Privacy Policy

Last updated: August 17, 2026

Brodysong is built to be simple and private. This page explains, plainly, what the app, on iPhone, iPad, and Android, does and does not do with your information. It also covers this website, which is a separate thing from the app and is described in its own section further down.

The short version

The app

Information we do not collect

Brodysong does not require or request:

• An account, sign-in, name, or email address
• Location data
• Contacts, photos, microphone, or camera access
• Advertising identifiers or analytics of any kind

We do not use third-party analytics, crash reporting, or advertising services in the app.

Device motion

Brodysong uses your device's motion sensors (accelerometer) to detect the shake gesture that sends your ship to a new part of the galaxy. This motion data is used only in the moment, on your device, to respond to the gesture. It is never stored, logged, or transmitted anywhere.

In-app purchases

Brodysong offers a single one-time purchase to unlock the full app. This purchase is processed entirely by the store you downloaded the app from, never by us. On iPhone and iPad that is Apple, through StoreKit and the App Store; on Android it is Google, through Google Play. Brodysong does not see, receive, or store your payment information. The store handles the transaction directly, and its handling of your payment and account information is governed by its own privacy policy: Apple's for the App Store, or Google's for Google Play.

Social links

The About screen in the app includes links to our social media accounts. These are ordinary links. Nothing from those services is embedded in the app, and nothing is sent to them while you use it. Tapping one hands the address to your device, which opens that service in its own app or in your browser. From that point you are on their service, and their privacy policy applies rather than this one.

This website

The app collects nothing at all. A website is different, because a web server necessarily sees a request in order to answer it. This section describes exactly what that means here, and it is deliberately short, because we have kept the site simple on purpose.

Cookies

This website sets no cookies and stores nothing in your browser's local storage. That includes our analytics, which are deliberately configured to run without them, as described just below. There is no consent banner on this site because the site itself sets no cookies, and it loads nothing from anyone else unless you ask it to by pressing play on a video. If that ever changes, this policy will be updated first and you will be asked before anything is set.

Analytics

We count visits using Matomo, an open-source analytics program that we run on our own server. Nothing is sent to Google, to any advertising network, or to an analytics company. The data stays on the same hosting account that serves this page, and it is never sold, shared, or combined with anything else.

It is set up so that:

• no cookies are set, and nothing is written to your browser
• your IP address is anonymized before it is recorded, by discarding the last part of it
• you are not followed across other websites, because we measure only this one
• the raw visit records are automatically deleted after 180 days
• your browser's Do Not Track setting is respected

What this produces is a count of how many people read which pages, roughly which country they were in, and which site sent them here. It cannot identify you, and we could not single you out from it even if we wanted to.

Because it sets nothing on your device and cannot identify you, this kind of basic audience measurement does not require a consent banner. If you would still prefer not to be counted at all, turn on Do Not Track in your browser settings and we will skip you entirely.

Embedded videos

Some pages show videos hosted on YouTube. These are not loaded when the page opens. What you see at first is a still image served from this website, together with a play button. Nothing is requested from YouTube or from Google until you press play.

If you do press play, the video player is loaded from youtube-nocookie.com, and at that point YouTube receives your IP address and may set cookies or read information already stored by your browser. That is a decision you make by pressing play, and it is why the notice appears beside every video. YouTube is operated by Google, and its handling of your information is governed by Google's privacy policy. If you would rather not load anything from Google, every video can be watched directly on our YouTube channel instead.

Fonts and other page assets

Every font, image, script, and style used by this site is served from our own servers. There are no content delivery networks, no Google Fonts, and no third-party scripts of any kind. Opening a page here does not tell any other company that you visited.

Server logs

Like essentially every web server, ours records a short technical log of the requests it answers. An entry contains the IP address making the request, the time, the page requested, and the browser's user agent string. These logs exist so that the site can be kept working and secure, and they are not used to build a profile of you, are not combined with any other information, are not shared or sold, and are not used for analytics or advertising. They are retained for no more than 30 days and are then deleted or overwritten in the normal course of operation. In GDPR terms, this narrow use rests on our legitimate interest in operating a secure and functional website.

Social media links

This site links to our accounts on YouTube, Instagram, TikTok, Facebook, and X. These are ordinary links. No content from those platforms is embedded here, and no buttons or pixels from them run on this site, so none of them learn anything about your visit unless you actually click through. Once you do, you are on their site and their privacy policy applies.

Contact by email

If you email us, we necessarily receive your email address and whatever you write. We use it to answer you and for nothing else.

Everything else

Children's privacy

Brodysong is intended for a general audience and is not directed at children under 13. Since the app collects no personal data from any user, there is no personal information collected from children, in compliance with the Children's Online Privacy Protection Act (COPPA).

Data sharing and security

We do not sell, rent, or share personal data with anyone. The app collects none in the first place, and the website's server logs are used only as described above.

Your rights (GDPR, CCPA, and similar laws)

Some regions give you specific rights over personal data held about you, such as the right to access, correct, or delete it. The app holds no data about you at all, so there is nothing there to access, correct, or delete. For the website, the only personal data we hold is the short-lived server log described above.

Deletion. Because the app stores nothing and the server log deletes itself within 30 days, there is very little to remove. If you would still like us to delete the server-log entries connected to your visits sooner, or if you want to ask about or exercise any other right you have, email us at the address below and we will action it and confirm.

Changes to this policy

If this policy ever changes, for example because a future version of the app or the site adds a feature that involves data collection, this page will be updated and the "Last updated" date above will reflect the change.

Contact us

Brodysong is made and operated by Penn Creative Group LLC, a limited liability company registered in New Jersey, USA, which is the data controller for the limited website data described above. Questions about this policy, the app, or the site can be sent to support@brodysong.com.