SETLIST PRIVACY NOTICE — October 31, 2026 Applies to Setlist v0.18.1. Publisher: FirstImpulse Studios Contact: FirstImpulseSupport@gmail.com Setlist searches an external chart catalogue, downloads charts to a folder you select, previews charts and audio, and browses your local library. External connections Search/filter requests go to api.enchor.us. Artwork, previews and chart downloads go to files.enchor.us. These services receive your network address and request information, including searches or chart identifiers. Their own practices and retention are controlled by their operators, not Setlist. When you select RhythmVerse, search and filter requests, artwork requests, and supported direct chart downloads go to rhythmverse.co. RhythmVerse receives your network address, keywords, selected filters and chart identifiers. Search and artwork data use the same bounded local caches described below. Charts hosted elsewhere require opening the source page in your browser; that page and any subsequent hosting service apply their own policies. For directly hosted charts, requesting a preview may transfer the full source archive when the host cannot serve individual files or byte ranges. Supported audio, note charts and song metadata are retained in the shared preview cache. Fullscreen chart playback may also retain the chart's selected background image (up to 8 MiB; PNG, JPEG or BMP). Video and unrelated extras are excluded. Lyrics come only from the chart file; no external lyrics service is contacted. The fullscreen fallback visualizer analyzes existing decoded playback samples locally; it does not record microphone or system audio. Older cached archives are compacted when reused. Preview archives are limited to 128 MiB per chart, and ZIP extraction to 512 MiB. Extracted temporary files in %TEMP%\Setlist-RhythmVerse-Previews are removed after preview preparation; crash leftovers older than one day are cleaned on the next RhythmVerse preview. Other charts require local installation. Update checks go to api.github.com for FirstImpulseStudios/Setlist releases. Automatic startup checks are enabled by default and limited to at most one successful check per UTC day. You can disable startup checks in Settings and still check manually. The request identifies the Setlist version. If you supply a GitHub token, it is sent to GitHub for authentication. Opening Releases opens GitHub in your browser, where browser and GitHub policies apply. Updates do not automatically install. Optional Discord Accounts And Community Leaderboards Discord sign-in opens your browser and uses Supabase Auth at yrwqhpymgfiggfmqydnc.supabase.co. Discord shares the identity/profile and email you authorize with Supabase for a recoverable account; Discord and Supabase also receive ordinary connection/security information such as your IP address. Setlist keeps a Supabase user identifier, display name, access/refresh tokens and expiry on this PC. The session file discord-session.bin is encrypted using Windows DPAPI for the current Windows account. Discord provider tokens and email are not retained in that local file. The browser returns through a temporary listener bound only to 127.0.0.1:43817 using PKCE. No Discord bot, server membership, message access or invitations are required. Score sharing is off by default and requires a separate explicit opt-in for the signed-in account. When enabled, new eligible completed runs send the chart scoring fingerprint, ruleset/play-mode board, score, stars, note hit/miss counts, best combo, overstrums, app version and a random retry identifier to this Supabase project. Your chosen Discord display name is associated with the result. No recording, audio, note-chart file, lyrics, artwork, local file path, controller samples or email is uploaded as a score. Chart fingerprints identify matching scoring content across sources. Looking up rankings for a chart that is not already prepared may fetch its note data through the same bounded preview cache; this does not start audio playback. Practice, partial, modified, failed and non-100%-speed runs are excluded from standard community boards. Scores are client-reported and are not anti-cheat verified. Other signed-in players can see displayed names, scores, stars, result statistics and server submission times on matching boards. Raw account identifiers, email and tokens are not returned by the rankings API. The server retains each player's best result per board and short-lived submission identifiers for retry/rate-limit handling. Old identifiers are pruned on that account's next submission; this is not a guaranteed deletion deadline. Score data remains until removed by the operator or account deletion. Supabase is currently hosted in West US (Oregon), United States; its and Discord's own terms/privacy practices apply. Free hosting may pause or become unavailable; local scoring continues. Settings > Leaderboard Account lets you disable future sharing, hide your online scores, restore hidden scores, or sign out on this PC. Hiding is reversible and retains records in the database. Disabling sharing or signing out does not remove existing online scores. A new higher score shared later becomes visible. Signing out clears the local session and sharing preference and requests revocation of this device's session; if offline, local credentials are still removed but server revocation may not complete. Session and sharing-consent files are excluded from full app backups. Contact FirstImpulseSupport@gmail.com for account/data removal requests. No analytics or advertising SDK is added by this feature. Local storage Favorites and named setlists are saved in collections.json under the settings directory, with a recovery backup. Saved chart information can include song metadata, source download URLs and local chart paths. Exported .setlist.json files omit local paths and contain chart references and metadata rather than audio or note-chart files. Importing a setlist does not automatically download its charts. Preview and installation requests use the services described above when you select those actions. Named filter presets (including saved searches and selected filters) are stored in filter-presets.json. Unfinished downloads, source references, song metadata, destination paths and queue states are stored in download-queue.json. These files have recovery backups. Restored downloads remain paused until you resume them. Preview instrument and difficulty choices are stored in preview-preferences.json; volume and scroll speed are also saved locally. Playable