Privacy notice
Last updated 26 October 2026.
JukeWave is operated by 20 Arches. We use personal information to run the jukebox service, protect accounts and rooms, and process purchases. This notice explains what we collect, why, who receives it, and how to exercise your privacy rights.
Who is responsible and how to contact us
20 Arches is responsible for personal information processed through JukeWave. Contact us at contact@20arches.com for privacy questions, access or correction requests, deletion requests, or complaints.
Information we use
- Room guests: a random browser identifier, chosen room name, votes, song requests, and room activity. You can join and vote without creating an account. If you sign in, room activity may be associated with your account.
- Accounts: email address, password hash, display name, account type, profile image, theme and colour choices, default room, favourites, and account activity.
- Points and Pro: point balances and transaction history, Pro access dates and settings, and weekly veto records (account, week, room and track) used to enforce the one-veto limit and investigate misuse. Bar staff can grant Pro for a stated period and moderate veto priority.
- Venue accounts: room settings, playlists, blocked songs or names, connected music service credentials, and room play history.
- Payments: Stripe checkout identifiers, plan, amount, points applied, and payment status. Stripe collects and processes card details; JukeWave does not store full card numbers.
- Location: if you allow location access, your device sends coordinates to find nearby rooms or check a venue's distance rule. Guest coordinates are used for that request and are not saved by JukeWave.
- Technical information: service and security logs handled by our hosting provider, such as request and device information needed to deliver and protect the service.
Why we use it
We use account and room information to provide the service you request; authenticate accounts; keep votes, points and Pro access working; process purchases; respond to support requests; and prevent fraud, abuse and security problems. We use location only when you ask to find or enter rooms that use distance checks.
Our usual legal grounds are performing our agreement with you, meeting legal obligations, pursuing legitimate interests in operating and protecting the service, and your device-level permission for location. Where we rely on consent, you can withdraw it through your device settings or by contacting us; withdrawal does not affect earlier processing.
Information stored on your device
JukeWave uses an essential, HTTP-only session cookie to keep you signed in. The browser also stores service preferences such as your guest identifier, chosen name, theme and recent room; temporary room access codes and sign-in handshakes are kept in session storage. These support features you request and are not used for advertising or cross-site tracking. You can clear them in your browser, though some features may then need to be set up again. The app's service worker caches app files for offline loading; it does not cache API responses.
Who receives information
- Cloudflare hosts the app, database, and email delivery infrastructure.
- Stripe handles secure card checkout and payment status.
- Spotify receives requests needed to search or play music when a venue connects Spotify. Spotify's own privacy notice applies to its processing.
- Other room guests and venue staff can see the name and song choices you share in a room. Venue staff control their room and can remove songs, skip playback, or block content.
We do not sell personal information or use it for targeted advertising. These providers may process information in other countries under their own terms and safeguards. See the Stripe Privacy Policy, Spotify Privacy Policy, and Cloudflare Privacy Policy.
How long we keep information
Account information is kept while your account is active. If you delete your account, we remove account access and associated profile information, favourites, playlists and owned rooms. Transaction and security records may be retained where needed for accounting, legal claims, fraud prevention or service integrity. Room play history remains while the room record is kept; closing a room does not itself erase its history. Guest identifiers and room records are kept only as needed to operate the room and its history. We review retention when these purposes end.
Your choices and rights
You can edit profile information in Settings, clear information stored by your browser, and delete your account from your profile. Depending on the circumstances, you may also ask us to access, correct, erase, restrict or provide your information, or object to processing based on legitimate interests. Contact us at the address above. We may need to verify your identity before acting.
You can complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the chance to address your concern first.