Privacy Policy

This policy explains what the Jukebox team collects when you use Jukebox (jukeboxdiary.com), why, and the choices you have. We don't sell your personal information.

What we collect

• Account details: your email, name, username, and a securely hashed password. If you sign in with Google or Apple, we receive your name, email and an account ID from them.
• What you log: ratings, reviews, diary entries, lists, likes, follows, comments, concerts, favourites and your bio.
• Sign-in records: for each signed-in session we store the IP address and browser/device type, to keep you signed in and spot suspicious logins.
• Imports: if you import from Last.fm we look up that public Last.fm profile. Spotify data exports are read in your browser; only the artist and title of items to match are sent to us.
• On your device: Jukebox saves your diary and settings in your browser's local storage so pages load instantly and you can use it without an account.

How we use it

• To run Jukebox: show your profile and activity, sync your data across devices, and power social features.
• To send account emails, like email confirmation and password resets. We don't send marketing email.
• To keep the service secure and fix problems.

What's public

Your username, name, bio, ratings, reviews, lists, diary and comments can be seen by anyone, including people without an account. Your email and sign-in records are never shown publicly.

Who we share it with

We use these providers to run Jukebox. They process data only on our behalf:

• Vercel (hosting and anonymous page-view stats) and Neon (database), in the United States.
• Resend, to send account emails.
• Apple: album artwork and song previews load directly from Apple's servers, which see your IP address like any website you visit.
• Google / Apple sign-in, only if you choose to use them.
• Ticketmaster: our server looks up artists' upcoming shows from Ticketmaster. That request contains only the artist's name, never anything about you.

We may also disclose information if the law requires it, or to protect people's safety or our rights.

Cookies and advertising

Jukebox itself only uses an essential cookie that keeps you signed in, plus local storage on your device. We count page views with Vercel Web Analytics, which uses no cookies and doesn't identify you or follow you across sites. There's no advertising tracking on our pages. If we add advertising, we'll update this policy first and ask for your consent where the law requires it.

Some links are paid links, such as “Tickets” (Ticketmaster, through the Impact affiliate network) and “Find it on vinyl or CD” (Amazon). They're labelled where they appear. If you click one, that site and its affiliate network may set cookies to record that you came from Jukebox, under their own privacy policies, and we may earn a commission if you buy something. We don't receive your name or payment details.

How long we keep it

We keep your data while your account exists. When you delete your account in Settings, your profile and everything you've logged are deleted from our database right away. Copies in backups are removed as those backups expire.

Your choices and rights

• Edit your profile and content at any time, or delete your account in Settings.
• Email hello@jukeboxdiary.com to get a copy of your data, correct it, or ask us to delete it. Depending on where you live (for example California or the EU/UK), you may have further rights, and we'll honour them.

Children

Jukebox isn't for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, email hello@jukeboxdiary.com and we'll delete it.

Security

Connections are encrypted (HTTPS), passwords are hashed, and access to our systems is limited. No system is perfectly secure, so use a password you don't use elsewhere.

Changes

If we change this policy significantly, we'll tell you on the site or by email before the change takes effect.

Contact

Privacy questions or requests: hello@jukeboxdiary.com.