Privacy policy

Using Maple Lattes without an account

You can rank songs, edit moods and favorite tour songs without an account. Guest progress stays in this browser’s storage. Clearing browser data can remove it. The site also uses browser storage to remember settings and keep work available while a connection is interrupted.

The iPhone and iPad app keeps its own working cache in app storage. It is separate from browser storage and can hold changes while the app is offline.

Signing in

Clerk provides our sign-in service. You can use email, Apple or Google. Clerk handles your account details, including your email address, account identifier, sign-in activity and any name or profile image supplied by your chosen provider. Apple may supply a private relay email address if you choose Hide My Email.

Google sign-in requests your basic profile and email address to identify your account. It does not give Maple Lattes access to your Gmail, contacts, Google Drive or private YouTube account. Signing in with Apple is separate from connecting Apple Music.

On the website, Clerk uses cookies and related browser storage to keep you signed in and protect your session. In the iPhone and iPad app, Clerk stores the sign-in credential in the iOS Keychain. Optional Clerk usage reporting is disabled in the app. See Clerk’s privacy policy, Google’s privacy policy and Apple’s privacy policy.

Saving your progress

When you are signed in, Maple Lattes automatically saves your progress with Cloudflare, linked to your Clerk account identifier. The website and the iPhone and iPad app can sync that saved progress. It includes:

• Main and bonus rankings, unfinished rounds, earlier answers and card settings, including an optional name you put on a card.
• Original and Taylor’s Version choices, personal mood tags, energy settings and mood playlist order.
• Tour song favorites and records of playlists you saved through Maple Lattes, such as playlist names and identifiers.
• Song selections, searches, tour filters, sort order and image format preferences.

We also store revision numbers and save times to help keep different devices from overwriting one another. Account progress is private to your account; Maple Lattes does not publish it as a public profile. Progress from before sign-in is added automatically to empty sections of your account. Existing account progress takes priority, and the device copy is retained. On a shared browser, guest progress claimed by one account is not imported into another account.

Changes are kept in the browser or the app’s on-device cache before they reach the server. The iPhone and iPad app keeps its owner-scoped account and merch-settings caches in Application Support. Check the saving status before switching devices: a pending or offline change has not yet reached your account. Browser-local copies and the app’s owner-scoped caches can remain after sign-out, so clear site data when leaving a shared browser.

Music, videos and shared images

Apple Music supplies album artwork and song previews and handles authorization when you connect your library. When you connect, the app checks your catalog region and access to library playlists. Saving a playlist sends your chosen playlist name and songs to Apple. The website reads back a new playlist to check its song order. The iPhone and iPad app creates the playlist but does not read it back. Your Apple Music authorization token is not included in saved ranking data. You can revoke Apple Music permission in your device Settings.

In the iPhone and iPad app, you can optionally load recently played Apple Music songs. The app filters that recent list for Taylor Swift on your device and holds the result in memory while the app is running. It does not add listening history to your Maple Lattes account or upload it to Maple Lattes or Cloudflare.

Tour pages load video thumbnails from YouTube and use YouTube’s privacy-enhanced player when you open a recording. Playing an embedded video or following a YouTube or TikTok link connects you to that provider, which handles the interaction under its own privacy policy.

Share images are made in your browser on the website or on your device in the iPhone and iPad app. Maple Lattes does not upload the image itself. When you share one, the app or service you select receives it. Card details may still be part of your saved progress.

Games and playlists in Messages

You can play How Well Do You Know Me? or make a shared playlist without a Maple Lattes account. We store the names players choose, selected songs, submitted rankings and predictions, scores, and game times with Cloudflare. For shared playlists, we also store the playlist title, optional theme, each player’s song selections, votes, order, and approvals. Your opponent can see your answers after both of you submit that round or the shared playlist choices needed to finish it. These activities do not change your personal song rankings.

Rank Together is different: the selected songs, rankings and shared result travel in the iMessage you choose to send. Maple Lattes does not store Rank Together rankings on its game server.

For How Well Do You Know Me? and shared playlists, a private player key stays in your device’s Keychain; the server stores a hash of it. Invitations use a separate link that lets the first recipient who joins claim the other player’s seat. Share invitations only with the person you want to play with. We also keep short-lived security counters derived from IP addresses to limit repeated game and playlist creation and joining.

