Privacy Policy

HitOrMiss is a music competition site run by one person. We ask for as little as possible: an email address and a display name. Your profile, your tracks and your results are public — that’s the point of a competition. Your email address and password are not shown on the site. We don’t sell your data, we don’t run ads, and we don’t use tracking cookies.

The rest of this page is the detail. If anything here is unclear, email littleaiprojects@gmail.com.

HitOrMiss (hitormiss.co) is an independent project. There is no company behind it and no team — just one developer, reachable at littleaiprojects@gmail.com. That address is also where you send privacy requests, ban appeals, and security reports.

• Account — your email address, a display name, and a password. Passwords are handled by our authentication provider and stored hashed; we never see them.
• Profile — anything you choose to add: a bio, an avatar, and links to your music profiles (Spotify, SoundCloud, Bandcamp, YouTube, and so on). All optional.
• Guest sessions — if you take part without an account, we store only the display name you pick, plus a random token saved in your browser so we can recognise the same device next time. No email, no password.
• Your content — the competitions you create, the audio files and track titles you submit, the hit/miss votes you cast and any written feedback you leave, and anything you post on the feedback board.

• Vote origin — when you cast a vote we record the IP address and browser user agent the vote came from. This exists for one reason: catching people who use several accounts to vote for themselves. It is stored in a private table that nobody can read through the site, and it is used only for vote-integrity checks.
• Browser storage — we store your login session, your guest token if you have one, your theme choice, and timestamps used to rate-limit actions. These live in your browser, not on our servers. There are no advertising or cross-site tracking cookies.
• Page analytics — we use Vercel Web Analytics for aggregate page-view counts. It doesn’t build a profile of you or follow you to other sites.

A competition only works if the entries and results are visible, so a fair amount of what you do here is public and can be indexed by search engines:

• Your profile page — display name, avatar, bio, social links, your submissions, your stats and your competition placements.
• Tracks you submit — the title and the audio itself, playable by anyone visiting the competition, until the file is deleted (see retention below).
• Competitions you host, including the title, description, rules, genres, prize details and timeline.
• Written feedback you leave on a track. It appears on the artist’s profile without your name attached. Individual votes aren’t shown either — only the totals.
• Your position on the leaderboard.

Your email address is not displayed on your profile. One exception worth knowing: the host of a competition you enter can email everyone who entered it, which means your address is visible to that host. Hosts are required by the Terms of Service to use it only for messages about that competition.

We use a small number of services to run the site. They process data on our behalf and nothing is sold to anyone:

• Supabase — database, login and audio file storage.
• Vercel — hosting and aggregate page analytics.
• Resend — sending competition and account emails.
• DiceBear — your default avatar image is generated by their service, so your browser requests it from them unless you upload your own.

These providers store data on infrastructure located primarily in the United States. If you use the site from elsewhere, your data is transferred there.

If you follow or take part in a competition, we email you when it changes phase — submissions opening, voting opening, results being in. You can turn these off any time in settings. Account emails such as password resets are always sent, because they’re how you get back in. We don’t send marketing email.

• Audio files are deleted automatically 14 days after a competition’s voting ends. Keep your own copy — HitOrMiss is not a backup service.
• Titles, votes and results stay after the audio is gone, so past competitions and leaderboards still make sense.
• Vote-origin records are kept while they’re useful for detecting manipulation, including across past competitions.
• Moderation records for a suspended account are kept even if the account is deleted. Otherwise a ban could be erased by deleting and re-registering.

Go to settings and use Delete Account. This removes your profile, your submissions, your votes, and any competitions you hosted along with the entries in them. It cannot be undone, and it will change the results of competitions you took part in.

That includes the login itself, so nothing is left behind. The one exception is a suspended account: those can’t be deleted here, because removing the login would wipe the suspension along with it. Email littleaiprojects@gmail.com instead and we’ll deal with it.

If you took part as a guest, clearing your browser’s site data for hitormiss.co removes the token that links you to that guest name.

Depending on where you live you may have the right to access, correct, export or delete the personal data we hold about you, to object to how we use it, and to complain to a data protection authority. Most of this you can do yourself from your profile and settings pages. For anything you can’t, email littleaiprojects@gmail.com and we’ll sort it out — normally within 30 days.

We don’t sell personal information, and we don’t share it for advertising.

Traffic is encrypted in transit, passwords are hashed by our authentication provider, and database access is restricted per user at the database layer. No site can promise perfect security, and this one is built and maintained by one person — so don’t upload anything you couldn’t stand to lose or to have seen. If you find a security problem, email littleaiprojects@gmail.com before making it public.

HitOrMiss isn’t intended for anyone under 13, and we don’t knowingly collect data from them. If you believe a child under 13 has an account, email littleaiprojects@gmail.com and we’ll remove it.

If this policy changes, the date at the top changes with it. If a change is significant we’ll say so on the site rather than quietly editing the page.

Questions, requests or complaints about privacy go to littleaiprojects@gmail.com.