Privacy

JOOK uses the minimum data needed to run shared music sessions. Guest display names and anonymous guest identifiers may be stored with queue entries. Spotify account credentials are stored server-side and are never intended to be exposed to guests.

Spotify

JOOK uses Spotify APIs to search for tracks and control playback for the linked host account. Access and refresh tokens are held in the backend database and accessed only by server-side code.

Session data

Room and queue data is stored in Supabase. Room codes are designed for temporary shared sessions and should not be treated as passwords.