cueVJ legal
Privacy Policy
The short version. cueVJ runs in your browser. Your microphone is analysed live to drive the visuals and is never recorded, stored or sent anywhere. We keep as little about you as we can: an email address if you join the beta, the cue sheets you build, a record of the packs you hold and buy, and a short-lived clock for visitors who have not signed up. We do not sell personal information, and we do not use advertising or tracking cookies.
Who we are
cueVJ is operated by Sindro LLC, a California limited liability company. You can reach us at ronny@cuevj.com. When this policy says "we", it means that operator. "cueVJ" means the site at cuevj.com, the playground, Studio, and the functions behind them.
The microphone
This is the part people ask about first, so it comes first.
When you open the playground we ask for your microphone. It starts only when you say yes. Your browser then analyses the sound live, on your device, and turns it into a handful of numbers (energy, bass, mid, treble, beat) that drive the visuals.
- Audio is never recorded.
- Audio is never stored, on your device or on ours.
- Audio is never transmitted to any server, ours or anyone else's.
- The numbers taken from it stay in the page and are thrown away every frame.
If you decline, the playground runs on an internal clock instead. You can change your mind later from the control bar or from your browser's site settings.
What we collect, and why
Email address. You give it to us when you join the beta or sign in. We use it to send your sign-in link or code, to tell you the day Studio opens for you, and, rarely, to tell you about cueVJ itself. Every email that is not a sign-in message says how to stop them. Sign-in is passwordless: we never ask for a password and never store one.
Account record. Whether you are a member, a Studio member or blocked; when you joined, confirmed, were approved and were last seen; and whether you are an administrator. If an administrator acts on your account (approves it, grants you a pack), that action is written to an audit log with the date and who did it.
Cue sheets. If you build cue sheets in Studio we store them: the name, the ordered list of scenes, the palette and the background. They are private to you in the current version.
Packs and purchases. Which packs you hold, how you got them (a purchase, a trial, an access phrase, or a grant from us) and when they expire, if they do. For a purchase we also keep the pack, the amount, the date and Stripe's reference for the payment. We never see or store your card number. Stripe handles the payment page entirely.
Playground time for visitors. If you use the playground without signing in, we count the seconds you spend in it so we can offer a fixed amount of free time (five minutes at the moment) before asking you to join. The count is tied to an anonymous id in a cookie (see Cookies, below) and kept in whole seconds, per day. We do not record what you did during that time.
A hashed IP address, for 48 hours. As a backstop against clearing cookies to reset the free minutes, we also count time against a salted SHA-256 hash of your IP address. We do not store the address itself, the salt is a server secret, and the rows are deleted after 48 hours by a daily job. The budget on the IP side is deliberately generous, so a whole venue behind one address is never locked out.
Technical logs. Our hosting provider keeps short-lived logs of requests to our functions (the path, the result, any error). We read them only to fix problems.
Email you send us. If you write to ronny@cuevj.com we keep the conversation for as long as it is useful.
What we do not collect
- Passwords. There are none.
- Audio. Ever.
- Card numbers or bank details. Stripe sees those; we do not.
- Advertising profiles, cross-site tracking, or data bought from anyone.
- Precise location. We see the country a request came from, not where you are.
- Anything from children. See Age, below.
Cookies and browser storage
We set three cookies. All of them are first-party, HttpOnly (no script on the page can read them), Secure, and strictly needed to make the service work.
| Cookie | What it does | How long |
|---|---|---|
cv_anon | An anonymous id. It keeps the free-minutes clock honest and remembers that this device unlocked a pack with an access phrase. | One year |
cv_session | Your signed-in session. | Until you sign out or it expires |
cv_kiosk | Marks one specific device (a demo laptop, a screen at a show) as exempt from the free-minutes limit. Only set when someone uses a kiosk key we issued. | Until it expires or is cleared |
There are no advertising cookies, no tracking cookies and no third-party cookies. We do not show a cookie banner because we set nothing that needs consent.
The playground also uses your browser's session storage for two small things: whether you allowed the microphone in this tab (so a reload at a venue does not ask again), and which pack you have unlocked. Session storage lives on your device, is cleared when the tab closes, and is never sent to us.
Analytics
We use Vercel Web Analytics to count page views. It is cookieless: it sets no cookies, does not follow you across sites, and gives us aggregate numbers (page views, referrers, country, device type), not a profile of you. The counts in our own admin panel (sign-ups, minutes played, packs sold) come from our own database, not from a third party.
Fonts
Our pages load two typefaces from Google Fonts. When a page loads, your browser fetches the font files from Google, so Google receives your IP address and the usual browser details for that request. This is the only request a cueVJ page makes to a third party. Google's privacy policy describes what they do with it.
Why we are allowed to process it
Under GDPR-style laws every use needs a legal basis. Ours are:
- Performing our agreement with you: your account, your cue sheets, your packs, your purchases.
- Our legitimate interests: keeping the free-minutes clock, preventing abuse, security, fixing problems, and understanding in aggregate how the site is used. We have weighed these against your interests, and they are the minimum that works.
- Your consent: emails about cueVJ beyond the ones the service needs. You can withdraw it at any time.
- Legal obligations: keeping purchase records for tax and accounting.
How long we keep things
| What | How long |
|---|---|
| Email and account record | Until you delete your account or ask us to take you off the beta list |
| Cue sheets | Until you delete them, or your account |
| Pack entitlements | Purchases and grants: while your account exists. Trials and phrase unlocks: until they lapse, then pruned |
| Visitor time counts | Rows older than 48 hours are deleted daily |
| Hashed IP addresses | 48 hours |
| Purchase records | As long as tax and accounting law requires, then deleted |
| Admin audit log | While the account it concerns exists |
| Technical logs | A short rolling window set by our hosting provider |
Your rights
Wherever you live, you can ask us to:
- tell you what we hold about you (access);
- correct it;
- delete it;
- give it to you in a portable format (your cue sheets come out as JSON);
- stop using it for a particular purpose (objection or restriction);
- stop emailing you.
Email ronny@cuevj.com. We will confirm it is you by replying to the address on the account, and answer within a month. If you are in the EU or UK you can also complain to your data protection authority. We would rather you told us first.
Deleting your account removes your email address, account record, cue sheets and entitlements. We may keep purchase records for as long as accounting law requires, with as little personal detail in them as we can manage. Hashed IP counts age out on their normal 48-hour schedule.
California residents. We do not sell your personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of. You have the right to know what we collect (this page), to have it deleted, to have it corrected, and not to be treated differently for asking. Email the address above.
Security
Sign-in is passwordless, so there is no password of yours to leak. Cookies are HttpOnly and Secure. IP addresses are stored only as salted hashes. Access phrases for private packs are stored as scrypt hashes. Secrets live in the server environment, never in a page. Everything is served over HTTPS. No system is perfectly secure; if a breach affects you, we will tell you.
Age
cueVJ is for people aged 16 or over, or the age of digital consent where you live if that is higher. We do not knowingly collect data from anyone younger. If you believe a child has given us their email address, write to us and we will delete it.
Changes
When we change this policy we update the date at the top. If the change matters to you (new data, a new provider, a new purpose) and you have an account, we will email you before it takes effect.