previews poll the selected XInput controller or assigned keyboard keys locally. Keyboard gameplay is restricted to the focused player; the Controls dialog reads keys while focused for rebinding and live tests. No global keyboard hooks are installed, and typed text is not recorded. The selected input mode, separate keyboard/controller bindings, selected controller slot, timing offset, player modifiers and display options are stored in guitar-controller.json and included in full app backups. Input samples stay in memory and are not uploaded. Completed full-song high scores, star ratings, chart fingerprints, source/local chart references, instrument, difficulty, speed, modifiers, accuracy, combo and completion time are saved locally in high-scores.json with a recovery backup. These scores are included in full app backups. Practice, partial and failed runs do not replace completed full-song bests; settings and chart variants keep separate records. Optional online accounts and score sharing are described below. Local scoring remains available without an account. Preferences, selected song folders, executable paths, window placement and optional update credentials are stored under %LOCALAPPDATA%\EncoreLoader. An optional GitHub token is encrypted with Windows DPAPI for the current Windows account; other preferences and cached files are not encrypted by Setlist. Search results, artwork and downloaded preview blocks and compact RhythmVerse preview bundles are cached under Cache-v1. The budgets are 32 MiB, 128 MiB and 512 MiB respectively. Reuse expiration is 15 minutes, 30 days and 7 days respectively. Expired preview files are pruned at startup and when preparing RhythmVerse previews. Other expired files may remain until accessed, evicted or manually cleared; these periods are not guaranteed deletion deadlines. Active previews can repopulate the cache after clearing. Preview playback may prepare the next 30-second audio section ahead while you listen, using the services and caches described above. Decoded audio uses a bounded rolling memory window rather than retaining the entire song. Full app backups are local .setlist-backup.zip files created at your chosen location. They include collections, presets, preferences, window/column layouts, saved paths and unfinished downloads. They exclude songs, caches and access tokens. Backups are not encrypted by Setlist and may contain personal paths and saved searches. Restore replaces managed app preferences, keeps the previous data under %LOCALAPPDATA%\EncoreLoader\RestoreBackups, and restarts the app. These safety copies persist until you remove them. Sharing a backup shares the saved information it contains. Local library scanning reads chart metadata and files in your selected library. Setlist does not upload library contents or local paths to a Setlist server. It contains no advertising or analytics integration. Third-party network requests still occur as described above. Duplicate and health checks read local chart files and metadata; they do not upload their findings. When you choose Move to backup, the selected chart moves to a folder beside the songs folder, named after it with " - Setlist Backups" appended. A text file records the original location. These backups are separate from the cache and persist until you restore or remove them. The Uninstall chart action uses the Windows Recycle Bin on supported local fixed drives after you confirm the exact chart path. Windows controls Recycle Bin retention. Favorites and setlists are retained. Installed chart folders include setlist-source.json with the original catalog provider, chart ID, download URL and artwork reference. These source references are also retained in Favorites/setlists after chart removal. For older saved entries without a usable source, selecting an uninstalled entry may search both catalogs by song/artist and, for Chorus Encore, charter. Matching uses the saved metadata locally; chart files and local paths are not uploaded. Lookups use the existing search cache and bounded result pages. Ambiguous matches require your selection. Your controls Use Settings > Cache storage to clear cached data. Disable automatic update checks in Settings if desired. Save a blank GitHub token to remove the locally stored token; revoke it separately on GitHub if needed. Uninstall preserves preferences, cache and songs. After closing Setlist, you may delete its EncoreLoader settings/cache directory manually if you no longer want that data. Songs remain in your selected song folder. Controller input: SDL polls supported native guitars through Windows HID/GameInput on a background thread. A selected device identifier and bindings are stored locally and included in full app backups. Controller samples are used for menu navigation/gameplay and are not transmitted by Setlist. No controller driver or mapper is installed. Guitar navigation also operates within Setlist’s main window and owned dialogs. Navigation reacts only while the app is in the foreground; background controller samples are discarded. On-screen text entry is a local draft until Apply; applying a search sends the resulting query to the selected catalogue as described above. Local file/folder browsing does not upload directory listings or files. Terms and privacy acknowledgment: When you first request a song preview, chart preview or Play Chart in each app version, Setlist requires you to read and accept its Terms of Use and acknowledge its Privacy Notice before playback. This applies to local charts and setlist playback as well as catalog charts. Startup, browsing and chart installation do not prompt. Automatic hover previews remain silent until acceptance. The desktop agreement checkbox starts unchecked. The app version, terms version and UTC acceptance time are stored locally in content-agreement.json under the settings directory. No acceptance record is uploaded by Setlist. A new app version or updated terms require acceptance again; later launches of the same accepted version do not. Acceptance records are excluded from app backups. Removing the record causes Setlist to ask again. Cancelling the agreement cancels only the requested playback action and leaves Setlist open without recording acceptance. In Controller Mode, the terms appear in a styled reader. Reaching the end marks the acknowledgment as ready; selecting Accept and continue is still required to save acceptance. Cancelling, closing or returning without selecting Accept and continue saves no acceptance, so the notice returns on the next explicit playback request.