Legal notice, app privacy policy, and website privacy policy for Juqed.
Note: Juqed is operated from Germany. The legal notice (Impressum) is required under German law (§ 5 DDG) and is provided in German below. The privacy policies follow the EU GDPR and are summarized in English here; the legally binding German version is available at juqed.com/de/rechtliches.
Privacy Policy – Juqed (Mac)
This policy applies to the macOS app Juqed. Privacy notes for Juqed Go (iPhone & iPad) are in the next section, since the technical processing differs (Apple Music instead of a local library, hosted service instead of local Wi-Fi).
The controller within the meaning of the GDPR for the processing of personal data within the app is the operator named in the Legal Notice.
2. Principle: Local data processing
Juqed is a macOS application that runs exclusively locally on the user's (host's) device. All communication between host and guests takes place within the local network (Wi-Fi/LAN). The operator of the app has no access at any time to the data processed by the app.
3. What data is processed?
On the host device (Mac) — by the app itself:
File paths, titles, artist, album, genre and duration of the audio files in the selected music folder
BPM values (analyzed automatically and stored locally)
Playlist entries with freely chosen guest display names
Votes on playlist entries
Playback history of the current session
Blacklist terms and fair-use settings
Legal basis: Processing this data is necessary to fulfill the user agreement and provide the app's functions (Art. 6 (1) (b) GDPR). For storing configuration data (blacklist, fair-use settings), processing is additionally based on the host's legitimate interest in a persistent, usable application (Art. 6 (1) (f) GDPR).
From guest devices (smartphone/browser):
A freely chosen display name (e.g. "Guest") — no real names required
Search queries within the music library
Song selection and votes
Legal basis: Processing of data entered by guests is based on the voluntary use of the app's functions and is necessary to provide the service (Art. 6 (1) (b) GDPR). The display name is freely chosen; real names are explicitly not required.
No email addresses, phone numbers, location data, IP addresses, device IDs or other personal data are collected or stored.
4. Data storage and retention
All data processed by the app is stored exclusively in a local SQLite database on the host's Mac. The database is located in the app's Application Support directory. When the music folder is changed, the database is cleaned automatically. Blacklist terms persist independently of the folder and are only deleted when the app is uninstalled. Guest devices store only the chosen display name and UI settings (dark mode) in the browser's Local Storage; this data remains on the guest's device and can be deleted there at any time.
5. Connection between host and guests
Communication between host and guests takes place via HTTP exclusively within the local network. Since the connection does not leave the local Wi-Fi, HTTPS is not used. Server-Sent Events (SSE) are used for real-time playlist updates. No data is transmitted over the internet in this process.
The app establishes internet connections in three cases only: for the optional Apple Music integration (Section 7a), for the optional usage statistics after consent (Section 6a), and for an update check of the bundled guest interface at app launch (HTTPS retrieval of a static file from juqed.com). This update check transmits no content or usage data; however, as with any web request, the host device's IP address appears in the juqed.com server log files (deleted after 14 days at the latest, see the website privacy policy, Section 3).
6. Cookies and tracking
The app itself sets no cookies and performs no tracking. The guest interface on the local network (Wi-Fi/LAN) uses only the browser's Local Storage for UI preferences (display name, theme, crossfade setting). This data is non-personal and does not leave the guest's device. An optional, consent-based transmission of anonymous usage statistics by the host device to the developer is described in Section 6a; no cookies are used here either.
Data collected (only after consent has been given):
A randomly generated event ID (UUID, no personal reference)
Start and end timestamp of the event
Country (locale region of the host, e.g. "DE")
Installed app version (e.g. "1.0.3")
Number of songs played from the local library
Number of songs played via Apple Music
Number of upvotes cast
Number of songs added by Auto-DJ
No cookies, no IP storage, no device IDs, no tracking pixels. The transmitted data contains no personal reference, cannot be linked to any user, and does not allow re-identification. Neither titles nor artists of played songs are transmitted — only counts.
