Beat Battle
← Back to menu

Beat Battle Game · M9 Media LLC

Privacy Policy

Effective
Last Updated
August 21, 2026
August 21, 2026

Beat Battle Game (beat-battle.net)
Operated by M9 Media LLC d/b/a Beat Battle Game.

This Privacy Policy explains how M9 Media LLC (“M9 Media,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use the Beat Battle Game service at beat-battle.net (the “Service”). By using the Service, you agree to the practices described in this Privacy Policy.

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with specific privacy laws, the sections below labeled “EEA/UK Residents” and “California Residents” describe additional rights you may have.

1. Information We Collect

1.1 Information You Provide

Account Information. When you sign in via Google or Discord, we receive from the provider: your name (or display name), email address, profile image URL, and a unique identifier issued by that provider. We do not receive your Google or Discord password.

Profile Information. Information you add to your in-Service profile, such as a chosen display name or selected cosmetic.

User-Generated Content (Beats). The Beats you create using the Service, including the selection and arrangement of audio samples and any audio render produced from your Beat.

Payment Information. When you make a purchase, our payment processor Stripe collects your payment card number and billing information directly from you. We do not store full payment card numbers. We receive from Stripe: a tokenized identifier, the last four digits and brand of your card, your purchase history with us, your billing email, and the country and zip/postal code associated with your card.

Communications. If you contact us (for example, via [email protected]), we collect the information you provide in your message and any attachments.

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

  • Device and connection data: IP address, browser type and version, operating system, device type, screen resolution, language and time-zone settings, referring URLs, and pages viewed.
  • Usage data: actions taken in the Service (matches played, votes cast, Beats created, cosmetics owned, leaderboard rankings, time spent in features).
  • Authentication and session data: session tokens, login times, and authentication events.

Analytics. We measure how the Service is used with two tools. The first is a self-hosted instance of Umami, a privacy-focused analytics platform that runs on our own infrastructure, does not set cookies, and does not share data with third parties. The second is Google Analytics 4, provided by Google LLC, which collects device and usage data (including approximate location derived from your IP address, pages viewed, and interaction events) and sets cookies on your device. Google Analytics 4 does not log or store full IP addresses. We do not send Google your name, email address, or the contents of your Beats. Google processes analytics data subject to its own privacy policy. You can opt out of Google Analytics using the browser add-on at https://tools.google.com/dlpage/gaoptout.

We do not use Mixpanel, the Meta (Facebook) Pixel, or the TikTok Pixel.

1.3 Advertising

We show advertising on the Service through Publift Pty Ltd(“Publift”) and its Fuse platform, together with Google Ad Manager (Google LLC), which fills ad slots through programmatic auctions. To serve ads, these partners and their approved demand sources may set cookies or read device identifiers and may collect information such as your IP address, approximate location, device and browser type, and your interactions with ads. We do not share your name, email address, or the contents of your Beats with advertising partners.

Consent for advertising (EEA, UK, and California). Where required by law, advertising is governed by a Consent Management Platform (the InMobi / Quantcast Choice CMP), which asks for your preferences before personalized ads are served and records your choice. The CMP is shown only in regions where consent is required. You can review or change your advertising preferences at any time using the control below:

1.4 Cookies and Similar Technologies

We use a small number of cookies and similar technologies:

  • Authentication cookies — issued by our auth provider (Better Auth) to keep you signed in.
  • Session cookies — to maintain your session state during a match.
  • Security and CDN cookies — set by Cloudflare to provide DDoS protection, bot mitigation, and content delivery.
  • Analytics cookies — set by Google Analytics (cookie names beginning with _ga) to distinguish visitors and measure how the Service is used.
  • Advertising cookies and identifiers — set by our advertising partners (Publift, Google Ad Manager, and their approved demand sources) to serve ads, measure their performance, and, where you consent, personalize them.

Authentication, session, and security cookies are strictly necessary for the Service to function; disabling them in your browser will likely prevent the Service from working. Analytics cookies are not strictly necessary, and where consent is required by law we will request it. You can block or delete analytics cookies in your browser settings or use the Google Analytics opt-out add-on linked in Section 1.2 without affecting the Service.

