Updated October 8, 2026
Privacy policy
How Tinyjolt handles your account, music information and browser permissions.
Who operates Tinyjolt
Tinyjolt is published under the name Ozeily, which determines the purposes of the processing described here. Contact us about privacy, account deletion or support at alban@ozeily.com. This policy covers tinyjolt.com and the Tinyjolt Music browser extension.
Your account and sign-in
We use your email address, account identifier and authentication information to create and secure your account and save your widgets. If you choose Google sign-in, Google shares your email address and basic profile information, such as your name and profile picture, with our authentication provider, Supabase. We do not request access to Gmail, Drive or your Google listening history.
Account processing is necessary to provide the service you request. Google sign-in is optional; you can use email instead. Resend delivers sign-in emails and processes the recipient address, email content and delivery events.
Music information and the extension
After you allow a music website and select a player, the extension reads the current track’s title, artist, artwork address, track identifier, duration, position and playback state. These details are sent to Tinyjolt to display your music widget and overlay. The extension does not record, capture or transmit audio.
Website permissions are optional and requested when you connect a site. The extension reads player metadata and the relevant player elements on the selected page. It uses eligible tab addresses and titles locally to help you choose a source. It does not collect your general browsing history or use unrelated page content for advertising.
Connection credentials, allowed source addresses and preferences are stored in the browser. The current music state is relayed through Cloudflare. It is replaced as playback changes; Tinyjolt does not build a listening-history feature. We also keep operational usage counters to enforce plan limits and maintain the service.
This processing provides the overlay you request. You can stop sharing by disconnecting the extension, closing the selected player, revoking site access in the browser or uninstalling the extension. Anyone who has your overlay URL can view its contents. If you include the overlay in a stream, your audience can see the displayed track information.
Settings, billing and security
We store widget settings and connection identifiers to provide your saved designs. When you use paid billing, Stripe handles payment details; Tinyjolt receives customer and subscription references, amounts and statuses. Full card numbers and security codes are not stored by Tinyjolt. These uses fulfil your contract and applicable accounting obligations.
Support messages and technical information, such as IP address, browser details, request errors and security logs, help us answer requests, diagnose incidents and prevent abuse. Our legal basis is our legitimate interest in running and securing the service, or the contract for account and billing support. Hosting country information selects the displayed currency without requiring precise location permission.
Providers and sharing
Vercel hosts the website and server functions. Supabase provides authentication and the database. Cloudflare delivers current music data to connected overlays. Resend delivers authentication emails. Stripe processes payments and subscriptions when used. Google provides optional sign-in and the fonts used on the website. Album artwork loads from music-provider image servers, which receive the image request and associated network information.
We do not sell personal data or use music information for targeted advertising. Data is shared with the providers needed to operate the functions above, with people to whom you share your overlay, or where legally required. We do not use Google account data for advertising or unrelated purposes.
These providers may process data outside your country, including the United States. Their data protection documents describe processing locations and transfer safeguards, such as contractual protections where applicable. Contact us for information about the safeguards applicable to your data; we do not promise EU-only processing.
Tinyjolt Music uses data obtained through Chrome permissions only to provide and secure the music-overlay features described here. This use follows the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not use this data for personalised advertising, creditworthiness or lending. Human access is limited to your specific consent for support, security investigations, legal obligations or anonymised internal operations.
Storage and retention
Authentication cookies keep you signed in, a language cookie remembers your preference, and extension storage keeps its connection and source settings. Tinyjolt does not currently install advertising or audience-measurement trackers. Deleting browser storage can sign you out and disconnect the extension.
Account details and saved widgets remain while your account is active. Request their deletion by emailing us from your account address. Current playback state is temporary and is cleared after disconnection or inactivity; connection settings remain until removed. Billing records needed for legal obligations or disputes may remain after account closure. Support and security records are retained for handling the request, preventing abuse and meeting applicable obligations. Provider backups follow their own deletion cycles.
Your choices and rights
Depending on applicable law, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You can withdraw optional website permissions or disconnect Google access. This does not undo processing already lawfully performed. Tinyjolt does not make automated decisions producing legal or similarly significant effects about you.
Email alban@ozeily.com with your request. We may check your identity proportionately. Under the GDPR, the usual response period is one month; a justified extension is possible for complex requests. You can complain to your local data protection authority, including the CNIL in France. We update the date above when this policy changes.