ENCS

Legal

Privacy Policy

This page explains what happens to data when you visit stringsvibing.com, listen to Tiny Strings Radio, read Wafer Academy or use one of our apps. It describes what we actually built, not what a template says we might have built.

1. Who is responsible

Controller

Driveczech Group s.r.o.

Company number (IČO)

17383447

Registered office

Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czech Republic

Company register

Municipal Court in Prague, section C, insert 370951

Contact

[email protected] · +420 739 421 310

We are small enough that we are not required to appoint a data protection officer, and we have not appointed one. Write to the address above and a human will read it.

2. Cookies — and why there is no banner

We set no cookies. Not necessary ones, not functional ones, not analytical ones, not advertising ones. You can check this yourself: open the developer tools in your browser, look at the storage or network tab, and you will find no Set-Cookie header coming from this site.

Consent banners exist so that you can refuse tracking. Where there is no tracking, a banner asks you to consent to nothing, trains you to click through warnings, and quietly implies that something is being collected. So we did not build one. If we ever add anything that genuinely needs your consent, we will ask for it properly and before it runs — not with a pre-ticked box.

3. What happens when you open the site

The same thing that happens with every website in the world: your device opens a connection to a server, and that connection carries your IP address, the address of the page you asked for, and the identification string your browser sends about itself. Without those, the server cannot send anything back to you.

This site is hosted on Cloudflare Pages, and Cloudflare’s network handles the connection and protects it against attacks. Cloudflare therefore processes that connection data on our behalf as our hosting provider. We have not enabled any Cloudflare analytics product, and we do not have per-visitor statistics for this website.

Our own streaming server keeps short-lived technical logs of the kind every server keeps. We do not use them to build profiles, to recognise you on a later visit, or to connect a visit to anything else. We do not sell or share any of it.

4. Fonts, and the one place Google is still involved

On this website, no. Every page — the home page, the radio, the academy and these legal pages — loads the Vollkorn typeface from a file on our own domain. Nothing is requested from a font CDN, so Google is not told that you opened a page here. You can confirm it in the network tab of your browser: every request goes to stringsvibing.com or to our own broadcast server, and nowhere else.

In the Android app, yes, for now. The Tiny Strings Radio app still fetches the same typeface from Google Fonts when it starts. Your device contacts Google’s servers directly, and Google receives your IP address and the identification your device sends with that request. No cookie is set, nothing about what you listen to is transmitted, but the connection to Google is real and we are not going to leave it out.

The fix is the same one we already applied to the website: ship the font file inside the app. Until that version is released, the paragraph above is the accurate description, and you deserve to read it here rather than discover it in a packet capture.

5. What your browser stores on your device

A few small values are kept by your own browser in its local storage. They never travel to us, we cannot read them, and clearing your browser data deletes them.

These are your settings, stored for you, on your machine. If you read the whole academy on one device and then open it on another, the progress will not follow you — that is the direct consequence of not having accounts, and we think it is the right trade.

6. Listening to the radio

Pressing play opens an audio connection from your device to our streaming server. For as long as it is open, the server knows a connection exists, which is how the “listening” number on the page is produced. That number counts open connections, not people, and it includes our own monitoring checks.

We do not log what you personally listened to, because there is no “you” in the system to attach it to. We do record, for the station itself, which track was played at what time and for how long, and how many connections were open at that moment. Those records describe the broadcast, not the audience.

7. Rating a track, and asking for one

If you press the thumb up or thumb down button, your browser or app sends us the name of the track that is playing. We write one row to our database, and this is the whole row:

• the track name,
• whether it was a positive or a negative vote,
• the time,
• and the IP address the vote arrived from.

We are telling you about the IP address instead of glossing over it, because it is the one piece of this service that could in principle point back to a person. It is there for a dull reason — it is what stops one person pressing the same button a thousand times — and we do not look it up, do not resolve it to a location, and do not use it to recognise you anywhere else. But it is stored, so it is written here.

We think this is more than we need, and we are changing it: the plan is to keep only the country the vote came from, which is genuinely useful for a station that broadcasts worldwide, and to drop the address itself. When that change ships, this section will be rewritten on the same day and the addresses already stored will be deleted. Until then, the list above is exactly what is in the database — we would rather publish an uncomfortable sentence than a flattering one.

