Privacy Policy
Effective date: 2026-08-14. Operated by BTY (Better Than Yesterday), operated by Dr. Chi (“BTY,” “we,” “us”).
1. Who operates btyNorebang
btyNorebang is a private-event karaoke web application operated by BTY (Better Than Yesterday), operated by Dr. Chi. It lets guests at a hosted event search for publicly available YouTube videos and add them to a shared song queue. Contact: ywamer2022@gmail.com.
2. Scope
This policy covers the public btyNorebang web service and the BTY Norebang iOS app. They are the same service; “BTY Norebang” is the name the app installs under. It does not cover YouTube, Google, or any third-party website you open from our service; those are governed by their own policies.
3. Information you provide
- A display name you enter for the event (you may use a nickname).
- Song search terms you type.
- Your chosen performance style (MR / karaoke / original).
- The video you select, or a YouTube link/ID you paste, to add a song request.
4. Information created through use of the service
- A song request record: your display name, the selected YouTube video ID, video title, channel name, thumbnail URL, the room and event it belongs to, a queue position, a “ready” signal, and start/complete/removed status and timestamps.
- A room- and event-scoped identifier for the request (a request ID).
We do not use analytics, advertising, or third-party tracking services, and we do not sell personal information.
4a. Host account information
Sections 3 and 4 describe what a guest provides at an event. If you sign in as a host — in the BTY Norebang iOS app or on the web — we also collect and store the following. Each item is used to operate your account and the service, never for advertising, and none of it is sold.
- Email address — from your Apple or Google sign-in, verified on our server. Used to identify your account and to contact you about it. If you use Apple’s Hide My Email, we receive only Apple’s relay address.
- Display name — the name shown on your account and to guests in your norebang. Optional; Apple supplies it only on your first sign-in.
- Account identifiers — an internal account ID, sign-in session tokens, and an opaque purchase reference. Used to keep you signed in and to link your norebangs, passes and purchases to your account.
- Time zone — your device’s time zone (for example “Asia/Seoul”), captured once. Used only to decide when your daily free allowance resets, so it matches your local day. It is not location data and is not derived from location services.
- Saved songs — the songs you save to My Songs, with the video ID and a title, artist and thumbnail snapshot taken when you saved it. Used to show your library.
- Song requests and playback records — the requests made in your norebang (as described in section 4) and when each song starts and finishes. Used to run the queue and to account for free time and pass time.
- Purchase and pass records — for a purchase made through the App Store: Apple’s transaction identifiers, which product was purchased, whether it was a sandbox or production purchase, and the pass that resulted. Used to deliver what you bought, to support refunds, and for accounting. We never receive or store your card, bank or payment details — Apple handles payment.
- A short-lived pseudonymous anti-abuse identifier — to rate-limit sign-in and request endpoints and prevent abuse, your IP address is converted by a one-way keyed hash into a pseudonymous value. The IP address itself is never stored in our database or logs. The pseudonymous value is held only in a temporary cache that expires within an hour. It is not used to identify you, to build a profile, or to determine your location.
We do not collect location, camera, microphone, photo, contact, health or advertising data, and the app contains no analytics, advertising, attribution or crash-reporting software.
5. YouTube API Services data
btyNorebang uses YouTube API Services. When you search, we send your search terms to the YouTube Data API on the server and receive public video metadata (video ID, title, channel name, thumbnail). We may store the selected video’s ID and related public metadata as part of your song request. We do not download, re-host, or modify YouTube video content; playback is handed off to YouTube (the video opens on YouTube). By using these features you are also agreeing to the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.
Google Sign-In and YouTube access are separate. btyNorebang uses Google Sign-In for authentication. It does not request authorization to access or manage your YouTube account: it does not read your subscriptions, watch history, or playlists, and it never uploads, deletes, or modifies anything in a YouTube account. We do not collect Google passwords or credentials.
If you sign in with Google, btyNorebang may appear among the apps connected to your Google Account on the Google security & permissions page, where you can review or remove that access at any time. That entry reflects Google Sign-In access for authentication; it does not mean the app has access to your YouTube subscriptions, watch history, playlists, or channel-management permissions.
