Privacy & Cookies

Overview

We respect your privacy. This notice explains what information we collect, how we use it, and your choices. It applies to LoftwahFM services and websites.

Data We Collect

• Account details: email/username and password hash.
• Entitlements: which private albums your account can access.
• Subscription metadata for stream access where applicable.
• Security and operational logs (e.g., failed logins, rate limiting) to protect the service.

How We Use Data

• Authenticate your account and authorize access to content.
• Provide and maintain streaming and delivery features.
• Prevent abuse and ensure service reliability and security.
• Communicate important account information (e.g., password resets, delivery links).

Cookies

• Essential: an HttpOnly, Secure, SameSite=Lax session cookie keeps you logged in and authorizes access to your private content. It expires automatically.
• We do not set analytics or marketing cookies.

Legal Bases

Where applicable, we process personal data to perform our contract with you (providing access to purchased or subscribed content) and for our legitimate interests in operating, securing, and improving the service.

Retention

We retain account and entitlement records while your account is active and as required for operational, security, and legal purposes. Password reset tokens are time-limited and deleted after use or expiry.

Sharing

We do not sell personal data. We may share limited data with service providers who help us operate LoftwahFM (e.g., infrastructure, email delivery), bound by contractual confidentiality and security obligations.

International Transfers

We may process data using infrastructure located in different regions. We take steps designed to protect your data consistent with applicable law.

Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To make a request, contact us using the link below.