Privacy Policy

v2026-09-11 — 2026-09-11

Summary

Airtune is a directory of publicly available internet radio streams. We keep the data we collect limited to what we need to run the service and help you find what to listen to.

What we collect

Account data (if you sign up): email, display name, avatar URL, password hash, locale, and your connected social logins (provider + provider user id, not the password of that provider).
Listening activity (only when you play a station): which station, when, and an event type (play, pause, error, etc.). This powers the trending list and your personal /me/stats.
Favorites, playlists, reports: what you explicitly save or submit.
A reply-to address on a report (optional, and only if you are not signed in): if you type an email address into the feedback form, we store it solely to tell you what came of that one report. It is not added to any mailing list, and we clear it after 90 days. Leaving the field blank does not affect the report.
Device / browser info: IP address, user agent, locale preference. Kept short-term in logs and used for abuse protection.
Convoy voice messages (only if you use Convoy Mode): the audio you record, its length, and who sent it to which convoy. See the section below.
TV background pictures (only if you add them): the images you upload to show behind the visualizer on your TVs. Each is converted to JPEG in three sizes, and its metadata — including any location — is removed. They are stored at hard-to-guess addresses that your TVs load, so anyone who has an exact address could open that image; they are not listed or searchable. Deleting a picture deletes every size of it, and deleting your account deletes all of them.

Convoy Mode and your microphone

Convoy Mode lets a small group send each other short recorded voice messages. It is off by default and nothing is recorded unless you tap the record button.

What we store: the audio file, its duration, the convoy it was sent to, and your account as the sender.
Who can hear it: only the members of that convoy. Voice messages are never public, never used to train anything, and never sold or shared with advertisers.
How long: voice messages are deleted automatically 24 hours after they are sent.
Microphone access: requested only when you first record, and used only while you are recording.
If you report a message: we keep a record of the report — who sent the content, which convoy, and a reference to it — after the message itself is deleted. Without that, a report filed shortly before a message expired would be impossible to act on. See the Convoy Content Policy.

What we do not collect

We do not sell your data, show third-party ads, or track you across other websites.

We do not record audio from your microphone anywhere in the app except Convoy Mode, and there only while you are actively recording a message — see the Convoy section above. We do not record or store the radio audio you listen to.

Cookies & local storage

A session cookie keeps you signed in.
A small locale cookie stores your chosen UI language.
Local storage on your browser remembers favorites (for guests), playback volume, EQ preset, and the onboarding dismissal flag.

Third parties

Cloudflare — CDN + DDoS protection in front of the app. We also use Cloudflare Web Analytics to measure aggregated web traffic (page views, web vitals, anonymized geography, browser type). No cookies are set, no client-side identifier is stored, and visitor IPs are processed in-memory by Cloudflare without being written to disk. No cross-site or cross-app tracking. See Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.
Hetzner / DigitalOcean — our servers.
Cloudflare R2 — object storage for Convoy voice messages, which are stored privately and deleted after 24 hours, and for TV background pictures, which stay until you delete them or your account.
Radio-Browser — public catalog source for station metadata.
Google / Apple / Facebook — only if you use their Sign-in-with buttons; we receive the minimum profile fields they return.
Postmark / SES / Resend — transactional email delivery.

Your rights

Request a copy of your data
Request deletion of your account and associated data
Withdraw consent at any time

Send requests to the address on our Support page.