Privacy, in plain language.
Last updated October 26, 2026.
Your song requests
Shift Shuffle stores the name or Amazon login you provide, your song choices, and review status so the organizer can build a work playlist. It does not collect an Amazon password or authenticate your employment. Public visitors see totals; the organizer can see submitter names and selections. Your edit code lets you access and update your own submission.
Your browser
Song drafts and private edit codes are saved in your browser’s local storage. Organizer sessions are saved in session storage and expire after 12 hours. Clear site data on a shared device when finished. The app does not use advertising trackers.
Google and YouTube
Only an organizer connects a Google account. With consent, Shift Shuffle uses the YouTube Data API to search for recordings, list your playlists, create private playlists, and add recordings you approve. Google’s authorization scope includes YouTube management access; this app uses it for playlist functions. It does not upload videos, post comments, or sell Google user data. OAuth credentials and connection tokens are stored encrypted on the server and are not shared with coworkers.
You can disconnect in the organizer desk or remove access in your Google account permissions. Disconnecting removes the stored connection token; playlists already created remain in your YouTube account.
Storage and retention
Requests are stored in encrypted AWS DynamoDB and remain until the organizer requests removal. Temporary login, authorization, and quota records expire automatically. Operational logs are retained for seven days and do not intentionally include request bodies, names, or tokens. Database backups can retain prior records temporarily. Contact the site owner through the portfolio contact form to request access, correction, or deletion.
Other services
Song searches use Apple’s US iTunes catalog. YouTube matching sends song and artist names to Google, not coworker names or Amazon logins. Google services are governed by the Google Privacy Policy and YouTube Terms of Service. Shift Shuffle’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.