Effective Date: March 1, 2026
Last Updated: March 4, 2026
At Lyra (operated by Neonotics), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and web application at lyra.app.
When you create a Lyra account, we collect your email address, display name, and handle (username). These are required to set up your profile and enable the core rating functionality.
All music ratings, decimal scores (0.1 to 10.0), notes, tags, and custom lists you create are stored and associated with your account. Your public profile displays your ranking history unless you choose otherwise.
Connecting your Spotify account is entirely optional. If you choose to do so, we use OAuth to authenticate your identity — we do not store your Spotify password. We request only the user-read-private and user-read-email scopes to verify your Spotify identity. We do not access your playlists, listening history, or any other Spotify data.
We automatically collect IP addresses, browser type, device information, and usage patterns through standard web server logs and analytics. This helps us understand how Lyra is used and improve performance and security.
Lyra uses cookies and browser local storage solely to maintain your authenticated session and remember your preferences. We do not use advertising cookies or third-party tracking cookies. Session cookies expire when you sign out or close your browser. You can disable cookies in your browser settings, but doing so may prevent you from logging in.
Lyra uses Supabase, a secure, open-source PostgreSQL database platform, to store all account information, rankings, and lists. Supabase provides enterprise-grade encryption in transit and at rest. All data is stored on Supabase's secure infrastructure with regular backups.
Your data is encrypted end-to-end for sensitive operations. Authentication is handled securely using industry-standard protocols. We do not store passwords in plain text; all passwords are hashed.
We retain your personal data for as long as your account is active. If you delete your account, all associated data — including your email, rankings, lists, and profile — is permanently removed from our systems within 7 business days.
Anonymized, aggregated analytics data (with no personally identifiable information) may be retained indefinitely for product improvement purposes.
Lyra is operated from the United States. If you access Lyra from outside the United States, your data may be transferred to and processed in the United States. Supabase, our database provider, processes data under standard contractual clauses and applicable data protection agreements. By using Lyra, you consent to this transfer. We take appropriate safeguards to ensure your data is treated securely and in accordance with this Privacy Policy.
We use your data to:
We do not sell your personal data to third parties under any circumstances. Your email, handle, and ranking data are not monetized, rented, or sold.
We may share data only in these limited cases:
For users located in the European Economic Area or United Kingdom, we process personal data under the following legal bases:
Neonotics is the data controller responsible for personal data collected through Lyra.
If you are a resident of the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including:
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of data sales. Since we do not sell data, opt-out is not applicable, but you retain all other rights.
To exercise any of these rights, contact us at neonotics@gmail.com.
You can request complete deletion of your Lyra account and all associated data at any time by emailing neonotics@gmail.com.
Please include "Request Account Deletion" in the subject line. We will:
Note: Deletion is permanent and cannot be undone. Your public profile URL will be removed from search results.
Lyra takes data security seriously. We employ multiple layers of protection:
However, no system is 100% secure. If you believe your account has been compromised, contact us immediately.
Lyra may link to external websites (e.g., Spotify, Apple Music). We are not responsible for their privacy practices. Please review their privacy policies when you interact with third-party services. Spotify OAuth is optional and governed by Spotify's privacy policy.
Lyra is not intended for children under 13 years old. We do not knowingly collect data from children. If we become aware that a child has created an account, we will delete their data and account immediately.
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact:
Lyra / Neonotics
Email: neonotics@gmail.com
Response time: We aim to respond to all privacy inquiries within 7 business days.
In the event of a data breach that affects your personal information, Lyra will notify affected users and relevant authorities as required by applicable law (including GDPR Article 33/34 where applicable). Notification will occur without undue delay and, where feasible, within 72 hours of becoming aware of the breach. We will communicate the nature of the breach, data affected, likely consequences, and steps taken to address it.
Some browsers transmit "Do Not Track" (DNT) signals. Lyra does not currently alter its data collection practices in response to DNT signals, as there is no industry-standard interpretation of these signals. We do not use advertising trackers regardless of DNT status.
Lyra may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, if required by law, via email. Your continued use of Lyra after changes constitutes acceptance of the updated Privacy Policy.
Lyra respects your privacy. Your data is yours. We believe transparent, minimal data collection and strict non-monetization build trust. Thank you for using Lyra.