Privacy Policy

v2026-11-07 — 2026-11-07

Summary

Airtune is a directory of publicly available internet radio streams. We keep the data we collect limited to what we need to run the service and help you find what to listen to.

What we collect

Account data (if you sign up): email, display name, avatar URL, password hash, locale, and your connected social logins (provider + provider user id, not the password of that provider).
Listening activity (only when you play a station): which station, when, and an event type (play, pause, error, etc.). This powers the trending list and your personal /me/stats.
Favorites, playlists, reports: what you explicitly save or submit.
A reply-to address on a report (optional, and only if you are not signed in): if you type an email address into the feedback form, we store it solely to tell you what came of that one report. It is not added to any mailing list, and we clear it after 90 days. Leaving the field blank does not affect the report.
Device / browser info: IP address, user agent, locale preference. Kept short-term in logs and used for abuse protection.
Convoy voice messages (only if you use Convoy Mode): the audio you record, its length, and who sent it to which convoy. See the section below.
TV backgrounds (only if you add them): the pictures and short videos you upload to show behind the visualizer on your TVs. A picture is converted to JPEG in three sizes. A video is shortened to its first 30 seconds, its sound is removed, and it is converted to a standard video file plus a still picture from its first frame; the apps may shrink it on your phone before uploading. In both cases the metadata — including any location — is removed. They are stored on our own servers at hard-to-guess addresses that your TVs load, so anyone who has an exact address could open that file; they are not listed or searchable. Deleting a background deletes every version and size of it, and deleting your account deletes all of them.

Convoy Mode and your microphone

Convoy Mode lets a small group send each other short recorded voice messages. It is off by default and nothing is recorded unless you tap the record button.

What we store: the audio file, its duration, the convoy it was sent to, and your account as the sender.
Who can hear it: only the members of that convoy. Voice messages are never public, never used to train anything, and never sold or shared with advertisers.
How long: voice messages are deleted automatically 24 hours after they are sent.
Microphone access: requested only when you first record, and used only while you are recording.
If you report a message: we keep a record of the report — who sent the content, which convoy, and a reference to it — after the message itself is deleted. Without that, a report filed shortly before a message expired would be impossible to act on. See the Convoy Content Policy.

What we do not collect

We do not sell your data, show third-party ads, or track you across other websites.

We do not record audio from your microphone anywhere in the app except Convoy Mode, and there only while you are actively recording a message — see the Convoy section above. We do not record or store the radio audio you listen to.

Children

Airtune is not directed at children, and you must be at least 13 to create an account (16 for Convoy Mode); see our Terms of Service. We do not knowingly collect personal data from children under 13. If we learn that we have, we delete the account and its data. If you believe a child under 13 has given us personal data, write to the address on our Support page.

Cookies & local storage

A session cookie keeps you signed in.
A small locale cookie stores your chosen UI language.
Local storage on your browser remembers favorites (for guests), playback volume, EQ preset, and the onboarding dismissal flag.

Third parties

Cloudflare — CDN + DDoS protection in front of the app. We also use Cloudflare Web Analytics to measure aggregated web traffic (page views, web vitals, anonymized geography, browser type). No cookies are set, no client-side identifier is stored, and visitor IPs are processed in-memory by Cloudflare without being written to disk. No cross-site or cross-app tracking. See Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.
Hetzner / DigitalOcean — our servers, which also store TV backgrounds until you delete them or your account.
Cloudflare R2 — object storage for Convoy voice messages, which are stored privately and deleted after 24 hours.
Radio-Browser — public catalog source for station metadata.
Google / Apple / Facebook — only if you use their Sign-in-with buttons; we receive the minimum profile fields they return.
Postmark / SES / Resend — transactional email delivery.

Your rights

Request a copy of your data
Request deletion of your account and associated data
Withdraw consent at any time

Send requests to the address on our Support page.