privacy policy
last updated: february 2026
overview
resonance is committed to your privacy. this policy explains what data we collect, how we use it, and your rights regarding that data. resonance does not require accounts and collects minimal personal information.
data we collect
content you submit
when you share a memory, we store the memory text, an optional display name, an optional date, and an optional youtube video selection. submissions are anonymous by default. we also store a randomly generated anonymous identifier (in your browser's local storage) with each memory so you can claim your submissions in the future. this identifier is not linked to any personal information.
emoji reactions
when you react to a memory, we store a randomly generated anonymous identifier (in your browser's local storage) along with the emoji and which memory it was for. this identifier is not linked to any personal information.
reports
when you flag content, we store the report reason and which memory was flagged. no personal information about the reporter is collected.
analytics
we use google analytics 4 (ga4) to understand how people use resonance and improve the experience.
ga4 collects:
- page and usage data: pages visited, time on page, browser type, device type, and operating system.
- interaction events: we track actions such as creating a memory, searching for songs, previewing share sheets, and sharing memories. these events contain no personal information, only the type of action and general context (e.g., which template was used, not the content of your memory).
- outbound link clicks: when you click a link that leaves resonance.moonpath.dev (such as an amazon, spotify, youtube, or apple music link), we record the click destination, the type of link (e.g., "amazon affiliate", "spotify", "youtube"), and the song associated with the link. we do not track your activity on the destination site.
- traffic source data: we record how you arrived at resonance.moonpath.dev, including the referring website and any utm campaign parameters in the url.
- approximate location: ga4 infers your approximate geographic location (city and country level) from your ip address. we do not see or store your ip address directly.
we do not use this data to identify individual users. the content of your memories (text, display names, dates) is never included in analytics events.
ga4 uses cookies to distinguish unique visitors. you can opt out by using the google analytics opt-out browser add-on. subject to google's privacy policy.
session storage
during your visit, traffic source information (referring website, utm campaign parameters) is stored temporarily in your browser's session storage. this data is automatically cleared when you close your browser and is used only to provide context in analytics events.
cookies
resonance uses minimal cookies:
- theme preference cookie (
moonpath_theme): stores your light/dark mode choice so it carries over across moonpath.dev sites. set on the.moonpath.devdomain, contains only "light" or "dark", expires after one year. not used for tracking. - local storage: random anonymous ids for emoji reactions and memory submissions (not tracking cookies). these allow you to manage your reactions and claim your memories in the future.
- google analytics cookies: used to distinguish unique visitors and track site usage. these are set by google.
- session storage: traffic source information (referring website, utm parameters) is stored temporarily in your browser's session storage during your visit. this data is automatically cleared when you close your browser and is used only to provide context in analytics events.
we do not use advertising cookies or tracking pixels. for full details, see our cookie policy.
amazon associates
resonance is a participant in the amazon services llc associates program, an affiliate advertising program. when you click on amazon links on our site, we record the click in our analytics (including which song page the link was on) to understand how our affiliate links are used. amazon may also set cookies to track the referral. these cookies are governed by amazon's privacy notice. we receive a small commission on qualifying purchases at no additional cost to you.
youtube api services
resonance uses youtube api services to search for and display music content. by using resonance, you acknowledge and agree to the google privacy policy.
you can revoke resonance's access to your data at any time via the google security settings page.
resonance does not store any youtube user tokens or request access to your youtube account. we use a server-side api key to search for videos and display embeds. no youtube data is persisted beyond the current server session.
third-party services
| service | purpose | data shared |
|---|---|---|
| supabase | database hosting | submitted memories, reactions |
| youtube | video search and embeds | search queries |
| last.fm | song search | search queries (server-side) |
| vercel | hosting | standard web requests |
| formspree | contact form | name, email, message |
| google analytics 4 | usage analytics, interaction events | anonymous usage data, interaction events, outbound click tracking, approximate location, traffic source |
| google fonts | font delivery | standard web requests |
data retention
memories are retained indefinitely. to request deletion, contact hello@moonpath.dev. emoji reactions are stored indefinitely unless removed by a moderator or upon request. reports are retained for moderation purposes.
data deletion
since resonance does not collect personal information or require accounts, there is generally no personal data to delete. if you submitted a memory with your name and wish to have it removed, contact us. you can clear your anonymous identifiers at any time by clearing your browser's local storage for this site.
gdpr (european users)
if you are located in the european union, you have the right to access, correct, and delete any personal data we hold about you. since resonance collects minimal personal data, this primarily applies to submitted memories that may contain a display name. to exercise your rights, contact hello@moonpath.dev.
ccpa (california users)
if you are a california resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected. we do not sell personal information. to make a request, contact hello@moonpath.dev.
children's privacy
resonance is not directed at children under 13. we do not knowingly collect information from children under 13.
changes to this policy
we may update this policy from time to time. changes will be reflected by updating the "last updated" date.
contact
for privacy-related questions or content removal requests, email hello@moonpath.dev or use our contact form.