Privacy Policy

Overview

JamDrop ("we", "us") runs getjamdrop.com and an optional browser add-on for posting from Spotify. This page explains what information we collect and how we use it.

What JamDrop does

When you are signed in, you can post songs, playlists, and live Jam sessions to a public feed. The optional add-on adds a Post to JamDrop button on Spotify in Chrome.

Data we collect

• Account information - If you sign in, we receive your email address and display name from our authentication provider (Supabase Auth). You choose what display name appears on posts.
• Authentication tokens - The extension stores your JamDrop session locally in Chrome storage so you stay signed in and can post. Tokens are synced once from the JamDrop connect page when you link your account.
• Content you post - When you choose to post, we collect the Spotify link, optional title, caption or vibe text, optional genre tags, and (for jams) guest-control settings. This content is stored on JamDrop and shown on the public feed.
• Spotify page context- When you click "Post to JamDrop" on Spotify, the extension reads the current Spotify page URL and title to pre-fill the compose form. We do not collect your browsing history or track pages you visit without your action.

How we use data

• Authenticate you and let you create posts
• Display your posts and display name on JamDrop
• Operate and improve the website and extension

We do not sell your personal data. We do not use your data for advertising profiles.

Third-party services

• Supabase - Authentication and database hosting. Data is stored in Supabase according to their privacy policy.
• Spotify - The extension runs on open.spotify.com only to show the post button and read page context when you initiate a share. JamDrop is not affiliated with Spotify.

Extension permissions

• storage - Saves your sign-in session and temporary share context between the Spotify page and popup.
• tabs - Reads the active Spotify tab when you open the extension popup, so it can pre-fill what you are sharing.
• Host access - open.spotify.com (post button and page context), getjamdrop.com (account connect), and Supabase (auth and posting).

The extension does not load remote code. All JavaScript is bundled in the extension package.

Data retention & deletion

Posts remain on JamDrop until you delete them. You can sign out of the extension at any time, which clears the locally stored session. To delete your account or request removal of personal data, contact us at support@getjamdrop.com.

Changes

We may update this policy from time to time. The "Last updated" date at the top will reflect the latest version.

Contact

Questions about privacy: support@getjamdrop.com