Privacy policy

Who is responsible

The controller of your data is the owner of Openingpedia (www.openingpedia.com). For any privacy question or to exercise your rights, write to contacto@openingpedia.com.

If you just browse

You do not need an account to listen to music or read pages. While you browse we process the minimum needed to serve and protect the site:

• Technical data about each request (IP address, browser, requested page, date and time) in the logs of our hosting and network providers, Railway and Cloudflare. They keep the site running and let us detect abuse and fix errors. Legal basis: our legitimate interest in a secure service (GDPR art. 6(1)(f)). They are kept for at most 30 days.
• Your approximate country, derived from your IP (from Cloudflare's header or, when missing, by asking the ipapi.co service), only to decide which affiliate links to show you. We do not store the IP: the country code stays for 24 hours in the OP_COUNTRY cookie in your browser.
• Daily per-song counts of attempted and failed plays, to find broken videos. They are not linked to you.

YouTube videos

Video playback is a core Openingpedia feature provided through the embedded YouTube player, a Google service. If you reject optional cookies, videos remain available: the player uses YouTube's privacy-enhanced mode (youtube-nocookie.com) and loads when you ask to play a video.

YouTube-hosted thumbnails may load while you browse. When you play a video, your browser connects directly to its player and Google may receive technical data such as your IP address, device and browser information, the referring page and your interaction with the player. Openingpedia does not control the cookies or technologies YouTube considers necessary for the playback you request. More information in Google's privacy policy (policies.google.com/privacy).

Song lyrics

When you open a song's lyrics, your browser requests them directly from LRCLIB (lrclib.net), a public lyrics service, sending the song title and the artist's name. LRCLIB receives your IP address as with any connection. We send it no other data about you.

User account

An account is optional and lets you save favorites, create playlists and keep your daily challenge games. You can sign in three ways: with Google, with Discord or with a sign-in link we email you (it expires after 15 minutes). We do not store passwords.

Legal basis: providing the service you request when you create the account (GDPR art. 6(1)(b)). We keep this data while you have the account; deleting it erases it as explained below.

• Email address.
• Username (initially the name Google or Discord gives us; you can change it) and the address of your profile picture, if the provider supplies one.
• The identifier of your linked Google or Discord account, to recognise you when you come back.
• Preferred language and approximate country.
• Date and method of your last sign-in, and the days on which you signed in (sign-in history).
• For the email link, a hashed copy of the link, its expiry and whether it was used.
• Your favorites, your playlists and the likes you give to public playlists. A playlist you share is visible to anyone with the link.

Newsletter

If you subscribe to the newsletter we store your email, language, approximate country, where you subscribed from, and the date and IP at the moment of consent, which serve as proof of it. If you subscribe without an account, we send you an email to confirm and you receive nothing else until you do.

Legal basis: your consent (GDPR art. 6(1)(a)). You can unsubscribe at any time with the link in every email or from your profile. After you unsubscribe we keep your email marked as unsubscribed so we do not write to you again; if you want it erased completely, ask us at contacto@openingpedia.com. Emails are sent through Resend.

Daily challenge

To play the daily challenge without an account, your browser stores a random identifier (openingpedia_daily_player). With it we store your guesses, your score and the name you choose, which appears on that day's public leaderboard. If you play signed in, the game is linked to your account. Legal basis: providing the game you request (GDPR art. 6(1)(b)). An account's games are erased when the account is deleted.

Analytics (optional)

Only if you accept analytics cookies do we load Google Analytics, to learn which parts of the site are used and improve them. It is configured with IP anonymization and without Google signals or ad personalization. Legal basis: your consent (GDPR art. 6(1)(a)), which you can withdraw at any time from "Cookie settings" in the footer. Google keeps this data for the period configured in Google Analytics, at most 14 months.

Who processes data on our behalf

These providers take part in the service. Each receives only what its job requires:

• Railway (USA): hosting for the website and the API, database and images, and server logs.
• Cloudflare (USA): content delivery network and attack protection; it sees requests to the site, with your IP.
• Resend (USA): delivery of sign-in and newsletter emails.
• Google (USA): Google sign-in, Google Analytics if you accept it, and the YouTube player.
• Discord (USA): Discord sign-in, if you choose it.
• ipapi.co: approximate country from the IP, when Cloudflare does not provide it.
• LRCLIB: song lyrics, requested directly by your browser.
• OpenAI and Google Gemini: they help us write and review catalog texts (biographies, synopses, song pages). They only receive catalog data, never user data.
• Amazon: if you click an affiliate link, Amazon processes your data under its own policy.

Transfers outside the European Economic Area

Several of these providers are US companies or may process data there. Those transfers rely on the safeguards of the GDPR: the adequacy decision for the EU-US Data Privacy Framework for companies certified under it or, otherwise, the standard contractual clauses approved by the European Commission.

Cookies and browser storage

Needed for the site to work (no consent required):

• Auth.js session cookie: keeps you signed in, for up to 30 days.
• NEXT_LOCALE (cookie) and locale (local storage): your language.
• OP_COUNTRY (cookie, 24 hours): your approximate country for affiliate links.
• cookie-consent and analytics-enabled (local storage): your cookie choice.
• theme, songs-view-mode, animes-view-mode, artists-view-mode, sidebar_state and pwa-install-*: theme, view, side menu and app installation preferences.
• op:player-session (local storage, 24 hours): your play queue, to restore it if you reload. It is cleared when you close the player.
• openingpedia_daily_player (local storage): your daily challenge identifier.
• Optional, only with your consent: Google Analytics cookies (_ga and similar). You can change your choice at any time from "Cookie settings" in the footer or in your browser settings.

What deleting your account erases

You can delete your account from your profile. The following is erased immediately:

• Your favorites.
• Your playlists, with their songs and the likes they received, and the likes you gave.
• Your linked Google or Discord accounts.
• Your sign-in history.
• Pending email sign-in links.
• Your newsletter subscription.
• Your daily challenge games.
• Your personal data: email, username, picture, language, country and last sign-in details. Only an anonymous record with the account's internal number remains, so it is never reused.

Access by authorized staff

Openingpedia administrators may view your favorites and playlists only to give you support when you ask for it, to moderate inappropriate content (for example, playlist names that break the rules) and to diagnose problems affecting your account. These accesses are role-restricted, are logged with the date, the action and the administrator who performed it, and imply no commercial use or transfer to third parties. Legal basis: our legitimate interest in keeping the service secure and running (GDPR art. 6(1)(f)).

Security

Communication with the site is encrypted (HTTPS), access to personal data is role-restricted, and email sign-in links are stored hashed and expire after 15 minutes.

Your rights

You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you gave, without affecting processing carried out before. You can also ask for an extract of the accesses administrative staff made to your account data, within the log retention period. Write to contacto@openingpedia.com; we will reply within one month.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Affiliates and advertising

Openingpedia is a participant in the Amazon EU Associates Programme, an affiliate advertising programme designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon. If you buy after clicking one of those links, we may receive a small commission at no extra cost to you. Affiliate links do not influence editorial content. Openingpedia does not currently show third-party ads.

Changes to this policy

If we change how we process your data, we will update this page and its date.