Transmission and recipients: The transmission is encrypted via HTTPS POST. The sole recipient is the developer named in the Legal Notice. There is no transfer to third parties. The domain is hosted on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen); a data processing agreement under Art. 28 GDPR is in place.
Retention: Since the data is fully anonymous and cannot be assigned to any user, it is kept indefinitely for statistical analysis. Re-identification is technically impossible.
Withdrawing your consent: Open the app and go to Settings → Privacy. Disable the "Anonymous usage statistics" toggle there. Locally buffered data that has not yet been transmitted is deleted immediately upon withdrawal.
7. Apple as distributor — App Store and system services
Juqed is distributed through the Apple Mac App Store. In this context, Apple Inc. (One Apple Park Way, Cupertino, CA 95014, USA) processes data as an independent controller within the meaning of the GDPR. The operator of Juqed has no influence on this processing. Affected in particular are:
Purchase processing: Apple is Merchant of Record in the App Store. Payment data, Apple ID, purchase history and invoice data are processed exclusively by Apple and are subject to Apple's privacy policy.
Crash reports: If users have enabled "Diagnostics & Usage" on their device, macOS automatically transmits anonymized crash reports to Apple in the event of a crash. These reports are made available to the developer in aggregated, anonymized form via App Store Connect and are used only for bug fixing.
App updates: Checking for and delivering app updates happens exclusively through the App Store and thus through Apple's infrastructure.
Apple's own privacy provisions apply to data processing by Apple, available at apple.com/privacy.
7a. Optional Apple Music integration
Juqed offers optional integration with Apple Music via Apple's MusicKit framework. This feature is disabled by default and only becomes active when the host explicitly connects it in the app settings and macOS grants the corresponding permission.
When Apple Music integration is enabled, search queries to the Apple Music catalog are transmitted via Apple's MusicKit API. The data processed in this context (search queries, music selection, Apple ID assignment) is fully subject to Apple's own privacy policy. Juqed does not store or log any of this data — only the Apple Music song identifier (MusicItemID) is temporarily stored in the local database to enable playback in the playlist. This identifier contains no personal data.
Authorization can be revoked at any time in Juqed's settings under "Music sources". In addition, access can be fully revoked in macOS System Settings under Privacy & Security › Media & Apple Music.
8. App Store — Data categories (Privacy Nutrition Labels)
In line with Apple's App Store Connect requirements, the data categories collected are declared as follows:
Data collected by the developer: Only after the host's explicit consent (see Section 6a), anonymous usage data — number of songs played (local / Apple Music), number of upvotes, number of Auto-DJ additions, country (locale region), app version, and event start/end timestamp. Without consent, no data is transmitted to the developer.
Data used to track the user: None. The app contains no tracking, no advertising IDs, no cookies and no cross-device recognition.
Data linked to the user: None. All data processed locally remains on the host device and is not made available to the developer.
Data not linked to the user: The anonymous usage statistics described in Section 6a (only with consent).
9. User rights
Since Juqed in its default configuration does not collect personal data, and the operator at no point has access to the data processed locally in the app, the typical data subject rights under Art. 15–21 GDPR cannot, in practice, be exercised against the operator. The host can delete the local database at any time by changing the music folder or uninstalling the app. Guests can delete their browser's Local Storage themselves at any time. For data protection inquiries, you can reach the controller at the email address listed in the Legal Notice.
10. Changes
This privacy policy may be adjusted in case of changes to the app or the form of distribution. The current version is available at juqed.com/en/legal.
Privacy Policy – Juqed Go (iPhone & iPad)
As of: 10 July 2026 · This policy applies to the iOS and iPadOS app Juqed Go. It is intentionally written separately because the technical processing differs from Juqed (Mac).
The controller within the meaning of the GDPR for the processing of personal data within Juqed Go is the operator named in the Legal Notice.
2. Principle: hosted service, no local library
Juqed Go is an iOS / iPadOS application that uses Apple Music via Apple's official MusicKit framework. Unlike Juqed (Mac), Juqed Go does not process a local music library; playback streams directly from the Apple Music catalog. To allow host and guests to share an event across different networks (Wi-Fi, mobile data, mixed), the relay runs through a server in Germany operated by the developer (Hetzner Online GmbH, see Section 4).
