Privacy Notice

Last updated: August 10, 2026

This Privacy Notice explains how Bug Out Software Solutions LLC trading as DJ Queue Play My Song ("we", "us", "our"), collects, uses, and shares personal data when you use our Service. We act as the data controller of that personal data.

1. Data We Collect

Account data: email address, login credentials, DJ display name.
Session data: event names, session codes, socials and custom links you configure, uploaded logos and theme settings.
Guest submissions: song requests, optional guest name (up to 32 characters), votes.
Support communications: any messages you send us.
Join-page visit measurement: when a QR code or join link is opened, we record the session, whether the visit came from a QR code or a shared link, a coarse country derived from the network request, the device platform (e.g. iOS, Android) and browser family, and a timestamp. This measurement is cookieless: we set and read no cookies, use no local storage or cache-based tracking tokens, and store no IP address, precise location, or device identifier. These records cannot be linked to you or to any other visit, and are deleted after 90 days.
Session code measurement: for every session code that is opened we also record the code itself, how it was opened (scanned from a QR code, followed from a shared link, or typed into the join screen), and the outcome (live, paused, expired, retired, or no such code), together with the same coarse country, platform and browser family described above. Session codes identify an event, not a person. These aggregate records contain no cookies, IP addresses or device identifiers, cannot be linked across visits, and are deleted after 90 days.
Session lifecycle records: we log when a DJ session is created, paused, resumed, deleted, or its code retired, along with the account plan at that moment. These records relate to the DJ account, not to guests, and are deleted after 12 months.
Usage & device data: IP address, browser and device identifiers, log data, and basic telemetry needed to operate the Service.

2. How We Use Data

To create and maintain your account and deliver the Service (contract performance).
To operate real-time queues, requests, and voting features (contract performance).
To secure the Service, prevent fraud, and enforce our Terms (legitimate interests).
To provide customer support (legitimate interests / contract).
To comply with legal obligations (legal obligation).
To send transactional emails; marketing emails only with your consent.

3. Who We Share Data With

Paddle — our Merchant of Record, which handles payments, subscription management, tax compliance, invoicing, and related customer service.
Hosting & infrastructure providers — for application hosting, database, storage, and analytics needed to run the Service.
Apple (iTunes Search API) — song metadata is retrieved from Apple's public music catalog to power search; song requests may reference iTunes track identifiers. Searches are proxied through our servers, so your device does not contact Apple directly.
Professional advisers — legal and accounting advisers where necessary.
Authorities — where required by law or to protect our rights.

4. Data Retention

We keep personal data only for as long as needed for the purposes described above, to comply with legal obligations, or to resolve disputes. Account data is retained while your account is active; session and request data is retained while the associated session exists. When no longer needed, data is deleted or anonymized.

5. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise these rights, contact us through the support channel in your account dashboard. If you are in the UK or EEA you also have the right to lodge a complaint with your local supervisory authority; we will respond to rights requests within one month.

California residents (CCPA/CPRA): you may request access to, deletion of, or correction of the personal information we hold about you, and request details of the categories collected and disclosed. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for inferring characteristics. We will not discriminate against you for exercising these rights. Requests can be made through the same support channel.

6. International Transfers

Our providers may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and role-based permissions — to protect personal data. No method of transmission or storage is 100% secure.

8. Cookies and Similar Technologies

We use strictly necessary cookies and local storage to keep you signed in, to remember preferences (such as your last DJ name and language), and to prevent duplicate votes on song requests. We do not use advertising or cross-site tracking cookies, and we do not use fingerprinting or cache-based tracking tokens.

Our QR and join-link measurement is cookieless: it sets and reads no cookies, writes nothing to your browser storage, and stores no identifier that could link visits together. Because it stores only aggregate, non-identifying information, it falls outside the consent requirement of the ePrivacy Directive (and equivalent UK rules) for storing or accessing information on your device.

9. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children.

10. Changes

We may update this Privacy Notice. Material changes will be highlighted on this page.

11. Contact

For privacy questions or requests, please contact us through the support channel available in your account dashboard.

See also our Terms & Conditions and Refund Policy.