Privacy policy

This is a pre-launch draft, shared for transparency while tunejar is in beta and pending final legal review. We'll post the finalised policy before public launch. It explains, in plain terms, what personal data we handle and why.

Who we are

tunejar is a personal song-request and now-playing display service for home bars and private gatherings. It is operated by Paul Hulatt, an individual trader (entrepreneur individuel) established in France, trading as "tunejar" ("we", "us"). We are the data controller for the personal data described below.

You can reach us at privacy@tunejar.app. Our postal address and full company identification (SIRET, etc.) are on our legal notice page.

What we collect

Operators (people who run a jar)

• Your email address and a securely hashed password — or, if you sign in with Google, your Google account identifier and email (we never receive your Google password).
• Billing details are handled by Stripe. We store a Stripe customer reference and your plan status; we never see or store your card number.

Venues (each jar you create)

• The venue name, its short URL (slug) and its settings.
• The venue's own Spotify connection. The Spotify client secret is stored encrypted; we never see your Spotify password.
• Any logo image you upload for the display.

Requesters (guests who add songs)

• For a full account: an email address, a display name, whether your email is verified, and the songs you request.
• For anonymous requests (where an operator enables them): only a display name you type and a random cookie identifier used for rate-limiting.
• We do not store your IP address for tracking or profiling.

How & why we use it

We process personal data on these legal bases under the GDPR:

• To provide the service you asked for (Art. 6(1)(b) — contract): creating your account, running your venues, storing settings, and delivering requests to your queue.
• To keep the service secure and prevent abuse (Art. 6(1)(f) — legitimate interests): email verification, rate-limiting, and letting operators block a disruptive requester.
• To take payment (Art. 6(1)(b) — contract) and to keep accounting records (Art. 6(1)(c) — legal obligation).

We do not use your data for advertising, and we do not sell it.

Cookies

We use only strictly-necessary cookies to keep you signed in and to protect sign-in flows. We use no advertising or analytics cookies, so no cookie-consent banner is required.

Cookie	Purpose
jb_acct	Keeps an operator signed in to the dashboard.
jb_admin	Keeps a venue's control panel signed in.
jb_req	Keeps a requester signed in on the request page.
jb_guest	A random id used only to rate-limit anonymous requests.
jb_state, jb_gstate, jb_gnext	Short-lived security cookies that protect the Spotify and Google sign-in flows.

Who we share it with

We use a small number of trusted providers (sub-processors) to run the service. A requester's email is never shared with venues — operators only ever see a display name.

Provider	What they do
Cloudflare	Hosting, database and file storage (EU region).
Stripe	Payment processing and subscription billing.
Amazon SES	Sending verification and account emails.
Google	Optional "Sign in with Google" (identity only — we store no Google tokens).
Spotify	Playback control via your venue's own Spotify app, under your own account.

We may also disclose data where we are legally required to, or to protect our rights or the safety of others.

International transfers

Your core data is stored on Cloudflare's EU region. Some providers (for example Stripe, Amazon SES and Google) may process data outside the EEA. Where they do, transfers are covered by an adequacy decision or the European Commission's Standard Contractual Clauses.

How long we keep it

• Request history is automatically deleted after 180 days.
• Account, venue and requester data is kept while your account is active, and is deleted when you delete it (see "Your rights").
• Billing and accounting records are kept for as long as tax and accounting law requires (in France, generally up to 10 years).

Your rights

Under the GDPR you have the right to access, correct, export (portability), delete, restrict, and object to our processing of your data, and to withdraw consent where we rely on it. You can export or permanently delete your account and all its data at any time from your dashboard (operators) or the request page (requesters), or by emailing us.

If you believe we've handled your data improperly, you can lodge a complaint with the French supervisory authority, the CNIL, or with the authority in your own country.

Security

Passwords are stored hashed (PBKDF2), your venue's Spotify secret is encrypted at rest (AES-GCM), and all traffic runs over HTTPS. No system is perfectly secure, but we design to keep the data we hold to a minimum.

Children

tunejar is intended for adults. You must be 18 or older to create an account, and the service is not directed to children.

Changes

We may update this policy as the service evolves. We'll change the "last updated" date above and, for material changes, let account holders know.

Contact

Questions or requests: privacy@tunejar.app. Our postal address is on our legal notice page.