privacy · last updated 2026-04-30
either.fm is a pairwise music-ranking app. To make voting work we keep a small amount of data. This page lists every piece of it, where it lives, and how to make it go away.
We store your votes so we can rank songs. If you don't sign in, they're attached to a random ID in a cookie. If you sign in, they attach to your email instead. We use anonymous page-view analytics. We don't sell anything to anyone, and we don't run advertising trackers. The longer version is below, in plain language.
Five small cookies, all scoped to .either.fm so a
session on either.fm carries to app.either.fm and back.
If you sign in, Supabase also sets a small set of auth cookies that hold your session. These are required for being logged in and clear on sign-out.
The duel UI uses localStorage to remember the last
few pairs you've seen (so you don't get the same one twice in a
row), your local vote count, and a couple of UI preferences. This
data lives on your device only — it never leaves your browser.
Clearing site data wipes it.
Votes go into a Postgres database hosted by Supabase in the EU. Each row records: which item won, which item lost, the league, either your anonymous cookie ID or your account ID, and a timestamp. That's it — no IP, no user-agent, no referrer attached to the vote.
If you sign in, we also store your email (so you can log back in) and a row that links your account to your earlier anonymous ID, so your top 10 doesn't reset.
Sign-in is magic-link only — no passwords. You enter your email, we send you a one-time link. The link is delivered via Resend, which acts as our SMTP provider; the email itself is composed by Supabase. Resend processes the message in transit and keeps short delivery logs. We don't use your email for anything else and we don't add it to a marketing list.
We use Glyphex for anonymous page-view analytics. Glyphex doesn't set cookies and doesn't store your IP. To count unique visitors it derives a short-lived hash from your IP + user-agent that rotates daily and can't be used to follow you between days or sites. We see how many people opened a page and roughly which country it came from. We don't see who.
The site runs on Cloudflare Workers. Cloudflare keeps standard edge request logs (IP, requested URL, user-agent, response code) for a short period — we use them only for debugging and abuse response. They're not joined to your votes or your account.
We don't sell, rent, or share your data with third parties for marketing. There are no advertising trackers, social pixels, or retargeting scripts on the site. We don't ask for microphone, camera, or location access. We don't profile you beyond the votes you choose to record.
To clear the anonymous side: clear cookies and site data for
either.fm and app.either.fm. The next
visit starts a fresh anonymous ID with no history.
To delete a signed-in account and the votes attached to it: email hello@either.fm from the address you signed in with. We'll remove the account record and the linking row, and detach the votes from any identifier within seven days. The aggregate ranking signal survives in anonymous form — your individual contribution is no longer attributable to you.
Application servers and database: Supabase, EU region. Edge delivery: Cloudflare, global. Email transport: Resend. Analytics: Glyphex. Either.fm is built and operated by Skadi, a Finnish company.
If we change what we collect or how we use it, we'll update this page and bump the date at the top. We won't quietly change the meaning under your feet.
Privacy questions, data requests, or anything that doesn't fit a form: hello@either.fm.