If you save a game to your account, we link your player seat to your account identifier. Account history shows game details and revealed scores. Games and shared playlists expire thirty days after creation and are then removed by scheduled cleanup, including game account-history links. Unfinished drafts can remain on your device. Clearing account data or deleting your account removes your game-history links; the shared game or playlist can remain until expiry so the other player can finish. Messages and images you have already sent remain with their recipients.

Website analytics

We use Google Analytics on the website to understand which pages people visit and how they use Maple Lattes. It uses cookies and similar technologies to measure visits, interactions, and information about devices and browsers. Google Analytics is not used in the iPhone and iPad app. See Google’s privacy policy and how Google uses information from sites that use its services.

Optional merch notifications

If you turn on shop notifications on the website, we store your browser’s push subscription, your account identifier, selected alert categories and watched items with Cloudflare. The subscription includes a delivery address and encryption keys used by your browser’s push provider. It is private and is not included in ranking backups. Your alert choices are saved to your account, while permission is granted separately in each browser.

If you turn on shop notifications in the iPhone or iPad app, the app sends its Apple Push Notification service (APNs) device token, its APNs delivery environment, and its association with your account to Cloudflare, along with your alert settings and watched items. Cloudflare stores those details to send alerts, and Apple delivers the notification through APNs. The app keeps the current APNs token only in memory and asks iOS for it again when the app starts.

Notifications can arrive while the site or app is closed. Your browser’s push provider processes encrypted notification delivery. Music releases and restocks bypass the 15-minute cooldown for other merch. On the website, turn notifications off from the Merch page, or clear your account data to remove all notification subscriptions and settings. In the app, manage alerts in Account → Notifications and manage iOS permission in iOS Settings. Signing out immediately unregisters the app with APNs. If Cloudflare removal cannot finish, the app keeps only the owner-scoped registration ID needed to retry when that same account next signs in; it does not keep a Clerk session token. Browser permission and account sign-in are separate; signing out does not itself revoke browser permission, so turn notifications off before leaving a shared device. Delivery records are kept briefly for duplicate suppression and removed after expiry.

Running Maple Lattes

Cloudflare hosts and protects Maple Lattes and provides website traffic and performance analytics. It can process technical information from website and app requests, such as IP addresses, request details, browser or device information and security signals. Google Fonts supplies the site’s typefaces, which requires your browser to request font files from Google. See Cloudflare’s privacy policy and Google Fonts’ privacy information.

We use account and progress data to provide sign-in, save your choices, resolve support requests and maintain the service. Maple Lattes does not sell your saved song choices or use them to target advertising.

Clearing data and closing an account

While signed in on the website, open Account → Saved data → Clear account data. In the iPhone and iPad app, use Account → Clear account data. This clears the content saved to your account, all notification subscriptions and settings, and the affected local cache after the server confirms the request. It keeps your Clerk sign-in account. The service retains empty save records and revision information to prevent an older device from restoring cleared progress. Guest progress, downloaded backups, playlists already created in Apple Music and copies on other devices are separate and may need to be cleared separately.

You can delete your sign-in account from the account menu on the website or use Account → Delete account in the iPhone and iPad app. When Clerk sends us the verified deletion notice, we remove your remote saved account progress, notification subscriptions, alert settings, queued notifications and account links to saved Messages games. We retain your deleted account identifier and the deletion time so an older device cannot restore that data. In the app, the affected on-device cache is replaced with a deletion marker for the same reason. A notification already being delivered may still arrive.

Deleting an account does not remove browser-local copies, downloaded or exported files, playlists already created in Apple Music, or Messages and images already sent to recipients. Shared games and playlists can remain until their thirty-day expiry so the other player can finish.

We retain saved progress until you clear it or request removal. Hosting, security logs and provider backups may remain according to the providers’ retention practices. For help accessing, correcting or removing your data, contact info@maplelattes.com. We may need to verify that you own the account before making a change.

Contacting support

When you submit the support form, we use your name, reply email address, selected platform and message to respond to your request. Cloudflare handles the form and passes validated messages to Resend for delivery to our support mailbox. Your message is not added to your Maple Lattes rankings or account progress.

The form uses Cloudflare Turnstile to check for automated submissions and rate limits to reduce spam. Cloudflare can process your IP address, browser information and security signals for these checks. Support messages and replies may remain in our support mailbox and the email providers’ records. Please do not include passwords or other account credentials. See Cloudflare’s privacy policy and Resend’s privacy policy.

Questions or changes

Contact Maple Lattes at info@maplelattes.com. We will update this page when our data practices change and show the revision date above.