Privacy

The short version

We collect the least we can, we never sell any of it, and listeners are never tracked individually. This page says exactly what we keep and why.

Listeners

No account, no cookies for tracking, no fingerprinting. The player just connects to a stream.

Our analytics (a first-party, cookie-less counter on a2ganalytics.com) records page views and "listen" clicks as aggregate counts. It does not identify you and honours Do Not Track.

If you type a nickname on a station wall it stays in your browser's local storage and travels with your messages while you're on the page. Chat isn't stored on our servers beyond the last few dozen messages kept in memory for latecomers.

Song requests keep the nickname and text for up to 7 days so the DJ can see them, then they're deleted.

"Notify me when live" stores a push subscription (an opaque endpoint from your browser) tied to one station. It contains no personal data; unsubscribe from the same button any time.

Stream servers see your IP address to deliver audio, the same as any website. We keep listener counts, not addresses.

Bands, station owners, advertisers

Account: email address, a password hash (never the password), two-step secrets encrypted at rest, session and sign-in records including IP and browser for security, and trusted-device tokens if you tick "trust this browser".

Profile and uploads: what you put on your profile and the music, artwork, jingles and spots you upload. These are public by design, except the original masters, which are only used to make the stream copies.

Play logs: which track, jingle or spot aired on which station and when, with the listener count at the time. This is the proof of play bands and advertisers see.

Payments: handled by Stripe. We keep the Stripe session and payment references, not card numbers.

Merch buyers: when you buy from a band or station, Stripe collects your card, email and shipping address. We keep the email and shipping address on that order so the seller can ship it, and nothing else; it is exported and deleted with the seller. Card details never touch us. Sellers' Stripe accounts are connected by OAuth — we hold a reference to their account, never their keys.

Audit log: administrative actions on your account (who did what, when) so we can explain anything that happened to it.

What we never do

Sell, rent or share personal data with anyone for marketing. Advertisers get aggregate listener numbers and proof-of-play, nothing about individuals.

Run third-party ad trackers, social pixels or data brokers on the site or the stations.

Who else sees data

Infrastructure we rely on to run the service: our hosting provider, Cloudflare (DNS, TLS, custom domains), IDrive e2 (file storage), Stripe (payments), an SMTP provider (email), web push services (Apple, Google, Mozilla) for notifications, and AcoustID for audio fingerprint lookups. Each gets only what's needed for its job.

Your controls

Account holders can change email and password, revoke trusted devices, export everything (a zip of uploads plus a JSON of profile, tracks, posts, events and play stats) and delete their band or station from the dashboard. Deletion removes the content immediately and purges storage after a 30-day grace period; play logs are kept in aggregate form.

Listeners have nothing to delete because we kept nothing — clear your browser's site data to drop a nickname or push subscription.

Retention and security

Sessions expire; sign-in codes expire in minutes; mail we send is kept in an outbox for troubleshooting for 30 days. Settings and secrets are encrypted at rest. Backups are kept for 30 days.

Changes and contact

We update the version above when this changes. Questions or requests: [email protected].