Back to Social Queue

Privacy Policy

Last updated: February 23, 2026

What is Social Queue?

Social Queue is a collaborative music request system for live events. DJs create events, and guests scan a QR code to request songs, share photos, and interact with the live queue. No app download or guest account is required.

Data Processing Roles

When a DJ creates an event and collects guest data, the DJ acts as the data controller— they determine the purposes and means of processing guest data at their event.

Social Queue acts as the data processor, processing guest data on behalf of the DJ to operate the event. We process data only as necessary to provide the Service and as instructed by the DJ. For full terms, see our Terms of Service.

Information We Collect

Event Guests

When you join an event as a guest, we collect:

  • Display name— chosen by you, shown to the DJ and on the public display
  • Email address(optional) — only if you choose to provide it, used for post-event communication from the DJ
  • Phone number(optional) — accepted by our system but not currently collected through the guest interface
  • IP address— used for rate limiting and abuse prevention, never displayed publicly
  • Device fingerprint— a hash of basic browser properties (screen size, timezone, language), used for session recovery if you lose your connection and for device blocking to prevent abuse. This is not a tracking identifier and cannot identify you personally.
  • Photos and avatars— if you choose to upload them. Photos may be displayed on the event screen and in the post-event gallery.
  • Song requests— the songs you request during an event

DJ / Admin Accounts

When you register as a DJ, we collect:

  • Name and email address— for account authentication and transactional emails (login codes, verification, password reset)
  • Password— stored as a one-way hash (Argon2id), never in plain text
  • Spotify connection— OAuth tokens for your Spotify account, used to display now-playing information, search tracks, and manage playlists. We do not access your Spotify data beyond these purposes.

How We Use Your Information

  • To operate the music request system during live events
  • To authenticate DJ accounts and send transactional emails (login codes, email verification, password resets, post-event summaries)
  • To prevent abuse (rate limiting, device blocking, content moderation)
  • To recover your session if you lose your connection during an event

We do not sell, rent, or share your personal information with third parties. We do not send marketing emails. All emails are transactional and triggered directly by your actions.

Content Moderation

Song requests and uploaded photos may be automatically screened for inappropriate content using AI analysis. This processing happens on our own servers and no content is sent to third-party AI services. The DJ has final approval over all content displayed at their event.

Data Storage and Retention

  • All data is stored on our own servers (not shared cloud databases)
  • Guest session data is tied to individual events and can be deleted by the DJ at any time
  • Guest data is automatically deleted 90 days after an event ends — this includes sessions, song requests, reactions, queue entries, and photos
  • DJ accounts and their associated data can be deleted upon request
  • Uploaded photos are stored on our file server and can be removed by the DJ or upon request
  • Guests can delete their own data at any time using the “Delete My Data” option in their guest profile

Cookies & Device Identifiers

We use a small number of cookies strictly for functionality — admin authentication sessions, two-factor authentication state, and trusted device recognition. We do not use tracking cookies, analytics cookies, or any third-party cookie services.

For guest sessions, we use localStorage and a device fingerprint (a hash of basic browser properties) for session persistence and abuse prevention. This fingerprint is not a cross-site tracking identifier.

Visitors in the European Union will see a consent banner before any cookies or device identifiers are stored.

Third-Party Services

  • Spotify— DJs connect their Spotify account to display now-playing information, search tracks, and manage playlists. Spotify AB is a third-party beneficiary of our Terms of Service. Governed by Spotify's Privacy Policy
  • Amazon SES— used to deliver transactional emails (login codes, verification links, password resets)
  • Cloudflare— DNS and CDN services

Your Rights

GDPR (European Union)

If you are in the EU/EEA, you have the right to:

  • Access— request a copy of the personal data we hold about you
  • Rectification— request correction of inaccurate data
  • Erasure— request deletion of your data (“right to be forgotten”)
  • Portability— receive your data in a structured, machine-readable format
  • Object— object to processing of your data
  • Restrict processing— request limited processing of your data

CCPA (California)

If you are a California resident, you have the right to:

  • Know— what personal information we collect and how it's used
  • Delete— request deletion of your personal information
  • Opt-out of sale— we do not sell personal information, so this right is satisfied by default

Guests can self-delete their data using the “Delete My Data” option in their profile. DJs can delete guest sessions and event data directly from the admin panel. For any other requests, contact us at the address below.

Music Licensing, Disclaimers & Terms

For information about music licensing responsibilities, content disclaimers, limitation of liability, and other legal terms, please see our Terms of Service.

Contact

Questions about this policy? Reach out at [email protected]