6. Browser storage and cookies
To track the songs you personally requested at an event, we store a small record in your browser’s localStorage (the request IDs you submitted and a capability token that lets only your device cancel your own request, plus your display name). This stays on your device, expires after about 12 hours, and is removed if you clear your browser storage.btyNorebang does not use advertising or cross-site tracking cookies.
7. How information is used
- To run the shared song queue and show you your place in it.
- To let you (and only your device) cancel a request you submitted.
- To search YouTube and hand off playback of the video you chose.
- To let the event host manage the queue and playback order.
8. When information is shared
Your display name and song request are visible to others at the same event (the shared queue and the host’s controls). We share data with the processors listed below only to operate the service. We do not sell your data or share it for advertising.
9. Third-party services and processors
- Google / YouTube (YouTube Data API v3): server-side video search and public metadata; playback handoff to YouTube.
- Cloudflare: hosting (Cloudflare Workers) and a short-lived search cache (Cloudflare KV).
- Supabase: the managed PostgreSQL database that stores rooms, events, and song requests.
Cloudflare processes standard network request metadata (such as IP address) to deliver and protect the service, as is inherent to any website.
10. YouTube and Google policies
Your use of YouTube-powered features is subject to the YouTube Terms of Service and the Google Privacy Policy. See also the btyNorebang Terms of Service.
11. Retention and deletion
- Cached YouTube search results (Cloudflare KV) are kept for at most 1 hour and then automatically expire and refresh — well within the maximum period permitted by YouTube API policy.
- Song request records (in the database) remain for the event as its history; a host may remove or cancel requests, which drops them from the active queue.
- Browser storage (your request IDs / display name) expires after about 12 hours and is removed when you clear site data.
- We keep no advertising or analytics profiles.
12. Your choices and deletion requests
You may use a nickname rather than your real name. You can cancel a request you submitted from the device that created it, and you can clear your browser storage at any time. To request deletion of your display name and song request records, email ywamer2022@gmail.com with enough detail to identify the event and request; we will honor reasonable deletion requests manually.
12a. Host account deletion
If you sign in as a host with Apple or Google, you can permanently delete your account from inside the app at any time (Account → Delete Account). It is available whether or not you have created a norebang. Deletion is immediate and cannot be undone.
What is removed:
- Your email address, display name and time zone are erased from your account record.
- Your Apple and Google sign-in links are deleted, so neither can open the account again.
- All of your sign-in sessions are revoked, and every device, pairing code and room-management credential belonging to your norebangs is revoked.
- Your Apple and Google authorizations are withdrawn. If Apple cannot complete the withdrawal, the app tells you how to finish it in iOS Settings.
- Saved songs and uploaded norebang logos are deleted. Logo files are removed from storage shortly after deletion — normally within 24 hours and at most within 30 days.
What is kept, and why:
- Your account record is kept as a non-identifying marker rather than being erased outright, so the records below stay linked to something and are not silently orphaned. It contains no email, name or sign-in identifier and can no longer be signed into.
- Norebangs and events are retired rather than deleted. Their names are replaced with a neutral label, and the web address stays reserved so an old QR code can never lead to someone else’s norebang.
- Song request and playback history is kept with display names removed, so guests’ own records of an event remain accurate.
- Free-time usage and pass records are kept for accounting and to stop the daily free allowance being reset by deleting and re-creating an account.
- A one-way fingerprint of your sign-in identifier is kept for the same reason. It cannot be reversed to reveal your Apple or Google identity, is never shared, and is used only to recognise a repeat deletion.
- An opaque reference is kept so any future purchase or refund can be honoured. It carries no email or sign-in identity.
- Minimal sign-out records are kept for up to 90 days to investigate abuse, then deleted. The record that a deletion happened is kept permanently and contains no personal information.
13. Security
Access to YouTube uses a server-side API key that is never exposed to your browser. Administrative access is protected by hashed credentials and short-lived tokens. Data is transmitted over HTTPS. No method of storage or transmission is perfectly secure, but we take reasonable measures appropriate to a small private-event service.
14. Children
btyNorebang is intended for use at hosted events by a general audience and is not directed to children. Please do not submit a child’s personal information beyond a display name.
15. Changes to this policy
We may update this policy; the effective date above will change and, when the update is material, guests will be asked to accept the current version again before using the search and request features.
16. Contact
Questions or requests: ywamer2022@gmail.com (BTY (Better Than Yesterday), operated by Dr. Chi).