AlbumDraft

Privacy

No accounts, no cookies, no advertising. Here is exactly what happens to your data.

Album Draft has no accounts, no sign-up, no cookies, and no advertising. Almost nothing about you leaves your own device.

Who runs this

Album Draft is run by Manveer Singh Tumber, a sole trader based in the United Kingdom, who is the data controller for the purposes of UK GDPR.

Contact: hello@albumdraft.app. A postal address is held on the ICO register above and will be provided on request to anyone who needs it for a formal purpose.

What stays on your device

Your game history, your best streak and your saved mix are written to your browser's localStorage. That is storage on your own computer or phone. It is never transmitted to us and we cannot read it. The keys used are:

• 1212:history — the albums you have drafted and their scores
• 1212:bestStreak — your daily streak counter
• 1212:mix — the genres and decades you chose in Your Mix
• 1212:installDismissed — whether you dismissed the install prompt

Clearing your browser data deletes all of it permanently. There is no backup and no way for us to restore it, because we never had it.

Cookies

None. The site sets no cookies of any kind, which is why you have not been shown a cookie banner. localStorage is not a cookie and is used only for the functional purposes listed above.

Analytics

We use Umami, self-hosted on our own server in the UK. It is not a third-party analytics service: the data is not sent to Google, Meta or anyone else, and it is not shared or sold. Umami sets no cookies, which is why you have not been asked to accept any.

For each visit it records the page you viewed, the site that referred you if any, and your browser, operating system, device type, screen size and country. Your country is worked out from your IP address; the IP address itself is not stored. To count returning visits within a day without cookies, Umami combines your IP address, browser details and a rotating secret into a one-way hash. That hash cannot be turned back into your IP address, and it changes daily, so it cannot be used to follow you over time or to any other website.

We also record the following events about how the game is played. None of them carry anything about who you are:

• a game was started, and in which mode
• a game was completed, and the score it ended on
• a card was shared, a challenge was sent, or a challenge was accepted
• a preview was played, or a listen link was followed, and to which service
• the install prompt was shown, and whether it was accepted

Your drafted albums, your history and your streak are not sent to us. They stay in your browser, as described above.

Our lawful basis is legitimate interests: understanding whether the game is being enjoyed and finished, so it can be improved. Because nothing collected identifies you, the impact on your privacy is minimal. You can object at any time using the contact details below, and you can block it outright with any content blocker or by enabling Do Not Track — the site works identically either way.

Third parties the game touches

Apple

Song information and thirty-second previews come from Apple's iTunes Search API. When your browser loads a preview it connects directly to Apple, which means Apple receives your IP address and the usual technical details any web request carries. That connection is between you and Apple, and Apple's privacy policy governs it. We receive nothing from it. If you never press play, no request to Apple is made.

Streaming services

The listen links open Spotify, Apple Music or YouTube Music in a new tab. Following one takes you onto their site under their terms and their privacy policy.

Hosting

The site is hosted on Cloudflare Workers. Cloudflare processes requests to serve the page and keeps short-lived technical logs for security and reliability, as any host does.

Affiliate links

Affiliate links are currently switched off. If they are switched on, a disclosure will appear in the app before you click anything, and the linked service may set its own tracking to attribute the referral. That would happen on their site, not ours.

What we do not do

• We do not sell or share your data. There is nothing to sell.
• We do not run advertising or ad tracking.
• We do not build profiles or track you across sites.
• We do not ask for your name, email or any account details.

Your rights

Under UK GDPR you have rights of access, correction, erasure, restriction, objection and portability over personal data held about you. In practice we hold essentially none: your game data is on your device and you can erase it yourself by clearing your browser storage. If you believe we hold something about you, email hello@albumdraft.app and we will respond within one month, as the law requires.

If you are unhappy with how we handle it you can complain to the Information Commissioner's Office, the UK supervisory authority.

Children

Album Draft is a music game suitable for a general audience. It is not directed at children under 13 and collects no personal data from anyone, of any age.

Changes

If this policy changes, the date below changes with it. There is no mailing list to notify, because we do not have your email address.

Last updated 29 August 2026