3. What data is processed?
On the host device (iPhone / iPad) — by the app itself:
Apple Music song identifiers (MusicItemID) of tracks suggested by the host or guests
Cover, title, artist, album, and duration metadata returned by Apple's MusicKit API
Vote counts of queue entries
Playback history of the current session
Blacklist terms and fair-use settings (stored locally)
From the guest device (smartphone / browser):
A freely chosen display name (e.g. "Anna", "DJ Tom") — no real names required
Search queries within the Apple Music catalog
Song suggestions (MusicItemIDs) and voting actions
An anonymous browser token used for fair-use logic (no personal reference)
No email addresses, phone numbers, location data, IP addresses, or device IDs are collected. Apple ID data stays with Apple.
Legal basis: processing is necessary to provide the service (Art. 6(1)(b) GDPR). For persistent configuration data (blacklist, fair-use settings), the operator's legitimate interest in providing a usable application also applies (Art. 6(1)(f) GDPR).
4. Relay server (Hetzner, Germany)
To allow host and guests to share an event across different networks, voting and queue data is relayed through the operator's server. This server is hosted at Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany); a data processing agreement under Art. 28 GDPR is in place. Transmission between app, server, and guest browsers is encrypted via HTTPS.
Stored on the server: only the data required to operate the event: event ID, queue and history entries (MusicItemID plus the song's title, artist and genre — required to display the guest view), the suggesting guest's display name, vote counts, and event settings (e.g. blacklist terms). When the host ends an event, all event data is deleted immediately and completely. Events that are not explicitly ended are deleted automatically once the event validity expires (normally 7 days).
4a. Server log data when guests visit the event page
Unlike Juqed (Mac), where the guest interface is served only on the local Wi-Fi, the Juqed Go guest interface contacts the relay server over the public internet. When loading the guest URL and on every interaction (search, suggest, vote), server log data is generated by the Hetzner server, as is technically standard for any web service:
IP address of the requesting device
Date and time of the request
Requested URL or API endpoint
HTTP status code and amount of data transferred
User agent (browser and operating system identifier)
Referrer (previously requested page), if available
Purpose and legal basis: this processing is required to ensure technical operation, prevent abuse (e.g. DDoS, automated attacks), and analyze errors. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in a stable, secure service). No further analysis (e.g. profiling, personalized advertising) takes place.
Retention period: server logs are kept for a maximum of 14 days and then automatically deleted or anonymized. They are not combined with other data sources. IP addresses are not used for marketing and not shared with third parties.
Cookies and similar technologies: the guest interface sets no cookies. It uses only the browser's Local Storage for UI preferences (display name, theme) and an anonymous session token for fair-use detection. No tracking pixels, no advertising IDs, no cross-device recognition is used.
Event URLs are not guessable: every event URL contains a cryptographically random event ID. Without the specific URL (via QR code or shared by the host), an event cannot be discovered. There is no public list of running events.
5. Apple Music — processing by Apple
Playback uses Apple's official MusicKit framework. Accordingly, Apple Inc. (One Apple Park Way, Cupertino, CA 95014, USA) processes data — in particular search queries, playback actions, and the host's Apple ID linkage — as an independent controller within the meaning of the GDPR. The operator of Juqed Go has no influence over this processing. Apple's privacy policy applies and is available at apple.com/legal/privacy.
Juqed Go transmits to the relay server only the catalog data of suggested songs required to display the queue (MusicItemID, title, artist, genre — see Section 4). The host's Apple ID, listening history and other Apple Music account data are not transmitted to the relay server and not shared with third parties.
6. Guest browser: no cookies, no tracking
The guest web interface uses no cookies and no tracking. It uses only the browser's Local Storage for UI preferences (display name, theme) and an anonymous session token for fair-use detection. This data does not leave the guest device (other than the token, used solely to limit duplicate submissions) and can be deleted by the guest at any time via the browser's settings. The server-side anonymous reach statistics are described in Section 6a.
