privacy policy

who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

The operator's details aren't set up on this server yet (OPERATOR_NAME, OPERATOR_ADDRESS, OPERATOR_EMAIL).

For anything about your data, write to the email address in the legal notice.

your account

• Registered accounts: your name, email address and password. The password is stored only as a bcrypt hash. Whether you verified your email address, and when.
• Guest accounts: a randomly generated username and access key. No email address or name is needed. The key is stored hashed, and encrypted so your account page can show it to you again.
• When the account was created.

Purpose: providing the service you signed up for. Legal basis: Art. 6(1)(b) GDPR (contract). Kept until you delete your account.

your files and your listening

• The audio files you upload, their file names and sizes, and the tags read from them (title, artist, album, chapters, duration, cover art and similar).
• Bookmarks and the position to resume each audiobook from.
• How much audio was streamed to you per month, by audiobooks and music (shown on your account page).
• How many files you uploaded per month, for your plan's upload allowance.

Your files are private. They are played only to your own account; nobody else can list or play them, and we don't look at them unless a report of illegal content requires it (see the legal notice).

Purpose: storing and playing your audio, resuming where you left off, and showing your streaming traffic. Legal basis: Art. 6(1)(b) GDPR. Files are kept until you delete them or your account; bookmarks and resume positions go with their file. The traffic and upload counts are kept until you delete your account; "reset count" only resets the number shown, since your plan's monthly streaming allowance is checked against the full count.

album covers

For music albums whose files carry no cover, the server looks the cover up by artist and album name at MusicBrainz (MetaBrainz Foundation, USA) and downloads it from the Cover Art Archive (Internet Archive, USA). Only the artist and album names are sent, from our server, never your account or IP address. The cover is then stored on our server and may be shown to other users who have the same album.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in showing albums with their covers.

podcasts

When you search for podcasts or open one, the server sends your search terms or the podcast's id to Podcast Index (Podcast Index LLC, USA) and fetches the podcast's cover image from the server that hosts the podcast. Both requests come from our server, never from your browser, so neither learns your IP address or account. Search terms and results aren't stored; the server keeps answers in memory for up to a day to avoid asking again.

When you star a podcast, we store it for your account with its details and its newest episodes as Podcast Index lists them, so it shows up on your podcasts page. The copy is renewed when you open the podcast and kept until you remove the star or delete your account.

When you play an episode, your browser or the app loads the audio directly from the server that hosts the podcast (often a podcast hosting company or a measurement service it redirects through), as every podcast app does. That server sees your IP address and browser, under its own privacy policy; we don't pass on your account. Where you are in each episode and a bookmark at each pause are stored for your account, so you can carry on later. They're kept until you delete the bookmark or your account.

Legal basis: Art. 6(1)(b) GDPR, providing the podcast search, starred podcasts and playback you asked for.

signing in on your devices

• Browser: a session cookie keeps you signed in. It's strictly necessary for the service, so no consent is needed (§ 25(2) no. 2 TDDDG). It ends when you sign out.
• Apps: each phone gets its own sign-in token. We store it only as a hash, with the kind of device ("iOS app", "Android app") and when it signed in and was last used. Your account page lists your devices and can sign them out. A token unused for 90 days expires and is deleted.
• Sign-in codes: the one-time codes for signing in on your phone are valid for 5 minutes and stored only as hashes.

Legal basis: Art. 6(1)(b) GDPR.

emails

When you register, add an email address or ask for it, we send a link to verify your email address. The links are valid for 24 hours. The emails are sent through an email provider that processes them on our behalf. We send no newsletters or marketing. Legal basis: Art. 6(1)(b) GDPR.

server logs and security

Every request passes through Cloudflare (see below) and our server. To keep the service running, find errors and prevent abuse, the server records technical data: the time, the requested address, your IP address, your browser or app version, and, for playback, which file was streamed, in which part and how long it took. These logs are deleted after 14 days at the latest. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and working service.

Cloudflare and the captcha

The service is delivered through Cloudflare, Inc. (USA), which protects it against attacks and passes on every request, and so processes your IP address and request data. "Continue without account" is protected by Cloudflare Turnstile, which checks that a human is signing up, using technical data about your browser or device. Both are needed to run the service securely, so no consent is needed for Turnstile (§ 25(2) no. 2 TDDDG). Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure service protected from automated abuse.

Cloudflare processes this data on our behalf. Transfers to the USA rely on Cloudflare's certification under the EU-US Data Privacy Framework (Art. 45 GDPR) and on the EU standard contractual clauses (Art. 46 GDPR).

hosting

Our servers and file storage are run by Hetzner Online GmbH in Germany, which processes the data on our behalf. Your files are stored in data centres in the EU.

paid plans and payments

If you buy a paid plan on the website, the payment is handled by Stripe Payments Europe, Ltd. (Ireland), which processes your payment details, the email address it asks for (for receipts) and your billing country as its own controller, under its own privacy policy. We store only your plan, its status and renewal date, and the IDs Stripe gives your subscription and you as a customer, linked to your account. We never see your card details, and we don't store the email you give Stripe with your account.

Purpose: selling and running your subscription. Legal basis: Art. 6(1)(b) GDPR, and Art. 6(1)(c) GDPR for the records tax law requires us to keep (Stripe keeps those for us). Stripe may transfer data to the USA, under the EU-US Data Privacy Framework and standard contractual clauses.

the apps

• The apps store your sign-in token in the phone's secure storage (Keychain on iOS, Keystore on Android), and the server address and your name in the app's settings. Signing out removes them.
• The camera is used only to scan sign-in QR codes, and only when you open the scanner. No pictures are taken or stored.
• The "continue without account" captcha opens our Turnstile page in the app (see above).
• The apps contain no analytics, advertising or crash-reporting tools.

deleting your account

You can delete your account at any time: on the web on your account page, or in the app on the account screen, under "delete account". That deletes your account, all your files, bookmarks and traffic history, and signs out all your devices, right away. If you can no longer sign in to a registered account, write to the email address in the legal notice from the account's email address and we'll delete it for you. A running subscription is cancelled with it; the payment records Stripe must keep under tax law stay with Stripe.

your rights

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15),
• have it corrected (Art. 16) or deleted (Art. 17),
• restrict its processing (Art. 18),
• receive it in a portable format (Art. 20),
• object to processing based on our legitimate interests (Art. 21).

Write to the email address in the legal notice. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), in particular in the EU country where you live or work.

age

untracked is for people aged 16 and over.

changes

When the service changes in a way that affects your data, we update this policy and the date at the top.