Privacy Policy

Overview

Orpheus is a music player for your SoundCloud account, available on iPhone, iPad, Mac, Apple Vision Pro and Apple TV. This policy explains what Orpheus stores, what leaves your device, and who can access it.

The short version: Chandelier 647 collects nothing. No analytics, no advertising, no third-party SDKs, and no servers holding records about you. A few optional features connect to other services — each is off until you turn it on, and each is described below.

Orpheus is developed by Chandelier 647 (2767200 Ontario Inc.). It is an independent app and is not affiliated with, endorsed by, or sponsored by SoundCloud.

What Is Stored On Your Device

• Your SoundCloud sign-in token — in the system Keychain, readable only after you have unlocked your device at least once since restarting. Orpheus never sees or stores your SoundCloud password.
• Your Last.fm session key, if you connect Last.fm — also in the Keychain, also never your password.
• Settings — whether you have seen the welcome screens, your Safari link preferences, and whether scrobbling and Spotlight are on.
• A short list of recently played tracks and their artwork, so the widgets can draw without a network request. Four tracks, replaced as you listen.

All of it is removed when you delete the app. Artwork and audio you play are cached temporarily by the operating system, the same way any app's downloads are — that cache is managed by iOS, iPadOS, macOS, tvOS or visionOS, not by Orpheus.

What Leaves Your Device

SoundCloud

Orpheus talks directly to SoundCloud's API to fetch your likes, playlists, search results and audio. These requests carry your sign-in token so SoundCloud knows who is asking. What SoundCloud does with that information is governed by SoundCloud's own privacy policy, not this one.

When you sign in, you do so on soundcloud.com in a secure window provided by Apple. Your username and password are entered there and are never visible to Orpheus.

The Sign-In Service

Completing a sign-in requires a credential that cannot safely be stored inside an app. Orpheus therefore routes only the sign-in exchange through a small service operated by Chandelier 647 on Cloudflare Workers.

That service forwards the exchange to SoundCloud and passes the response straight back. It does not store your tokens, your account details, or anything else about you. Its logs record only whether a request succeeded or failed — never the contents of a request or response.

The one exception is signing in on Apple TV, described below.

Last.fm — off by default

If you connect a Last.fm account, Orpheus sends what you listen to — track title, artist, and when you played it — to Last.fm, so it appears on your profile. This is the point of the feature, and it is the one place Orpheus sends a record of your listening anywhere.

You connect on last.fm in a secure window provided by Apple; your Last.fm password is never visible to Orpheus. What Last.fm does with scrobbles is governed by Last.fm's own privacy policy. Plays that cannot be sent immediately are held on your device until they can be. Disconnecting Last.fm deletes the stored session key and discards anything still queued.

Sharing to Instagram — only when you tap it

Sharing a track to Instagram Stories places an image — the artwork, title, artist and the SoundCloud credit — on the system pasteboard and opens Instagram. The image is handed over on your device; it does not pass through any server of ours, and the pasteboard entry expires after five minutes. Orpheus never shares audio, and has no account or connection with Meta.

Links You Tap

Opening a track, artist or profile link sends you to your browser or another app. Those destinations have their own privacy policies.

Spotlight — on by default, switchable

Orpheus adds your likes and playlists to Spotlight, so searching your device can find them. This index is created by Apple on your device and is not shared with Chandelier 647 or anyone else. Entries expire after 30 days, are removed when you sign out, and stop being created the moment you turn the setting off.

The Safari Extension

The “Open in Orpheus” extension runs only on soundcloud.com pages, and only after you grant it permission in Safari. It reads the address of the page you are on to work out whether Orpheus can show it, and asks the app which kinds of link you want handled. It sends nothing anywhere — no page contents, no browsing history, no requests to any server.

Apple TV

The Apple TV app stores the same sign-in token in the same way, with three exceptions: there is no Instagram sharing, no Safari extension, and no Spotlight indexing on tvOS.

Signing in on a television uses a short code you enter on your phone or computer, because typing a password with a remote is miserable. While that sign-in is in progress, the service described above holds the resulting token briefly so the Apple TV can collect it — for a few minutes at most, tied to that one attempt, and deleted as soon as it is collected or the code expires. Nothing about you is kept afterwards.

What Orpheus Does Not Do

• No analytics, crash reporting, or usage measurement of any kind.
• No advertising, and no advertising identifier.
• No third-party SDKs. Orpheus is built entirely from Apple's own frameworks.
• No tracking, and no selling of data.
• No account with Chandelier 647, and no server holding user records.

Children

Orpheus is rated 13+ and requires a SoundCloud account, which SoundCloud's own terms restrict by age. It is not directed at children under 13, and it knowingly collects nothing from anyone.

Your Choices

• Sign out from the Profile screen. This deletes the stored token and clears the Spotlight index immediately.
• Disconnect Last.fm in Settings. This deletes the session key and any queued plays.
• Turn off Spotlight in Settings, which removes what has already been indexed.
• Revoke access from your SoundCloud or Last.fm account settings, which invalidates the token regardless of what is on your device.
• Delete the app to remove everything Orpheus has stored.

Because Chandelier 647 holds no data about you, there is nothing for us to export or erase on request. Data held by SoundCloud or Last.fm is subject to their policies and their account controls.

Changes To This Policy

If Orpheus ever begins collecting data — by adding analytics or crash reporting, for example — this policy will be updated and the App Store privacy information changed before that version is released. The date above reflects the most recent change.

Contact

Questions about this policy or about privacy in Orpheus — [email protected]