Privacy Policy

Zoff is a free shared-music-room service operated by its developer. Questions, privacy requests, and deletion requests can be sent to privacy@zoff.me.

Zoff processes the information needed to run a listening room:

• Room names, settings, queue entries, votes, playback state, and optional participant nicknames.
• Search terms and playlist-generation prompts that users submit.
• A pseudonymous session identifier stored in a cookie so a user can participate in a room and retain room permissions.
• Theme preferences stored in a cookie on the user's device.
• IP address, user agent, request timing, and application logs used for security, abuse prevention, rate limiting, reliability, and debugging.
• Aggregated, privacy-focused usage measurements collected through Zoff's self-hosted Plausible Analytics installation. Zoff does not use this analytics data for targeted advertising.

Room administrator passwords are optional. When provided, they are processed to authenticate room administration and are stored as password hashes rather than readable passwords.

Zoff connects to the music providers enabled for the service. Provider-specific processing and terms are described below only when that integration is available.

If a user asks Zoff to generate a playlist, the submitted prompt is sent to Google's Gemini API to produce song and artist suggestions. Zoff then checks suggested public music metadata with an enabled music provider. Users should not include personal, confidential, or sensitive information in a playlist prompt.

Google processes Gemini API data under its applicable terms and data practices. More information is available in the Google Privacy Policy and Gemini API Additional Terms.

Search caches expire automatically after three days. Playlist generation job records are retained for up to one day. Room and queue data remain available while the room exists and may be removed by room or service administrators. Security and operational logs are retained only as long as reasonably needed for reliability, troubleshooting, and abuse prevention.

A user may request deletion of data associated with their Zoff session by contacting privacy@zoff.me. Zoff may need information sufficient to identify the relevant session or room. Verified deletion requests are completed within seven days. Deleting data held by Zoff does not delete data held by YouTube, Google, or another music provider; provider data and permissions must be managed directly with that provider.

Zoff shares information only when needed to operate the service, including with hosting and infrastructure providers, analytics infrastructure, Google when Gemini playlist generation is requested, and the enabled music providers. Zoff does not sell personal information or use it for targeted advertising.

These providers may process information in countries outside the user's country of residence under their own terms and privacy practices.

Zoff uses reasonable technical and organizational measures intended to protect service data. No internet service can guarantee absolute security.

Depending on applicable law, users may have rights to request access, correction, deletion, restriction, portability, or objection to the processing of their personal information. Requests can be sent to privacy@zoff.me.

This policy may be updated as Zoff changes. Material changes will be reflected by updating the date shown at the top of this page.