Privacy policy

Who is responsible?

The controller for Jammle is Jamal Badawi. For privacy questions or requests, email contact@syriatlas.com. This notice applies to jammle.syriatlas.com.

Delivering and protecting the game

Your connection provides an IP address and network information. Requests can include browser and device headers, the requested path, and referrer information, depending on your browser. The game server also receives your music searches, chosen genres and clip lengths, guesses, and recent track IDs used to avoid repeats.

This processing makes the game work, limits abuse, and helps diagnose faults. Its legal basis is our legitimate interest in operating a secure, functioning service under Article 6(1)(f) GDPR. Network information is needed to deliver the site; optional remembering can be declined without preventing play.

The service runs on a server hosted by Hetzner Online GmbH in Nuremberg, Germany. Routine Caddy web access logging is disabled. Operational error and service logs may contain request context when needed to investigate a fault or security issue; they are not used for advertising or visitor profiling.

Round information and retention

The server holds active rounds in memory under a random token. A round includes its song, settings, guesses, and outcome. Rounds expire after one hour and can be evicted earlier when capacity is reached or the service restarts. The short-term rate limit uses an IP-based counter with a one-minute window. Expired entries are cleaned up lazily during later requests or when the process ends, so expiry is not a promise of immediate physical deletion.

The music catalogue cache contains song and artist metadata rather than a visitor profile. Error logs are retained according to the need to investigate an issue and the server’s log rotation. Email enquiries are kept only as long as needed to answer and follow up, or to meet an applicable legal obligation.

Remembering your game is optional

If you choose Allow remembering, Jammle can use this browser’s local storage for score totals, recent tracks, settings, volume, and a token to resume your round. These saves persist until you clear them or the browser removes them. Your score totals are not an online account or public leaderboard.

Optional device storage and access are based on your choice, and on consent under Article 6(1)(a) GDPR where personal data are involved. You can withdraw that choice through Storage settings in the footer. No thanks stops future optional reads and writes. Earlier saves remain untouched until you use Clear saved Jammle data or remove site data in your browser.

A small storage-choice record can be kept to remember whether you allowed or declined. It is used only to respect that choice. When remembering is off, the current game and stats can continue in page memory for this visit. See Cookies & storage for the keys and controls.

Deezer and other recipients

The server sends your music search terms and the track identifiers needed for the game to Deezer’s API. Audio previews are fetched through the Jammle server. Album artwork in search results, reveals, and history is loaded directly by your browser from Deezer’s content delivery network. Those image requests disclose your IP address and browser request information to that provider, including referrer information as permitted by your browser.

Deezer and its distribution providers handle information under their own policies and may process it outside your country, including outside the European Economic Area. Details of their processing, locations, and safeguards are available in Deezer’s privacy policy. Clicking an external music link also takes you to a separate service with its own practices. Runtime fonts are served with this site rather than requested from Google Fonts by your browser.

We do not sell your information or send score totals to an advertising or analytics service. Hosting and email services process the information needed to deliver the site and correspondence.

Your rights

Where the GDPR applies, you can request access, correction, erasure, restriction, and portability where applicable. You can object to processing based on legitimate interests and withdraw consent for future optional processing without affecting processing already carried out lawfully. You can also complain to a competent data protection supervisory authority, including the authority where you live, work, or believe a breach occurred.

Contact contact@syriatlas.com to make a request. We may need information reasonably necessary to verify and locate it. Local browser saves are not linked to an account we can look up by name; the storage controls let you remove those saves directly.