Privacy
Short version: a party's worth of data, deleted when the party is.
What we store
- The name you type when you join a room. Nothing verifies it.
- Which songs you added and how you voted, so the queue can be ordered.
- A random token in your browser's session cookie so the room remembers which guest you are.
- Song titles, artists, artwork URLs and durations, cached from the music provider.
What we don't
No accounts, no passwords, no email addresses, no analytics, no advertising, no outside trackers. Guests never sign in to a music service, so we never see their listening history or anything else from it.
If you host with Spotify
Connecting Spotify stores an access token and a refresh token for that room, encrypted at rest. They are used only to read what's playing and to control playback on the device you pick. Disconnecting from host settings deletes them immediately, and ending the room deletes them along with everything else.
Cached provider data
Search results are cached so the same song doesn't get looked up twice. YouTube data is refreshed or deleted within 30 days, as their developer policies require.