Privacy policy

Who is responsible

The data controller is Erwan André, sole trader operating under the trade name “DirtyLab”, SIRET 788 503 225 00039, 58 rue Césaria Evora, 75019 Paris, France. For any question about your data: contact@dirtylab.fr.

What the app does today

The current version of the REQ PARTY app only contains a demo mode: a sample night with simulated requests, no account and no payment. It asks you for nothing and sends nothing to our servers.

Three technical identifiers still leave the phone, to our service providers: an installation identifier, sent to Expo to check for app updates; on phones whose notifications go through Google, the Google Firebase installation identifier, used to route them; and, if you allow notifications, a notification token created with Expo, and with Apple or Google depending on your phone.

The sections below describe the complete service, as it will work once nights open.

If you send a request (audience)

No account is needed. The organiser and the DJs of the night see the requests (track, amount, status), never your email address. We store:

• the track picked from the catalogue (title, artist, artwork) and the amount;
• your email address, to tell you whether your request was accepted or whether the hold on your card was released;
• the language of the page, to write to you in the right language;
• a tracking identifier, contained in the link to your tracking page.

Payment

Payment goes through Stripe. Your card is first only authorised: it is charged only if a DJ accepts the track before the end of the night. If your request is refused or not accepted in time, the authorisation is released and nothing is charged.

REQ PARTY never sees your card number, security code or expiry date: we only receive the payment references, its amount and its status. Stripe also processes data to prevent fraud, under its own privacy policy.

If you are an organiser or a DJ

We store:

• your email address, used to sign in with a one-time code;
• your display name (organiser name or DJ name), your country and your language;
• the nights you create or join, and your actions (tracks accepted, tracks played, requests refused, tracks banned);
• the identifier of your Stripe Connect account and its status (ready or not to receive transfers): identity checks and bank details are handled by Stripe and never stored by us;
• the visual the organiser uploads for the night;
• in the app, a notification token, to alert you when a request comes in;
• your newsletter choice (the box is never pre-ticked).

Account shared with REQ

Sign-in is shared by the DirtyLab services that use the same authentication, including REQ: if you already have a REQ account, you sign in with the same email.

If you are already a DJ on REQ, REQ PARTY reads your DJ name, your country and your REQ Stripe Connect account, and never changes them. Deleting your REQ PARTY account erases your REQ PARTY data without touching your REQ account.

Why we use it

• running the service — showing the night, passing requests to the DJs, charging on acceptance, paying the organiser and the DJ their shares, sending service emails: performance of the contract;
• keeping accounting records and answering the authorities: legal obligation;
• preventing fraud and securing the service — every night reviewed by DirtyLab, card-testing detection, account blocking: legitimate interest;
• sending you the DirtyLab newsletter, only if you ticked the box for it: consent, which you can withdraw at any time through the unsubscribe link.

Service providers

REQ PARTY sells no data and uses no advertising tracker. Our service providers process data on our behalf:

• Supabase — database and authentication;
• Stripe — payments, Connect accounts and transfers;
• Resend — sending emails;
• Expo — app updates and notifications, delivered through Apple (APNs) and Google (Firebase Cloud Messaging);
• Hostinger — hosting of the party.reqdj.com server;
• Apple (iTunes search) and Deezer — searching the track catalogue: searches leave from our servers, without your IP address or your identity;
• Airtable — newsletter list, if you sign up.

Transfers outside the European Union

Some service providers (including Stripe, Expo, Resend, Airtable, Apple and Google) are based in the United States or may process data there. These transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

How long we keep it

• audience email address: erased 180 days after the end of the night, the period during which a payment can still be disputed;
• requests and payments: kept 10 years for accounting (French Commercial Code, article L123-22), without the email address once it has been erased;
• organiser or DJ account: as long as the account exists; when it is deleted, your data is erased or anonymised, except what the law requires us to keep;
• notification tokens: erased at sign-out, at account deletion, or as soon as they become invalid;
• newsletter sign-up: until you unsubscribe.

Cookies and audience measurement

The site sets a “lang” cookie, which remembers the language you chose, and, once you are signed in, the session cookies that sign-in needs. No advertising cookie.

Audience measurement is done by DirtyLab itself, without cookies. It records the page viewed, the site you came from and the country of the visit, derived from your IP address. To count unique visitors, it computes a one-way fingerprint (a hash of your IP address and browser, mixed with a secret key that changes every day): it cannot recognise you from one day to the next or recover your IP address, which is never stored.

Your rights

You can access your data, correct it, erase it, ask for a copy in a portable format, restrict its processing or object to it, and withdraw your newsletter consent at any time. Write to contact@dirtylab.fr.

You can also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Age

Organiser and DJ accounts are for adults only. The service is not meant for children under 15 and we do not knowingly collect their data; if you think we have, write to us and we will erase it.

Changes

This policy evolves with the service, in particular when new features open. The date at the top of the page shows the version in force; for any significant change, organisers and DJs are told by email.