Generic text, pending legal review

Privacy policy

This policy explains which personal data we process, why, and how to exercise your rights (GDPR).

1. Data controller

The publisher of Radio NowPlaying API is the controller of the personal data described below.

2. Data processed

Email address, password (hashed, never stored in plain text), language, plan, API keys (only a fingerprint and a prefix are kept), daily aggregated usage statistics, IP addresses in technical and audit logs.

3. Purposes and legal bases

Providing the service and managing the account (performance of contract); security, abuse prevention and billing (legitimate interest and legal obligations).

4. Hosting

Data is hosted in the European Union. No personal data is sold or used for advertising.

5. Radio metadata

Data served by the API is public radio programme metadata (artist, title, cover art); it does not concern the users of the service. No audio content is collected or distributed.

6. Retention periods

Account data: until the account is deleted. Usage statistics and logs: limited duration, defined in the service settings. The audit log is anonymized when an account is deleted.

7. Cookies

Only technical cookies: sign-in session (httpOnly, encrypted), language and theme preferences. No analytics or advertising cookies.

8. Your rights

You can export your data and delete your account at any time from the Account page of the dashboard. To exercise your other rights (rectification, objection, restriction) or to contact the supervisory authority (CNIL), get in touch with us.

Last updated: October 2026.