Privacy & your data

What is public

Your PlayRhythm profile and player-directory entry are public. They can include your osu! username, avatar, country, ranks and game statistics, official team, presence, and the languages, interests, bio, timezone, and play schedule you choose to provide. Public osu! matches, playlists, multiplayer history, and modding activity may also be shown.

Team listings and competitive results are public. Information available publicly can be viewed or copied by other people.

You can hide connected Discord and Twitch handles in your profile's Socials controls. A hidden handle is not sent to other visitors. Hiding Twitch also removes the public connection from Discover streams and the Twitch extension. The owner can still see and manage a hidden handle.

Existing social connections are public unless you turn off their visibility. Review those controls after connecting an account.

What we use to run the service

• Account identifiers, sign-in sessions, and OAuth tokens let us connect to osu! and linked services. We do not ask for or store your osu! password.
• Rival and friend requests, team applications, notifications, tournament participation, competitive results, and activity events support those features. Team application messages are available to the relevant team manager.
• Feedback, optional contact email, screenshots, and privacy requests are available to site administrators for support and review. Reports submitted while signed in, their status, and team responses are also available privately to you in My reports. Status and response updates use in-app notifications; we do not send automatic email updates to reporters. When owner email alerts are enabled, the site owner receives a generic notification with a report reference and an admin link, without your report text, contact email, or screenshots. Anonymous submissions receive a reference but cannot be tracked online. Internal review notes and screenshots remain administrator-only. Avoid including information you do not want to share with the team.
• Supporter billing can store Stripe customer/subscription identifiers and subscription status. Payment card details are handled by Stripe's hosted payment flow when checkout is available.
• Security and operational logs record actions and failures to help prevent abuse and fix problems. Hosting and error-monitoring services may process technical request information.

Services involved

Vercel hosts PlayRhythm and Neon stores its database. osu! provides sign-in and game information. Discord and Twitch are used when you connect them or use their related features. Stripe handles Supporter payments when enabled, and Sentry handles error reports when configured. When owner feedback alerts are enabled, Resend processes the owner's email address and the generic report notification to send that alert.

We use cookies for sign-in and account sessions. Requests to linked services follow those services' own privacy policies. Public avatars, flags, and stream thumbnails can load from their respective providers.

Your choices and retention

You can edit optional profile fields, hide social handles, or disconnect them from your profile. Those controls do not erase information already copied by other people or remove your original osu!, Discord, or Twitch account.

Account records remain while needed to operate the service. Data-copy, correction, and account-deletion requests currently require manual review; there is no automatic deletion or data-export feature. We do not currently publish a fixed retention period for every type of record.

When reviewing a deletion request, we need to consider shared match records, team ownership, billing records, and backups. We will explain any information that needs to be retained or anonymized. Removing a live record does not instantly remove all backup copies.

Manage any active subscription on the Supporter page. For a privacy concern that is not an account-data request, use Feedback.