Privacy Policy

Last updated: 2026-10-15

1. Who we are

SwingHop is a personal, non-commercial project run by Jean-Pierre Lambelet in Switzerland. The site runs an agenda of swing nights, a catalogue of moves on video, and a generator of Lindy Hop playlists on Spotify, which uses AI services and the Spotify API.

Contact: admin@swinghop.ch

2. Data we collect

When you create an account

  • Email address (needed for sign-in and password reset)
  • Display name
  • Bcrypt hash of your password (we never store plain passwords)

When you use the service

  • Playlists generated and linked to your account
  • Song votes and ratings from the "This or That" and "Rate" games
  • Favourites (events you have added to your favourites, if you have an account)
  • Moves (if you have an account): the ones you added to your list, the note you wrote on each, how often you dance it, the ones you no longer want suggested, the move of the week drawn for you, and the dances you ticked
  • Reporting a mistake on a move: the reason and your message reach us by email, without your name or email address
  • Technical logs (IP address, user-agent) kept briefly to prevent abuse
  • Cookieless audience measurement: for each page viewed we record the page path, the language, the date and time, the domain name of the site that referred you, and a hashed technical identifier that changes every night. Your IP address is never stored: it is only used to compute that identifier. The identifier cannot recognise you from one day to the next, and it cannot be linked to your identity by a third party. This measurement places no cookie and no data of any kind on your device.

When you contact us

  • Message content and the email you provide in the contact form

3. Why we process this data

  • Authenticate you and keep your account safe
  • Generate and save your playlists, keep your list of moves
  • Reply to your messages
  • Improve the service through aggregated, anonymous statistics

Legal basis: performance of the service you asked for, and our legitimate interest in running a safe, working site. Analytics and advertising cookies are only set with your consent.

4. Third-party services

To deliver the service we share some data with:

  • Spotify: playlists are saved to a dedicated SwingHop account. Spotify privacy policy.
  • Google: Google OAuth sign-in, Google Analytics, and AdSense (optional, consent-based). Google privacy policy.
  • Anthropic / Groq: we send your selected tracks (without your email) to an AI model that builds the playlist.
  • YouTube (Google): the move videos are YouTube players embedded in privacy-enhanced mode (youtube-nocookie.com). The player loads as soon as you open a move, so YouTube receives your IP address and the video shown, and may store data in your browser's storage while it plays. Google privacy policy.
  • Infomaniak: Swiss hosting provider for the site, database, and email.

5. Cookies

We use two categories of cookies only:

  • Essential cookies: sign-in session and CSRF protection. Required for the site to work.
  • Analytics and advertising cookies: Google Analytics and AdSense, only if you accept them via the consent banner (UniConsent). You can change your mind at any time with the "Cookies" link in the footer.

The YouTube player on the moves may also store data in your browser's storage (see section 4). The audience measurement stores none.

You can change your mind at any time by clearing local storage or writing to us.

6. Retention

  • Account, playlists and moves: until you delete your account.
  • Technical logs: 30 days maximum.
  • Audience measurement: 400 days, then deleted automatically.
  • Contact messages: 12 months, then deleted.

7. Your rights

Under GDPR and the Swiss Data Protection Act you can ask at any time to:

  • access your data,
  • correct or delete it,
  • restrict or object to processing,
  • receive a portable copy,
  • withdraw your consent.

Write to admin@swinghop.ch. You may also file a complaint with your local data protection authority.

8. Security

Passwords are hashed with bcrypt. Traffic goes over HTTPS. We never have access to your plaintext password.

9. Changes

This policy may change. The update date at the top of the page shows the latest version.