# Privacy Policy Effective: July 19, 2026 Chunes is a local Windows application. It has no Chunes account, advertising, analytics, crash-reporting service, or telemetry endpoint. Chunes does process music metadata and makes the network requests described below so it can provide Discord presence, optional artwork, and optional updates. ## Data processed locally Chunes reads the following data from Windows Global System Media Transport Controls: - track title and artist - playback state, position, and duration - the source application's identifier The Chune ID browser extension sends Chunes an `application/json` report over the loopback interface at `127.0.0.1:52846`. That report contains the extension's master enabled state, the SoundCloud, YouTube Music, and Apple Music enabled states, and the host and title of reported audible tabs. Protocol 4 and 5 reports can also carry the current page Media Session title, artist, and a provider-hosted artwork URL for the supported audible tab. YouTube Music reports can additionally contain the watch page's 11-character public video ID. Apple Music reports carry bounds-checked MusicKit timing. Protocol 5 reports can carry the address of the reported audible tab itself, which Chunes accepts only when it is an `https` address on that same tab's host. The report does not contain general browsing history, page body contents, cookies, account credentials, or the addresses of any other tab. Loopback reports are held in memory and expire after 90 seconds. Chunes stores these items on the PC: - `%LOCALAPPDATA%\Chunes\chunes.log` and one rotated `.old` log, which can contain track titles, artists, source application identifiers, reported audible hosts, and operational errors - downloaded update installers under `%LOCALAPPDATA%\Chunes\Updates` - optional `config.json` next to the executable - checkable settings under `HKEY_CURRENT_USER\Software\Chunes` - a `HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run` entry only if the user selects **Start with Windows** Current track state, browser report state, artwork results, and artwork cache entries are otherwise held only in memory for the life of the process. Chunes does not operate a server reachable from other computers; the extension listener binds only to the local loopback address. ## Discord To perform its primary function, Chunes sends the current track title, artist, playback timing, detected service label, and an optional artwork URL to the locally installed Discord desktop client through Discord's local Rich Presence IPC interface. Discord decides how that activity is processed and displayed. Discord's privacy policy applies: https://discord.com/privacy When **Show "Play on..." button** is checked, Chunes also sends a link that opens the current track on its own service. That link is the reported tab's own address when Chune ID supplied one, and otherwise a link Chunes builds from the public video ID, the Apple Search result, or a search for the track title and artist. When **Show "Get Chunes" button** is checked, Chunes sends a second link to the Chune ID listing on the Chrome Web Store. Both buttons appear on the Discord profile for anyone who views it, and both are stopped by unchecking the matching tray setting. To stop this transfer for supported browser services, turn off the Chune ID master switch or the relevant service switch. To stop all Discord presence, quit Chunes from its tray menu and turn off **Start with Windows** if enabled. ## Online album artwork When **Look up online album art** is checked, Chunes uses the identified service to find artwork: - For SoundCloud, YouTube Music, and Apple Music tabs, Chunes uses the current page's provider-hosted artwork URL sent locally by Chune ID. It makes no provider lookup. - For Apple Music without a fresh MusicKit artwork URL, and for media played by a desktop application rather than a browser, Chunes may send the current track title and artist to Apple's public iTunes Search API (itunes.apple.com/search, keyless). This request necessarily exposes the user's IP address and a generic desktop browser user-agent to Apple and its infrastructure. Chunes does not send account cookies or credentials. When a result is found, Chunes gives Discord the resulting provider-hosted artwork URL; Discord may then retrieve that image. Apple's privacy policy applies to artwork lookups: https://www.apple.com/legal/privacy/ Clear **Look up online album art** in the tray menu to stop all artwork lookup requests and all use of provider artwork URLs. The choice is stored locally and takes effect for the current track on the next polling cycle. The installer shows a separate artwork checkbox that defaults to on, and preserves an existing opt-out during upgrades. ## GitHub updates When **Automatically check for updates** is checked, Chunes contacts the public GitHub Releases API shortly after startup. A manual **Check for updates now** does the same. The request contains the installed Chunes version in its user-agent and necessarily exposes the user's IP address to GitHub. If a newer published version exists, including an explicitly labeled unsigned manual release, Chunes opens that version's GitHub release page in the default browser. The browser then makes its normal requests to GitHub. Chunes does not currently download or launch an installer itself. GitHub's privacy statement applies: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement Automatic checks are optional. The installer shows a checkbox that defaults to on, and the choice is preserved during upgrades. Clear **Automatically check for updates** in the tray menu to stop startup checks. Chunes does not contact GitHub for updates when this option is off unless the user invokes the manual command. If the setting is turned off during the startup delay, Chunes checks it again and cancels the pending request before contacting GitHub. ## No Chunes service The Chunes project does not receive the media metadata, extension reports, settings, logs, artwork searches, or Discord presence described above. Chunes does not sell or share personal data with a Chunes-operated service because no such service is used by the application. ## Removing local data Uninstall Chunes from Windows **Installed apps** to remove the application and shortcut. The user may also delete `%LOCALAPPDATA%\Chunes`, remove `HKEY_CURRENT_USER\Software\Chunes`, and remove the Chunes value from the current user's Windows `Run` key to erase remaining logs, downloaded updates, settings, and autostart configuration. A user-created `config.json` may remain in the installation directory if it prevented that directory from becoming empty. ## Changes and questions Material privacy changes will be recorded in this repository. Questions can be opened at https://github.com/getchunes/chunes/issues without including private media history, logs, credentials, or other sensitive information.