6a. Anonymous reach statistics (server-side)
To measure the overall usage of Juqed Go, the relay server periodically aggregates anonymous counters across all events:
total number of events (counted via the random event IDs, no personal reference)
country of the event (Apple Music storefront, e.g. "DE")
number of upvotes cast
number of songs suggested by guests
number of songs added by Auto-DJ
No cookies, no IP addresses, no device IDs, no names. The statistics consist exclusively of aggregate totals with no personal reference; neither song titles nor artists nor display names are included. Re-identification of individual hosts or guests is technically impossible. (The relay-server logs described in Section 4a are technically separate and are deleted after 14 days at the latest.)
Retention and use: The anonymous totals are kept indefinitely and published in aggregated form, among other places on juqed.com (e.g. "total events"). Since this is anonymous data with no personal reference, it does not constitute processing of personal data within the meaning of the GDPR; to the extent a personal reference were exceptionally present at the moment of collection, the processing is based on Art. 6 (1) (f) GDPR (legitimate interest in measuring the reach of the service).
For the optional "Juqed Gold" subscription, Apple handles the entire purchase (Merchant of Record); payment and account data remain with Apple. To link a Gold extension to an event and to prevent abuse, the app transmits the pseudonymous subscription transaction number (originalTransactionId) to the relay server. It is stored there together with the event and removed when the event is deleted (see Section 4). In addition, the server processes Apple-signed subscription status notifications (App Store Server Notifications) to detect expired or revoked subscriptions. The operator cannot derive the host's name, Apple ID or payment data from this. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).
7. App Store — Apple as distributor
Juqed Go is distributed via the Apple App Store for iOS and iPadOS. Apple Inc. acts as Merchant of Record and processes payment, Apple ID, and update data as an independent controller. Anonymized crash reports (if the user has enabled "Diagnostics & Usage") are made available via App Store Connect for the sole purpose of bug fixing.
8. App Store — data categories (Privacy Nutrition Labels)
In accordance with Apple's App Store Connect requirements, the collected data categories are declared as follows:
Data collected by the developer: only the event data required for operation on the relay server (Section 4; deleted when the host ends the event, at the latest when the event validity expires), technical server logs (Section 4a; 14 days), anonymous aggregated usage counters (Section 6a) and, with an active Gold subscription, the pseudonymous subscription transaction number (Section 6b).
Data used to track you: none. The app contains no tracking, no advertising IDs, no cookies and no cross-device recognition.
Data linked to you: none. The operator cannot link any of the processed data to a natural person; Apple ID and payment data remain entirely with Apple.
Data not linked to you: the anonymous counters of the reach statistics (Section 6a) and the operational event data (Section 4).
9. User rights
Since Juqed Go — apart from the data described in Section 4a (server logs) and Section 6b (subscription verification) — does not collect personal data and the operator at no point receives data that he can link to a natural person, the typical data subject rights under Art. 15–21 GDPR cannot, in practice, be exercised against the operator. The host can uninstall the app at any time or remove app data via "Settings → General → iPhone Storage → Juqed Go". Guests can delete their browser's Local Storage at any time. For data protection inquiries, contact the email address listed in the Legal Notice.
10. Changes
This privacy policy may be adjusted in case of changes to the app or the form of distribution. The current version is available at juqed.com/en/legal.
The controller within the meaning of the GDPR for this website is the operator named in the Legal Notice.
2. Principle
This website (juqed.com) is largely informational and static. No user accounts are created and no third-party content (fonts, CDNs, social media widgets) is embedded. Personal data is only processed if you contact us via the contact form or by email (see Section 5), or — with your explicit consent — if you enable analytics with Matomo (see Section 4). The following information is therefore limited to the technically unavoidable data processing involved in operating a web server, the consent-based analytics, and contact via the contact form or by email.
3. Hosting and server log files
This website is hosted on a Virtual Private Server (VPS) of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. In this context, Hetzner Online GmbH acts as a processor within the meaning of Art. 28 GDPR; a corresponding data processing agreement (DPA) is in place. Hetzner's privacy provisions are available at hetzner.com/legal/privacy-policy.
