenticate you, run your profile, and deliver your live status to subscribers (performance of our contract with you).
To keep the service secure and reliable: rate limiting, abuse prevention and debugging (our legitimate interests).
To comply with legal obligations.

We do not use your data for advertising, we do not build profiles of your listening habits, and we do not sell or rent personal data.

5. Who we share data with

Google: to verify your sign-in.
Infrastructure providers (hosting and network/CDN providers such as Cloudflare): only to run and protect the service.
The public: the information listed in section 3, because sharing it is the purpose of the service.
Authorities: if we are legally required to.

6. How long we keep data

Account and device data: until you delete your account.
Live playback status: only while your device is connected.
Operational logs: only as long as needed for security and debugging, then deleted.
If the Service is shut down, all server data will be deleted. Data may also be lost because of a server failure. See our Terms of Service, section 8.

7. Your rights and choices

Depending on where you live (for example under the GDPR, UK GDPR or CCPA), you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. You can delete your account and all server data yourself; see how to delete your account. For any other request, contact us at [email protected]. You may also complain to your local data protection authority.

8. Security

Traffic is encrypted in transit (HTTPS/WSS). Secrets and PINs are stored only as hashes, and access to your account's devices can be protected with a PIN. No system is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires it.

9. Children

PlayPresence is not directed at children under 13, or under the minimum age for consent in your country. We do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

10. International transfers

Our servers and providers may be located outside your country. Where required, we rely on appropriate safeguards for these transfers.

11. Changes

We will post updates on this page and change the effective date. If the changes are significant, we will let you know in the app.

12. Contact

Questions about privacy? Contact bridgeapi.top at [email protected].