1. Overview

Queueoke ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use Queueoke ("the Service").

2. Information We Collect

• Account information: If you register, we collect your email address and a hashed password. Email is used for account authentication and transactional messages only.
• Session data: Song queue entries, singer names, and session settings you create while using the Service. Singer names are provided voluntarily by session guests.
• Payment information: If you purchase the Unlimited upgrade, your payment is processed entirely by Stripe. We do not store card numbers or billing details — only a Stripe customer reference and confirmation of purchase status.
• Usage data: Basic server logs (IP address, browser type, pages visited) for security and debugging purposes. We do not use third-party analytics trackers.

3. Cookies

We use a single token cookie to maintain your authenticated session. It is HTTP-only and is not accessible via JavaScript. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

4. How We Use Your Information

• To create and manage your account and sessions.
• To process your Unlimited upgrade payment through Stripe and send a purchase confirmation email via Resend.
• To respond to support requests sent to support@queueoke.com.
• To maintain the security and reliability of the Service.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Third-Party Services

• Supabase — our database and backend infrastructure provider.
• Stripe — payment processing. Subject to Stripe's own Privacy Policy.
• Resend — transactional email delivery.
• iTunes Search API (Apple) — used for song search. Your search query is sent to Apple's public search API. No personal data is included in these requests.

6. Data Retention

• Free sessions: Session and queue data may be automatically removed after the session expires (2 hours).
• Unlimited sessions: Session data is retained until you delete it or your account is inactive for 90 days.
• Account data: Retained until you request account deletion.

7. Your Rights

You have the right to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated data.

To exercise any of these rights, contact us at support@queueoke.com.

8. Security

We use industry-standard security practices including HTTPS encryption, HTTP-only JWT cookies, and hashed passwords (bcrypt). No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes your acceptance.

11. Contact

For questions or concerns about this Privacy Policy, contact us at support@queueoke.com.