Privacy notice

pico runs Queraoke and is the personal information controller for the data described here, under the Data Privacy Act of 2012 (Republic Act No. 10173).

When you join a room we collect:

• the nickname you choose;
• a random identifier stored in a cookie, so the service knows which songs are yours and keeps you in the room;
• the songs you add to the queue, and when you added them.

We do not ask for your real name, email address, phone number, location or payment details. We do not use analytics, advertising or tracking.

Guests never use a microphone or camera in the service. The host of a room may use their own phone's microphone so the lights on the TV can follow the music. In that case only two numbers (sound level and bass) are sent to the TV screen of the room, several times a second. No sound is recorded, sent or stored, and the numbers are not kept.

Like any website, our server sees your IP address and browser type. They are kept in technical logs for security, to prevent abuse. Short-lived counters in memory also use your IP address to slow down abuse. They are not kept permanently. A failed sign-in attempt to the admin area is also written to a security log together with the IP address (see How long we keep it).

We use only the cookies the service needs:

• a guest cookie that identifies your device in a room (30 days);
• a language cookie that remembers your language choice, if you make one (1 year);
• a sign-in cookie, used only by the Operator in the admin area.

We do not use advertising or analytics cookies.

To run rooms and queues, to keep the service secure and to stop abuse. We rely on your consent when you join a room, and on our legitimate interest in keeping the service safe.

• Rooms, with their guests' nicknames and queues, are deleted 3 days after the room ends.
• The guest cookie expires after 30 days. You can delete it at any time in your browser.
• Song details we remember (video identifier, title and channel) are refreshed or deleted within 30 days.
• Technical logs are kept for up to 14 days.
• Failed sign-in attempts to the admin area are recorded in a security log. The IP address in that record is removed after 30 days.
• The security log (which admin action happened, and when) is kept for up to 365 days.

Queraoke uses YouTube API Services. When you search for songs, picture thumbnails load from YouTube's servers, so Google receives your IP address. The YouTube player on the TV may set cookies and collect data as described in the Google Privacy Policy. The YouTube Terms of Service apply to the player. In the evening that the Operator runs for the public (the evening with tables) YouTube is not used, so nothing is sent to YouTube or Google because of the songs played there.

Traffic to this service passes through Cloudflare, which provides secure connections and, when turned on, a check that you are not a bot. See the Cloudflare Privacy Policy.

The service itself runs on a server owned by the Operator. We do not sell your data. We share it only with the providers above, or when the law requires it.

Connections are encrypted. Passwords are stored as one-way hashes, admin accounts use two-step login, secret keys are stored encrypted, and the server is protected by a firewall and regular security updates. No system is completely secure, but we work to protect your data.

Under the Data Privacy Act you have the right to:

• be informed about how your data is used;
• access your data;
• object to its use;
• have errors corrected;
• have your data erased or blocked;
• receive your data in a usable format;
• claim damages if you were harmed by a breach of your rights.

Because guests have no accounts, we can find your data only if you tell us the room code and your nickname. You may also complain to the National Privacy Commission.

Queraoke is not directed at children. A minor should use it only with the permission of a parent or guardian. Videos that YouTube marks as made for kids are not offered.

We may update this notice. The version date is shown at the top of this page.

For questions about your data or to use your rights:

Email: [email protected]