Privacy policy

We collect the minimum needed to run a queue. Clients don't create accounts and we never ask them for an email or a password — just a first name. We identify devices with a browser fingerprint so one person can't stuff the line, and reference photos are deleted once the visit is finished. We don't sell anything to anyone.

• ·The name you type when joining a queue — usually a first name. You choose what to enter.
• ·Your stylist preference and your position and timestamps in the queue.
• ·An optional reference photo, if you upload one.
• ·Your mobile number — only if you tick the box asking for text updates. Leave it unticked and no number is stored at all.
• ·A device fingerprint: a identifier derived from your browser and device characteristics, used to enforce one join per shop per day and to honour a shop's ban on a device. It is not linked to your name, email, or any account.

We do not ask Clients for an email address, date of birth, or payment details, and we don't use tracking cookies or advertising pixels anywhere on the site. A phone number is only ever collected when you explicitly ask for text updates.

If you opt in, we send two messages for that visit: a confirmation when you join, and one when your chair is ready. If you're seated straight away without waiting, only the first is sent. We don't send marketing messages, and we never sell or share your number.

Reply STOP to any message to opt out immediately. We keep a record of numbers that have opted out for the sole purpose of not texting them again — that record is what makes the opt-out stick. Reply START to opt back in.

Messages are delivered through Twilio (United States), which processes your number solely to deliver them. Your number is stored on your queue entry and removed along with it. Message and data rates from your carrier may apply.

• ·Account details: owner name, email address, and a password (stored hashed by Firebase Authentication — we never see it).
• ·Business details you publish: shop name, type, address, phone number, hours, and photos.
• ·Your stylist roster and the operational record of your queue.

Shop photos, stylist profile photos, and Client reference photos are uploaded to Google Cloud Storage. Before a photo is shown publicly, it is sent to the Google Cloud Vision API and scanned automatically for adult, violent, and sexually suggestive content. Photos that are flagged are deleted immediately and never displayed. This screening is automated; no person reviews your photo as part of it.

A Client's reference photo is visible only to the Shop serving them, and is deleted from storage as soon as that visit is marked finished or the entry is removed.

• ·Reference photos: deleted when the visit completes or the entry is removed.
• ·Daily join records (used to enforce one join per day): deleted automatically each night.
• ·Queue entries: retained as the Shop's operational history until the Shop deletes them or closes its account.
• ·Device ban records: kept for as long as the ban is active; permanent bans persist until a Shop lifts them.
• ·Shop account and business details: kept while the account is open, and deleted on request.

We use a small number of service providers, and they only handle data to provide their service to us:

• ·Google Firebase and Google Cloud (United States) — authentication, database, file storage, server functions, and image screening.
• ·Vercel (United States) — website hosting and aggregate performance measurement (page load speed). This measurement does not use cookies and does not identify individuals.
• ·Twilio (United States) — delivery of the text updates you opt into. Only used when you provide a number.

We do not sell or rent personal information, and we don't share it for advertising.

A Client's name, stylist preference, queue position, and reference photo are visible to the Shop whose queue they joined. Public shop pages show only business information the Shop chose to publish — never Client names. Other Clients cannot see who else is in the line.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to certain processing, and to be free from discrimination for exercising those rights. To make a request, email johnathonbrumfield15@gmail.com. We'll need enough detail to find your records — for a Client, that generally means the shop and the approximate date you joined.

Queued isn't directed at children under 13 and we don't knowingly collect their personal information. A parent or guardian can join a queue on a child's behalf. If you believe a child has given us information directly, contact us and we'll delete it.

Data is encrypted in transit, passwords are hashed and salted by Firebase Authentication, and writes to queue data are restricted to server-side functions rather than the browser. No system is perfectly secure, and we can't guarantee absolute security — but we don't hold payment card numbers or government identifiers, which keeps the stakes lower.

If this policy changes we'll update the date at the top of the page, and give notice of significant changes where practical.

Privacy questions or requests: johnathonbrumfield15@gmail.com.