Privacy
What we collect, why we collect it and the control you have over it. No ads, no trackers, no selling.
In short
- You can listen to the radio without an account.
- We collect only what we need to run Radio X, keep it secure and understand how it is used.
- We do not show ads, we do not sell your data, and we do not use third-party analytics or advertising trackers.
- You can see your active sessions and delete your account at any time.
Information you give us
- Account details: your username, email address and password. Passwords are stored only as a salted scrypt hash, never in readable form.
- Google or Discord sign-in: your account ID with that provider, your name or username, email address and profile picture. We never receive your Google or Discord password.
- What you create: playlists, likes, song requests (including the Spotify link you send), bug reports and your settings, such as key bindings, favourite stations and sound profile.
Information collected automatically
- Sessions and sign-ins: your IP address, browser and device type, and the time of each sign-in or failed attempt. This protects your account and lets you see and sign out your devices.
- Site activity: while the site is open, your browser checks in about every 30 seconds with an anonymous visitor ID, the page you are on, your device type and your IP address. This powers the live listener and visitor counts.
- Radio listening: our streaming server (AzuraCast) records each connection to a station, including IP address, approximate location derived from it, player or device and how long you listened. Signed-in members also build up listening time, which unlocks the music library.
- Music use: plays and downloads are counted per account to apply daily limits, and to build automatic mixes such as Daily Mix and weekly charts.
- Server logs: technical errors and requests, kept to fix problems and stop abuse.
How we use it
- to provide the radio, the music library, playlists and your saved settings;
- to keep accounts secure, apply limits and prevent abuse, fraud and attacks;
- to show public statistics, which only ever contain totals and never identify you;
- to answer your reports and requests;
- to improve stations and features based on what is listened to.
We do not make automated decisions that have legal or similarly significant effects on you.
Staff access
A small team of administrators can see account details, sessions, IP addresses and activity to run and protect the Service. Their access is protected by two-factor authentication and every administrative action is recorded in an audit log.
How long we keep it
- Account information stays until you delete your account.
- Sessions end when you sign out, when they expire after 30 days, or when you sign them out from the account page.
- Monitoring data, such as visitor check-ins and listener samples, is deleted automatically after a set period, 30 days by default.
- Security records, such as sign-in history and the audit log, are kept for as long as they are needed to protect accounts and investigate abuse.
When you delete your account, your profile, playlists, likes, settings, sessions and reports are removed. Anonymous totals, such as listener counts, remain.
Security
All traffic is encrypted with HTTPS. Passwords are hashed, secret keys are encrypted at rest, and sign-in, registration and other sensitive actions are rate-limited. No system is perfectly secure, so please use a strong, unique password.
Your choices and rights
- See and update your profile, settings and linked sign-in providers on the account page.
- Review your active sessions and sign out any device.
- Delete your account and the data tied to it.
- Ask us for a copy of your data, or to correct or delete it, by sending a request through Report a problem.
Depending on where you live, you may have further rights under local law. We will respond to every request within a reasonable time.
Children
Accounts are not intended for children under 13. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change how we handle personal information, we will update this page and its date. Significant changes will be announced on the site before they take effect.
Contact
For any privacy question or request, use Report a problem on your account page, or message us on Telegram. Our social links are in the footer. See also our Terms of Service.