Privacy Policy

1. Who runs JotJam

JotJam is run by TaoChen, an independent developer, who is responsible for your data (the “controller” under the GDPR). You can reach them at [email protected].

2. Before you save: your work stays in your browser

Drawing, designing, playing and recording happen in your browser. Unsaved work is kept as a draft in your browser's storage on this device. Nothing you make is sent to us until you press Save.

3. What we collect

• Your account: when you sign in with Google, we receive your email address and your Google account ID. We never see your Google password.
• Work you save: the drawing, design or riff data (lines, shapes, notes), its name, and a small preview picture.
• Credits: your balance and a record of credits given and used.
• Technical data: IP address, browser type, a device code we create to give free credits once a day per device, and server logs of requests. We use these to keep the service running and to stop abuse.

4. Why we use it

To sign you in, store and show your saved work, keep your credit balance right, prevent fraud and abuse, and answer you when you write to us. We don't sell your data and we don't show ads.

5. Why we're allowed to use it

If you're in the EU, EEA or UK, the GDPR asks us to name a legal basis for each use of your data:

• To provide the service you asked for (our contract with you): your account, saving and showing your work, your credits.
• Our legitimate interest in keeping JotJam safe and fair: security logs, stopping abuse, and giving free daily credits once per device.
• Your consent, for anything optional. Right now there's nothing optional; if we ever add things like analytics, we'll ask first and you can say no.
• Legal obligations, when the law requires us to keep or share something.

6. Who else sees it

Only the companies that help us run JotJam — hosting and cloud storage, Google for sign-in, and an email provider if we write to you — and only as needed for that job. We'll also share data if the law requires it.

7. Where your data is stored

Our servers and the services we use may be outside your country, including outside the EU, EEA and UK. When data from those regions goes elsewhere, we rely on an adequacy decision of the European Commission or on its Standard Contractual Clauses to keep it protected.

8. How long we keep it

Saved work stays until you delete it or your account. Deleted work is removed from storage right away. Server logs are kept for a limited time and then deleted.

9. Cookies and browser storage

We use one cookie to remember your language, and your browser's storage to keep you signed in, remember tool settings like brush size and colors, and keep drafts of work you haven't saved yet. Drafts never leave your device. No advertising or cross-site tracking cookies.

10. Your choices

Write to [email protected] and we'll help, free of charge, usually within a month. You can:

• Get a copy of your data, and download your saved work yourself at any time.
• Have wrong data corrected.
• Delete any saved work yourself, or ask us to delete your whole account and everything in it.
• Get your data in a common, machine-readable format to take elsewhere.
• Object to, or ask us to limit, how we use your data.
• Complain to the data protection authority where you live, if you think we've got something wrong.

11. Children

JotJam isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, tell us and we'll delete the account.

12. Changes

If this policy changes in a way that matters, we'll update the date at the top and tell signed-in users on the site.