Privacy Policy

When you create an account: a username, a stage name, and a password. The password is stored only as a bcrypt hash — we cannot read it. We do not ask for your email address, phone number, real name, date of birth, or address.

When you use the Service:

• Chat messages you send, kept as a room's chat history
• Tips and ticket purchases, recorded as accounting entries in cents
• Your profile bio, tip goals, follows, karaoke songbook, and song requests — all optional and created by you
• Whether you went live on a given day, which powers scheduling and promoter bounties
• If you refer someone or were referred, that link between accounts

When you broadcast: your browser sends a small still frame of your own stream roughly every 15 seconds so your room can show a live preview on the home page. It replaces the previous frame and is deleted when you stop streaming long enough for it to go stale. Live audio and video pass through our streaming provider in real time and are not recorded by us.

When moderation acts on you: we log the message that triggered it, which rule it matched, the action taken, and a running count of violations. This is what makes appeals possible.

When you use the contact form: your name, email address, and message — this is the only place we collect an email address, and we use it solely to reply.

• No advertising, and no ad networks
• No analytics or tracking pixels
• No third-party cookies, and no cross-site tracking
• No selling or renting of personal information, ever
• No profile building or behavioural targeting
• We do not record your streams

We set exactly one cookie: a session cookie that keeps you signed in. It is httpOnly (JavaScript cannot read it), scoped to this site, and expires after seven days or when you sign out. Because we use no tracking cookies, there is nothing to consent to and no cookie banner to click.

To run the Service: authenticating you, showing rooms and chat, recording who earned what, enforcing the family-friendly rules, paying promoter commissions, and answering your messages. We do not use your information for any purpose unrelated to operating JamHubs.

We use a small number of infrastructure providers, who process data only to provide their service to us:

• Vercel — website hosting and delivery (United States)
• Neon — the database (United States)
• LiveKit — real-time audio and video transport for live rooms
• Microsoft 365 — the mailbox we use to reply to your messages

When real payments launch we will use a payment processor and will update this policy before doing so. We may also disclose information if legally required, or to protect the safety of users.

Account data is kept while your account exists. Chat history stays with the room it belongs to. Financial records are retained as long as required for accounting and tax purposes, even after an account closes. Moderation logs are kept so enforcement can be reviewed and appealed. Live preview frames are replaced continuously and are not archived.

You can ask us to show you the data we hold about you, correct it, or delete your account and personal data. Email admin@jamhubs.com or use the contact form. We will respond within 30 days.

Depending on where you live — for example the EEA, the UK, or California — you may have additional rights including data portability, objecting to processing, and non-discrimination for exercising your rights. We honour these requests regardless of where you live. We do not sell personal information, so there is nothing to opt out of.

Some records survive deletion where the law requires it: financial entries needed for accounting, and moderation records where an account was banned for safety reasons.

The Service is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, contact admin@jamhubs.com and we will remove it.

Passwords are stored as bcrypt hashes. All traffic is encrypted with HTTPS. Credentials for our infrastructure are held in encrypted storage, never in our source code. Access to production data is limited to those who operate the Service.

No system is perfectly secure. Because we never collect payment card details, email addresses at signup, or government identifiers, the amount of sensitive information at risk is deliberately small.

JamHubs operates from the United States, and our providers store data there. If you use the Service from elsewhere, your information is transferred to and processed in the United States.

If we change this policy we will post the update with a new effective date, and we will tell you before making a material change to how we use your information. Questions: admin@jamhubs.com.