Jam AlongPrivacy Policy
Last updated: 26 October 2026 (v1.5)
Jam Along ("we", "us") is a free sing- and play-along tool made by Yahav Vardi. This policy covers the website jam-along.vercel.app (including the /sing coach), the Jam Along browser extension (Chrome, Edge, Firefox, Opera) and the Jam Along Sing Android app. We collect as little as possible. We don't sell data, show ads or build profiles.
The short version
- Your microphone audio is processed on your device in real time. It is never recorded, saved or uploaded.
- Tab audio the extension analyses ("Listen & learn") also stays inside your browser.
- To find lyrics we send the song title and artist to lrclib.net. To estimate colours and key we query Apple's iTunes Search API.
- No account is needed. If you choose to connect Spotify on the website, the login tokens stay in secure, httpOnly cookies.
- Optional anonymous statistics: page views (Vercel Analytics) and your score per song. On by default for 16+, opt-in for 13–15, never for under-13s (kids mode).
What each part does
| Feature | Data | Where it goes |
|---|---|---|
| Sing coach (web, extension, Android) | Microphone audio | Analysed in memory on your device for pitch. Not stored or sent anywhere. |
| Lyrics | Song title, artist (and duration) | Sent to lrclib.net to fetch synced lyrics. |
| Song colours and key | Song title and artist | Sent to Apple's iTunes Search API. The returned artwork is only sampled for colours (not displayed); the 30-second preview is decoded in memory to estimate the key, then discarded. Neither is cached or shared. |
| Anonymous scores | Normalised song name, your score (0 to 100), speaker/headphones mode | Sent to our server to show how you compare. No name, account, device ID or audio. Your IP address is hashed (SHA-256) only for rate limiting and is not stored with the score. If our optional Upstash Redis database is configured, scores are kept there; otherwise they are not kept. |
| Share card / result link | Score, song title and artist, the shape of your voice line, colours | Created on your device. Only shared when you choose to share it. The result link contains this data in the URL itself; we keep no copy. |
| Learned tunes, chord edits, personal bests, settings | Melody/key estimates per song, preferences | Stored locally (browser localStorage / extension storage / app storage). Never uploaded. Clear them by clearing site data or uninstalling. |
| Website analytics | Page views, referrer, country, device type | Vercel Web Analytics: cookieless, no cross-site tracking. You can opt out below. |
| Spotify (website only, optional) | Spotify access/refresh tokens; your playlists and now-playing info | Tokens are kept in httpOnly, secure cookies and used only to call Spotify's API for you. We don't store your Spotify data on a server. Disconnect any time by signing out or in your Spotify account settings. |
| Android: notification access | Now-playing info from media apps: title, artist, position, playing state, album colours | Read on the phone to offer "Sing along?" and to sync lyrics. We never read your messages or other notifications. Title and artist are used for the lyric lookup above. |
| Android: display over other apps | None | Shows the floating robot bubble and coach window. Nothing on screen is read or captured. |
| Extension: tab audio and page info | Title/artist of the media on the page, tab audio | Used locally to show chords and to sync. Tab audio is never recorded or uploaded. |
| Feedback | Whatever you write | Only if you choose to send it, by email or GitHub. |
Your choices on this device
Saved on this device and browser only (in the Android app, open this page from the coach to change it there).
Children's privacy (COPPA) and teens
Jam Along is a mixed-audience app: it is made for a general audience and is not primarily directed at children, but everyone is welcome. On first use we show a neutral age screen (birth month and year). We keep only an age range on the device (under 13, 13–15, or 16+), never the birth date. Changing it later needs Settings (and a parent check for under-13s).
Kids mode (under 13) is designed so that no personal information is collected from children:
- No analytics: the Vercel Analytics script is not loaded at all.
- No score uploads: personal bests stay on the device only.
- No Spotify login, no public result links and no social sharing. A score picture can be saved on the device only after a parent check.
- Links that leave the app, settings and sharing are behind a parent check ("ask a parent").
- No ads, no accounts, no advertising ID, no location, no contact details.
- The microphone is processed on the device and never recorded or uploaded. To find lyrics, only the song title and artist are sent to lrclib.net, which identifies no one.
Before a child uses the app, a parent sees a notice explaining what the app does, what is processed on the device, what is not collected, and why each permission (microphone, and on Android notification access and display over other apps) is needed, and agrees behind the parent check. Because no personal information is collected in kids mode, we don't ask for verifiable parental consent. Parents can delete all data on the device at any time (Settings → Privacy & age → Delete all my data) and can contact us at yahavv42@gmail.com.
Teens (13–15): following the stricter EU rule for under-16s (GDPR Art. 8), anonymous usage statistics and score comparison are off by default and only turn on if the teen switches them on. 16 and over: they are on by default and can be turned off at any time.
Legal bases, retention and your rights
We process the minimal data above to provide the features you use (legitimate interest / performance of the service) and analytics with an opt-out. Anonymous scores contain no personal data. Local data stays under your control. If you are in the EU/UK or another region with data rights, you can ask us about any data relating to you, and we'll answer within 30 days.
Service providers
Vercel (hosting, analytics), lrclib.net (lyrics), Apple iTunes Search API (colours and key), Upstash (optional score database), Spotify (optional login). Each has its own privacy policy.
Changes and contact
We'll update this page when the app changes and change the date above. Questions: yahavv42@gmail.com.