Using 2dle Without an Account

You don't need an account to use 2dle. Without one, we never learn who you are.

• Your music. 2dle reads what's playing from Spotify, Apple Music and other players on your Mac. To find album covers, track lists and tempo, it sends the artist, album and song names (or, for Spotify, the song's ID) to public music catalogues run by Apple, Deezer and Spotify, and downloads the cover from them. Those requests carry no name and no account. Like any request over the internet, they do reach those companies from your IP address. You can switch these lookups off in the app, under “Privacy settings” in your profile.
• Your weather. Only if you switch on “Copy Local Weather”, which is off until you do. 2dle then asks macOS roughly where your Mac is (macOS asks you first), keeps that only to the nearest tenth of a degree, which is about ten kilometres, and sends those two numbers to Open-Meteo, a public weather service, to ask whether it's raining there. Nothing else goes with them: no name and no account, though like any request it reaches them from your IP address. How long your day is gets worked out on your Mac. Switch it off again and 2dle forgets where you are.
• Your listening. How long you've listened and which records you've earned are counted on your Mac. What you listened to stays there, and we never see it. (If you make an account and add friends, see below for what they see.)
• Your time with 2dle. When you first opened 2dle, how often and on which days you've opened it, and how long it has been running are counted on your Mac too. Without an account, none of it leaves your Mac.
• Your settings. Kept on your Mac too.

If You Make an Account

An account is optional. It's what referral codes, the clocks they unlock, and friends hang on. When you make one, we keep:

• Your email address, which is how we know it's you when you sign in.
• The name you choose to go by, if you choose one.
• Your referral code, whose code you used (if you used one) and when, and how many people have used yours. A friend whose code you use sees their count go up, and the name you go by, so they know who it was.
• The time of each referral code you try, so that codes can't be guessed by the thousand.
• A scrambled fingerprint of each Mac you sign in on. The app sends a one-way hash of your Mac's hardware ID, never the ID itself, and we can't turn it back into one. It's only there so that one person can't invite themselves over and over, and it goes when your account goes.
• How much you use 2dle on each Mac you're signed in on: when you first opened it there, how many times and on how many days you've opened it, how long it has been running, how long music has played in total, and which version of 2dle you have. The app sends these about once an hour. They're totals only, and what you listen to is never sent. You can switch this off in the app, under “Privacy settings” in your profile.
• Your friends, if you add any: your friend code (separate from your referral code, and you can swap it for a new one), the friend requests you send and receive until they're answered, who is friends with whom and since when, and the time of each friend code you try. Nobody becomes your friend unless you accept their request, or they accept yours. Your friends see your name, member number, badges, when you joined, and (unless you switch on Ghost mode) the song that's playing right now and your 2dle stats: how long you've listened, on how many days, how many albums, songs and records, and your favourite record, artist, album, scene and turntable. Only while you have at least one friend does the app send these: the song as it changes (we forget it ten minutes after it was last sent), and the stats about once an hour. Your listening history is never sent. Switch on Ghost mode, under “Privacy settings” in your profile, and the app stops sending them and we delete what we had. Remove a friend, or delete your account, and the friendship goes too.
• When your account was made and when you signed in, along with the IP address and app details that our sign-in provider records with each sign-in, for security.

If you type in a friend's code before you have an account, we check that it's a real one. To stop codes being guessed, we keep a scrambled copy of the internet address that check came from, for one day, and nothing else about it.

On your Mac, your sign-in is kept in the Keychain. Your profile picture stays on your Mac as well, and is never uploaded.

Signing In With Google

If you choose to continue with Google, Google tells us your email address, your name, your profile picture and its ID for your Google account. That's Google's basic profile, and it's all 2dle asks for.

• We use the email address to make or find your 2dle account, and the ID to recognise you next time.
• Your Google name and picture are stored with your account record, but 2dle doesn't use them or show them.
• 2dle never sees your Google password, and can't reach anything else in your Google account: not Gmail, not your contacts, calendar, Drive or YouTube.
• We don't pass what Google tells us to anyone except the provider that keeps our database (see below), and we don't use it for advertising or to train AI models.

You can cut the connection whenever you like from the third-party connections page of your Google account. Deleting your 2dle account removes what we hold.

What We Use It For

• Signing you in, and keeping your account yours.
• Running referral codes and unlocking what they earn.
• Showing the friends you accept your name, badges, the song you're playing and your 2dle stats (nothing of the last two in Ghost mode).
• Knowing how long you've been with 2dle and how much you use it, for things we're planning for people with accounts.
• Keeping 2dle safe from abuse.
• Answering you, when you write to us.

That's the whole list. No ads, no trackers, no profiling. We don't sell or rent your information to anyone.

Who Else Handles It

• Supabase keeps our accounts database and runs the sign-in. It's a company in the United States, and our database sits in its Tokyo data centre.
• Google, if you sign in with Google, or if you write to us through our feedback form (which is a Google Form).
• Apple, Deezer and Spotify receive the music lookups described above.
• Open-Meteo receives the rough location described above, if you've switched on “Copy Local Weather”.
• GitHub hands over the installer when you download 2dle. The app also asks GitHub every so often whether there's a newer 2dle, which shares your internet address with GitHub. You can turn that off in the app's Privacy settings.
• Vercel hosts this website.

Each of them handles what it receives under its own privacy policy. We would also hand information over if the law required us to.

This Website

No cookies, no analytics, no trackers. Like any website, the service that hosts this one (Vercel) sees your IP address when a page loads.

If you click Windows or Linux on our roadmap and leave your email address, we count that as a wish for that version. So that it's one wish each, your browser makes up a random number and keeps it, and we store a scrambled copy of that number, plus a scrambled copy of the internet address the wish came from, which we delete after a day.

We keep your email address so we can tell you when that version is out, and for nothing else. We never share it, and we delete it once the news has gone out.

Keeping and Deleting

We keep your account's information for as long as you have the account. To delete it, open your profile in the app and press “Delete account”, then press again to confirm. Your account, email address, name, member number, referral and friend codes, friends and friend requests, shared song and stats, and usage totals are removed from our database straight away. A record of past sign-ins may remain in our provider's security logs.

Everything else lives on your Mac, where it's yours to keep or delete.

Your Choices

You can see your email address, name and referral code in the app, change your name there, and delete your account there. You can also ask us for a copy of what we hold about you, or ask us to correct it or delete it, and we will. Just get in touch.

If you think we've handled your information badly, we'd love the chance to put it right. You can also complain to your data protection authority at any time (in Japan, that's the Personal Information Protection Commission).

Security

Signing in has no passwords to leak. Everything travels encrypted, our database refuses all direct access (the app can only ask a handful of checked questions about your own account), and your sign-in lives in your Mac's Keychain. Nothing online is ever perfectly safe, but we look after your information as carefully as our own.

Children

2dle isn't aimed at children under 13, and we don't knowingly keep information about them. If you think a child has made an account, tell us and we'll delete it.

Changes to This Page

When we change this page, we change the date at the top. If the change is a big one, we'll say so on this website too.

Contact

Questions, requests or complaints? Write to us through our form and we'll get back to you.