Music Cup
Privacy
Music Cup is operated by MusicCup Studio. For support, privacy or legal questions, contact info@musiccup.live.
Last updated: 22 July 2026. Music Cup is designed for anonymous play and does not require an account.
Data we process
When a tournament starts, we store its selected artist, songs, match structure, language and a salted hash of a device identifier. IP addresses may be used transiently at Cloudflare’s edge for abuse prevention and are not written to our tournament database.
Retention
Raw match records are retained for up to 90 days. Device hashes are unlinked after 30 days. Anonymous aggregate song totals may be retained to keep the public leaderboard useful. A public result snapshot remains available until its deletion token is used.
Cookies and local storage
Music Cup does not set advertising, analytics or cross-site tracking cookies. Cloudflare, our hosting and security provider, sets strictly necessary first-party cookies (such as __cf_bm and cf_clearance) to defend against bots and abuse; these are exempt from consent under ePrivacy Article 5(3). Cloudflare Turnstile, used to verify tournament submissions, may also set a strictly necessary cookie during the challenge. To run the tournament and remember your preferences without an account, we store the following entries in your browser’s localStorage, which never leaves your device: musiccup:tournament:v3 (in-progress tournament), musiccup:previous:v3 (last finished tournament for undo), musiccup:device:v1 (random salted device hash), musiccup:preferences:v1 (format and catalogue mode), musiccup:brawl-draft:v1 (unfinished brawl selection). Legacy musiccup:tournament:v2 / musiccup:previous:v2 entries are removed on load. Clearing site data in your browser removes all of these instantly.
Third-party services
Song search and 30-second previews are supplied by Apple’s iTunes Search API. Cloudflare provides hosting, security challenges, object storage and database services. Their own privacy terms apply when your browser connects to them.
International transfers
Tournament records, device hashes and Cloudflare security logs may be processed by Cloudflare outside the European Economic Area (for example in the United States). This transfer relies on Cloudflare’s Data Processing Addendum and the Standard Contractual Clauses adopted by the European Commission, together with supplementary safeguards. You may request a copy of these safeguards by emailing the address above.
Your controls
A completed public result is returned with a deletion token stored only on your device. You can use it to remove that public result. Clearing local site data removes unfinished tournaments and local identifiers.