Advertising cookies and identifiers are used to fund the Service. Where consent is required (for example in the EEA, UK, and California), they are set only after you agree through the consent tool described in Section 1.3, and you can withdraw that consent there at any time.

2. How We Use Information

We use the information we collect to:

  • Operate the Service — authenticate you, create and manage your account, deliver matches, process votes, calculate leaderboard rankings, deliver purchases, and provide customer support.
  • Improve the Service — analyze usage patterns to fix bugs, improve features, design new content, and develop new game modes.
  • Communicate with you — respond to support requests, send transactional notifications about your account or purchases, and (with your consent where required) send updates about new features.
  • Process payments — facilitate purchases through Stripe and apply applicable taxes via Stripe Tax.
  • Enforce our terms — investigate and act on violations of our Terms of Service, detect fraud, and protect the security of the Service.
  • Comply with legal obligations — respond to lawful requests from authorities and meet our regulatory obligations.

We do not sell your personal information for money. As described in Sections 1.3 and 4, we work with advertising partners who may process certain information (such as device identifiers, approximate location, and your interactions with ads) to serve and measure advertising. Where personalized advertising involves “sharing” or a “sale” as those terms are defined under some U.S. state privacy laws, you can opt out using the consent control described in Section 1.3 (see also Section 7.3). Apart from advertising, we do not share your personal information with third parties for their own independent marketing purposes.

3. Legal Basis for Processing (EEA/UK Residents)

If you are in the EEA or UK, the legal bases on which we rely to process your personal information are:

  • Contract performance (GDPR Article 6(1)(b)) — for providing the Service, processing your purchases, and responding to your requests;
  • Legitimate interests (GDPR Article 6(1)(f)) — for improving the Service, ensuring security, preventing fraud, and operating our business; we balance these interests against your rights;
  • Consent (GDPR Article 6(1)(a)) — for optional features that require consent, such as marketing communications you opt into; and
  • Legal obligation (GDPR Article 6(1)(c)) — for tax records, responses to legal requests, and similar requirements.

4. How We Share Information

We share your information only as described below. We do not sell your personal information for money. Some sharing with advertising partners for personalized advertising may qualify as “sharing” or a “sale” under certain U.S. state laws; you can opt out as described in Sections 1.3 and 7.3.

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf and are contractually obligated to protect it:

  • Hetzner Online GmbH (Germany) — backend servers and application hosting. Data center located in the EU.
  • Neon Inc. (database hosted on AWS Europe West 2 / London) — primary database for user accounts, Beats, and usage data. Data physically stored in the United Kingdom.
  • Amazon Web Services (S3) — storage of audio files including user-generated Beats.
  • Cloudflare, Inc. — content delivery network, DDoS protection, and security services.
  • Stripe, Inc. — payment processing.
  • Google LLC — third-party authentication (only if you choose to sign in with Google) and Google Analytics usage measurement as described in Section 1.2.
  • Publift Pty Ltd (Australia) — advertising monetization partner; manages ad placements and programmatic demand on our behalf.
  • Google Ad Manager (Google LLC) — ad serving and programmatic auction infrastructure for the ads shown on the Service.
  • InMobi / Quantcast — Consent Management Platform used to collect and record advertising consent in the EEA, UK, and California.
  • Discord Inc. — third-party authentication (only if you choose to sign in through Discord).
  • Buy Me a Coffee — to the extent any historical donations are referenced in our records.

Each provider has its own privacy practices. We do not control how third parties process information they collect directly from you (for example, when you authenticate through Google).

4.2 Legal and Safety

We may disclose information to comply with applicable law, lawful requests from authorities, or to protect the rights, property, or safety of M9 Media, our users, or others.

4.3 Business Transfers

If M9 Media is acquired by or merged with another entity, or if we sell substantially all of our assets, we may transfer your information to the successor. We will provide notice before your information becomes subject to a different privacy policy.

5. International Transfers

We operate the Service primarily from the United States. Our hosting providers store the bulk of personal information on servers physically located in the European Union (Germany) and the United Kingdom. Some service providers and advertising partners (notably Stripe, Cloudflare, Google, Discord, Publift, and our consent-management provider) may process information in other countries, including the United States and Australia.

