Privacy Policy

1.Who This Covers

Mr. DJ has two kinds of users, and we treat their data differently:

• Hosts — the DJ or organizer who signs in with a Spotify account, creates events, and approves requests.
• Guests — anyone who scans an event’s QR code or enters its join code to request a song.

2.Information We Collect

From hosts:

• Your Spotify user ID and display name, and your email address if Spotify shares it with us
• Spotify access and refresh tokens, used only to search the catalog and add tracks to your queue on your behalf
• The events you create: event name, join code, content and rate-limit settings, and when the event started and ended
• Your branding preference for the monitor and guest pages

From guests:

• A random identifier stored in a signed browser cookie, so we can recognize your device within an event
• A one-way hash (SHA-256) built from your browser type, browser language, and IP address combined with a secret value. This hash lets us enforce per-guest request limits and blocks even if a cookie is cleared. It cannot be reversed to reveal your IP address, and we do not store your IP address in our database. (Our web server logs, described below, are the one exception.)
• The name and optional note you choose to type with a request
• The songs you request, their status (pending, approved, played, or rejected), and timestamps

From everyone:

• Our web server keeps standard, short-lived access logs to keep the service running and to detect abuse. These logs contain the IP address, browser type, and page requested for each visit. They are rotated daily and deleted automatically after 14 days, are never linked to your requests or guest profile, and are not used for any other purpose.

3.Information We Do NOT Collect

• A Spotify account or any login from guests
• Precise location, contacts, photos, or files
• Advertising identifiers, or any data for ad targeting
• Third-party analytics or tracking pixels
• Payment card numbers — if paid plans are offered, payment is handled by a payment processor and card details never reach our servers

4.How We Use Information

• To run the event: show requests to the host, show approved tracks on the monitor and on guests’ phones, and add approved tracks to the host’s Spotify queue
• To apply the request limits and explicit-content settings the host chose for the event
• To let hosts block a guest who is abusing the request system
• To keep the service secure and to respond to support requests

Please note: the name a guest types with a request is shown to the host and may be displayed on the event monitor and on other guests’ screens. Use a nickname if you prefer.

5.Third-Party Services

• Spotify — hosts sign in through Spotify, song search uses the Spotify catalog, and approved tracks are added to the host’s Spotify queue. Spotify’s handling of your account is governed by the Spotify Privacy Policy. Album artwork and track details shown in Mr. DJ come from Spotify.
• Hosting — Mr. DJ runs on a server we rent from a hosting provider. The provider stores our data on our behalf and does not use it for its own purposes.

We do not sell personal information, and we do not share it with anyone else except as required by law.

6.Cookies

Mr. DJ uses only strictly necessary cookies: a signed session cookie for hosts who are signed in, and a signed guest cookie that identifies your device within an event. Neither is used for advertising or cross-site tracking.

7.Data Storage & Security

Data is stored in a database on our server and transmitted over HTTPS. Spotify tokens are used only server-side to act on the host’s behalf and are never exposed to guests. We limit access to the server to the people who operate the service.

8.Retention & Your Choices

• Hosts can end or close an event at any time. To delete an event’s history or your entire host account, email us at the address below and we will remove it within 30 days. You can also revoke Mr. DJ’s access to your Spotify account at any time from Spotify’s connected apps page.
• Guests can clear the Mr. DJ cookie by clearing site data in your browser. Your request history is tied to the event and is removed when the host’s event data is deleted. You may also email us to ask that requests you made be removed; include the event join code so we can find them.

9.Children’s Privacy

Mr. DJ is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

10.Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Mr. DJ after changes constitutes acceptance of the updated policy.

11.Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at hello@oeoeo.me.