Privacy Policy
The data controller is Ondřej Bachurek, company ID 87344149. This document describes what data DJanalyzer processes and why.
1. What data we process
- Account: e-mail address, name (optional), hashed password.
- Orders and licences: the purchased plan, period, status, payment identifiers (Stripe).
- Technical: IP address to protect against abuse (rate limiting), an anonymous device hash to check the number of activations.
- Anonymised statistics (only with explicit consent): when you voluntarily enable the "Top tracks of the year" feature (see Article 6), a summary derived from your playback history - artist, title, genre, BPM, key, play count, rating, length and year. Details in Article 6.
Your music library and audio are never uploaded. The Engine DJ database and audio files stay locally in the user’s browser and are never uploaded to our servers. If the user voluntarily enables the "Top tracks of the year" feature (Article 6), only an anonymised statistical summary derived from the playback history is sent - never the library itself, the files, their paths, file names, exact playback times, or event or session names.
2. Purpose and legal basis
We process the data for the purpose of providing the service and performing the contract (Article 6(1)(b) GDPR), and where applicable on the basis of our legitimate interest in securing the service (Article 6(1)(f)). For the optional anonymised statistics sharing feature (Article 6 of this document), the legal basis is consent (Article 6(1)(a) GDPR), which can be withdrawn at any time - without affecting the lawfulness of processing carried out before the withdrawal.
3. Third-party processors
- Stripe - payment processing.
- Hosting provider - server operation.
4. Retention period
We keep account data for as long as the account exists. We keep tax documents for the statutory period. Logs and rate-limit records are deleted automatically.
5. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability. Send your request to podpora@djanalyzer.com. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection.
6. Voluntary sharing of anonymised statistics (the "Top tracks of the year" feature)
This feature is optional and switched off by default. It is activated only after the user gives explicit, informed consent in the app. Without consent, nothing is ever sent.
What is sent after consent (anonymised): the track’s artist and title (including a normalised form used for aggregation), genre, BPM, key (Camelot), play count, rating, length, and the year of first and last play; in technical terms also a non-identifying device hash (HMAC - the raw identifier is not stored) and - if the user holds a licence - a link to that licence so the summary can be displayed in the account.
What is never sent: file paths, file names, exact playback times, event or session names, the music library (the Engine DJ database) or audio files, and no other personal or identifying data.
Purpose: to compile global statistics of the most-played tracks and genres, track trends, and improve the track recommendation and playlist suggestion system for all users.
Legal basis: consent (Article 6(1)(a) GDPR). Retention period: the latest snapshot replaces the previous one (no history is accumulated); the data is kept until consent is withdrawn or the account is closed. Recipients: only the hosting provider for operational purposes; the data is not sold or passed to third parties for their own purposes.
Withdrawal of consent and erasure: consent can be withdrawn at any time in the app (Settings → Anonymous statistics sharing) or in your account. Withdrawing consent immediately deletes the related statistics on the server.
7. Cookies
We use only the necessary technical login cookie (session). We do not deploy any marketing or tracking cookies without consent.