When personal information of EEA or UK residents is transferred outside the EEA or UK, we rely on appropriate safeguards including the European Commission’s Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework where applicable. Our advertising and consent-management partners likewise rely on their own transfer safeguards (such as SCCs or Data Privacy Framework certification) for any such transfers.

6. Data Retention

We retain your information for as long as your account is active, for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Specifically:

  • Account information: retained while your account is active; deleted within 90 days after account deletion, except as required for our legal obligations.
  • Beats: retained while your account is active and the Beat has not been individually deleted by you; aggregated/anonymized data derived from Beats may be retained indefinitely.
  • Payment records: retained for at least seven (7) years to comply with U.S. tax and financial recordkeeping obligations.
  • Communications: retained for at least two (2) years for support and reference.
  • Server and security logs: retained for up to 90 days.

7. Your Rights

7.1 All Users

You may at any time:

7.2 EEA/UK Residents

If you are in the EEA or UK, you have the following rights under GDPR/UK GDPR:

  • Right of access — to know what personal information we hold about you;
  • Right of rectification — to correct inaccurate or incomplete information;
  • Right of erasure(“right to be forgotten”) — to request deletion of your personal information;
  • Right to restriction of processing — to limit how we use your information;
  • Right to data portability — to receive a copy of your information in a structured, machine-readable format;
  • Right to object — to object to processing based on legitimate interests;
  • Right to withdraw consent — where processing is based on consent.

To exercise any of these rights, contact [email protected]. We will respond within thirty (30) days. You also have the right to lodge a complaint with your local data protection authority.

7.3 California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you the following rights:

  • Right to know what personal information we collect, use, share, or sell about you;
  • Right to delete personal information we have collected from you, subject to certain exceptions;
  • Right to correct inaccurate personal information;
  • Right to opt outof sale or sharing of personal information. We do not sell your personal information for money; where personalized advertising involves “sharing” for cross-context behavioral advertising under California law, you can opt out using the consent control described in Section 1.3;
  • Right to limit use of sensitive personal information (we do not use sensitive personal information for purposes beyond providing the Service);
  • Right of non-discrimination for exercising your CCPA rights.

To exercise any of these rights, contact [email protected]. We will respond within forty-five (45) days, with one possible 45-day extension.

7.4 Other Jurisdictions

Residents of other jurisdictions with applicable privacy laws (including Brazil’s LGPD, Colorado, Connecticut, Virginia, Utah, and others) may have similar rights. To exercise them, contact [email protected].

8. Security

We use commercially reasonable technical and organizational measures to protect your personal information, including encryption in transit (TLS), access controls, and regular security review. However, no system is perfectly secure. We cannot guarantee that unauthorized access, disclosure, or alteration of your information will never occur. You are responsible for keeping your account credentials secure.

If we become aware of a personal data breach affecting your information, we will notify you and applicable authorities as required by law.

9. Children’s Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, do not use the Service or provide any personal information to us. If you believe we have inadvertently collected personal information from a child under 13, please contact [email protected] so we can delete it.

For users between 13 and 17, use of the Service requires the consent of a parent or legal guardian, as set out in our Terms of Service.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

11. Do Not Track

Some browsers offer a “Do Not Track” signal. The Service does not currently respond to Do Not Track signals because no consistent industry standard exists. We do not use cross-site tracking regardless.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy at this URL and updating the “Last Updated” date. Where required by law, we will obtain your consent before applying changes.

13. Contact Us

Questions, concerns, or requests regarding this Privacy Policy or your personal information can be sent to:

M9 Media LLC
d/b/a Beat Battle Game
5900 Balcones Dr Ste 100, Austin, TX 78731
[email protected]
Official Discord: https://discord.com/invite/beatbattle

For general questions, our Discord support tickets are typically the fastest channel. For formal requests to exercise statutory privacy rights (GDPR/CCPA/etc.), please use email so we maintain a documented response trail.

If you are in the EEA or UK and prefer to contact a representative in those regions, we do not currently have a designated EEA/UK representative. You may contact us directly at the email above or your local data protection authority.

M9 Media LLC d/b/a Beat Battle Game · 5900 Balcones Dr Ste 100, Austin, TX 78731 · [email protected]