Privacy policy

If you don't have an account

You can create, join and use lobbies without giving us any personal information.

• In your browser: a random session ID, your nickname, your volume, and your light/dark and chat window preferences are saved in your browser's local storage so they survive a refresh. Clearing your browser data removes them.
• In a lobby: your nickname, the queue, playback position, emoji reactions and the last 100 chat messages are kept in the server's memory only, and are shared with the other people in that lobby. They're never written to a database, and they're deleted when the lobby closes 15 minutes after everyone has left (or when the server restarts). The exception is a signed-in user's permanent room: its queue and play history (song details and who added each one, but not chat) are saved so they're still there next time.

If you create an account

Accounts are optional. If you create one, we store:

• Your email address, used to sign you in.
• Your password, stored only as a salted scrypt hash, never in readable form.
• Your nickname, @username, bio and, if you upload one, your profile photo. Photos are cropped and resized in your browser before upload, which removes location and other metadata.
• Your saved playlists, who you've invited to collaborate on them, and whether each one is shared by link.
• Your liked songs.
• Your friends and friend requests.
• Your listening history: each song you listened to for at least 15 seconds in a lobby while signed in, when, for how long, and the lobby code. It powers your stats, is visible only to you, and you can clear it at any time.
• Your permanent room, if you create one: its code, name, host setting and saved queue.
• A sign-in session, kept in a secure, httpOnly cookie. Only a hash of it is stored on our server, and it expires after 30 days.

Your nickname, @username and photo are visible to people in lobbies you join while signed in. Your profile page (at /u/ and your username) shows your name, photo, bio and any playlists you've chosen to share by link. Friends can also see which lobby you're listening in right now. Profiles and shared playlists aren't listed in search engines. You can change any of this, clear your history, or permanently delete your account and everything above, on your Account page.

Searches and links

When you paste a link or search, our server looks it up with YouTube or SoundCloud (and Google's YouTube search suggestions) to get titles and check that the track can be played. These requests come from our server, not your browser, and aren't linked to your identity. Search results are cached briefly to reduce repeat requests.

YouTube and SoundCloud players

Music plays through YouTube's and SoundCloud's official embedded players, which load directly from those services in your browser. They may set their own cookies and show their own ads, under the Google privacy policy and the SoundCloud privacy policy.

Security and abuse prevention

To limit abuse, our server briefly keeps IP addresses in memory for rate limiting (for example, how many lobbies or sign-in attempts come from one address). Like most websites, our web server also keeps standard access logs for troubleshooting.

What we don't do

• We don't sell or share your information with advertisers.
• We don't use analytics or tracking scripts.
• We don't record audio, and we don't keep a history of what lobbies played after they close, except for your own signed-in listening history and permanent rooms described above.

Changes

If this policy changes, we'll update it here and change the date at the top of the page.