Last updated: September 23, 2026
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this privacy policy.
The controller responsible for data processing on this website is:
Leon Steiert
Oberriederstraße 29
79117 Freiburg im Breisgau
Email: leonsteiert@outlook.de
You can log in with Spotify. We ask only for your public profile: display name and profile image, so the party can see who is in the room and who wished which song. We do not request the email scope, your listening history, or your top artists. We do not store Spotify access tokens or refresh tokens, and we never receive your Spotify password.
WordPress still creates a local account so you stay logged in. That account’s email field is a placeholder on our server, not your inbox. If an earlier login stored your Spotify email address, the next login replaces it with that placeholder. Song wishes stay on that party’s queue, visible to everyone there. We do not build a social graph, we do not log profile clicks, and we do not keep a map of which parties you visited (Art. 6(1)(b) GDPR).
If you purchase a subscription, the payment is processed entirely by Stripe, Inc. We do not store your credit card information on our servers. Stripe collects identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: Browser type and browser version, operating system used, Referrer URL, Hostname of the accessing computer, Time of the server request, IP address. This data is not merged with other data sources (Art. 6(1)(f) GDPR).
Our website uses strictly necessary cookies (such as WordPress login sessions) to enable the core functionality of the service. We do not use marketing or tracking cookies.
You have the right to request information about your stored personal data, its origin, its recipients, and the purpose of its collection at no charge (Art. 15 GDPR). You also have the right to request that it be corrected (Art. 16 GDPR) or deleted (Art. 17 GDPR). You can contact us at any time using the address given above if you have further questions on the issue of privacy and data protection.