Each time the website is accessed, the web server automatically records what are known as server log files. These contain:
IP address of the requesting device
Date and time of access
Requested URL and, if applicable, the previously visited page (referrer)
Amount of data transferred and HTTP status code
Browser type and operating system (user agent)
This data is processed exclusively to ensure technical operation, troubleshoot errors, and defend against attacks. There is no merging with other data sources. Log files are deleted automatically after 14 days at the latest. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and uninterrupted server operation).
4. Reach measurement with Matomo (with consent, cookies)
Version of this consent statement: 2026-04-24
This website uses the web analytics service Matomo, self-hosted on our own server (juqed.com/matomo/). No data is shared with third parties. Use takes place exclusively after your active consent, which you can give via a consent banner the first time you visit the site. Without your consent, Matomo is not loaded and no related data is collected.
Legal basis: Art. 6 (1) (a) GDPR (consent) in conjunction with § 25 (1) TDDDG. You can revoke any consent given at any time, with effect for the future.
Data collected (after consent):
Pages visited and time spent
Date and time of access
Referrer URL
Browser, operating system, screen resolution
Truncated IP address
Clicks on outbound links and downloads
Cookies: Matomo stores the following cookies on your device after consent:
_pk_id.* — recognition cookie, retention period 13 months.
_pk_ses.* — session cookie, retention period 30 minutes.
Withdrawing your consent: Using the "Cookie settings" link in the footer of every page, you can reopen the banner at any time and change your decision. Upon withdrawal, the cookies set by Matomo are deleted immediately.
Proof of consent: Your decision in the consent banner (granted or denied) is logged for accountability purposes (Art. 5 (2), Art. 7 (1) GDPR). We store the time, the decision, the version of the consent text, the language, a random consent ID, a non-reversible hash of the IP address (derived with a daily-rotating random value) and a shortened browser identifier. Plain-text IP addresses are not stored. The logs are kept for three years in line with the standard limitation period (§§ 195, 199 German Civil Code) and then deleted.
Cookieless counting of App Store redirects: When the short links /get-juqed and /get-juqed-go (redirects to the App Store) are accessed, the click is counted server-side in our self-hosted Matomo — independently of consent, since no cookies are set and no information on your device is accessed (§ 25 TDDDG is not affected). Only the requested URL including any campaign parameters, the referrer and the browser identifier (user agent) are processed; your IP address is not passed to Matomo. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in measuring the effectiveness of our App Store links).
5. Contact (contact form and email)
A contact form is available on the Contact & Legal Notice page. When you use it, we process the data you enter — name, email address, chosen topic and your message — exclusively to handle your inquiry. Your entries are transmitted to our server over an encrypted connection (HTTPS/TLS).
The form message is sent to our mailbox as an authenticated, TLS-encrypted email. For email operation (outgoing mail server and mailbox) we use Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, as a processor within the meaning of Art. 28 GDPR. The email address you provide in the form is set as the reply-to address so that we can respond to you directly.
Alternatively, you can contact us directly by email at the address stated in the Legal Notice. The legal basis for processing is Art. 6 (1) (b) GDPR (initiation or performance of a contract) and otherwise our legitimate interest in answering inquiries (Art. 6 (1) (f) GDPR). The data will be deleted after your inquiry has been handled, unless statutory retention obligations apply. To protect against automated abuse (spam), the form limits the number of submissions per sender per hour. For this, your IP address is not stored; only a pseudonymized, non-reversible form of it (a hash) is kept for at most one hour. The legal basis is our legitimate interest in an abuse-free means of contact (Art. 6 (1) (f) GDPR).
6. External links
The website contains no embedded content from external providers. Where links to the Apple Mac App Store or other external sites are included, those sites are subject to their own privacy policies.
7. Your rights
Under the GDPR, you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), objection (Art. 21) and data portability (Art. 20). For requests, please contact the email address listed in the Legal Notice.
You also have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, www.ldi.nrw.de.
8. Changes
This privacy policy may be adjusted in case of technical changes to the website. The current version is available at juqed.com/en/legal.