The record carries no account, no cookie and no visitor ID, so we cannot reconstruct what you listened to or connect a vote to anything you do elsewhere. Our legal basis is our legitimate interest in programming the station sensibly and in keeping the vote count honest.

The “wish a song” box on the radio page works the same way: you can only pick a track that is already in our library, and pressing the button sends us that track name so it can be moved up the queue. Nothing is written to your browser, and the wish is held in the station’s memory until it is played — it is not stored in the database and it is not attached to you.

8. The mobile apps

Tiny Strings Radio (Android, iOS in preparation)

The app plays the same stream and can send the same votes, so sections 6 and 7 apply to it as well. It has no login, no advertising identifier, no analytics library and no crash reporting service. Your choices — theme, language, volume — are stored locally on the device. As noted in section 4, the app currently downloads its typeface from Google.

Till the End (paid)

Till the End performs its calculation entirely on your device. The profile you enter — date of birth, sex, country — stays in the app’s local storage and never reaches us. The app contains no analytics and no advertising. The one exception is the optional weather widget: if you turn it on and type a city name, that city name and the coordinates derived from it are sent to Open-Meteo to fetch the temperature. No identifier and no part of your profile is sent with it, and the app does not ask for location permission. The app’s own privacy policy covers it in detail.

Buying the app happens in the App Store or on Google Play. Apple and Google decide independently what they collect during that purchase; we receive only sales reports that do not identify individual buyers, and we never see your payment details.

9. Everyone else involved

The complete list. There is nobody else.

We do not sell data, we do not share it with advertisers, and we have never been asked to hand any over.

10. How long anything is kept

Play records describe what the station broadcast: which track, when, for how long, and how many connections were open. They contain no name, no e-mail, no account and no device identifier, so they are not a history of any individual, and we keep them as the station’s operating record for as long as the station runs.

Votes are the same kind of record with one exception, the IP address described in section 7. That is the part with a deadline: when we switch to storing only the country, the addresses already in the database will be deleted rather than left lying there. We are not going to name a date we might miss, so we will say the plain version instead — it is a small change, it is the next thing on the list for the station, and this page will say so the day it is done.

Technical server logs are short-lived and are overwritten in the normal operation of the server. If we ever begin keeping anything that could point back to a specific person, we will say so on this page before we start, and we will state the deletion period.

11. Your rights, honestly explained

Under the GDPR you have the right of access, rectification, erasure, restriction, objection and portability. Most privacy policies list them and stop there. Here is what they mean in a service with no accounts:

• There is no account to delete. We never created one for you and we hold no profile, so there is nothing to close and nothing to export.
• We almost never can identify you. If you write and ask “what do you have on me”, we have no way to find records belonging to you, because nothing we keep carries a name, an account or a device identifier. The law does not require us to collect extra data about you just so we can answer such a request — and we will not.
• The one exception is a vote. While votes still carry the IP address described in section 7, that address is the only handle that exists. If you tell us the address you were using and roughly when you pressed the button, we can find those rows, tell you what is in them and delete them if you want. Once we move to storing only the country, even that handle disappears — and so does the ability to answer such a request at all.
• What you can always do: ask us any question about how this works and we will answer; object to us storing anything about a vote beyond the track name.
• Settings on your device — theme, language, academy progress — are yours to erase at any moment by clearing your browser data or the app’s storage. You do not need us for that.

If you think we are handling something badly, tell us first — but you always have the right to complain to a supervisory authority. Ours is:

Authority

Úřad pro ochranu osobních údajů (Czech Data Protection Authority)

Address

Pplk. Sochora 27, 170 00 Praha 7, Czech Republic

Website

uoou.gov.cz

12. Children

The radio and the academy are not aimed at children, but nothing on them is unsuitable, and because we collect no personal data we collect none from children either. Till the End deals with mortality and is intended for adults.

13. Changes to this policy

We will update this page whenever what we do changes — when the vote stops carrying an IP address, when the app stops fetching its font from Google, or when the iOS app ships. The effective date at the top always tells you which version you are reading. We will not quietly start collecting something and describe it later.

14. Contact and complaints

Post

Driveczech Group s.r.o., Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czech Republic

E-mail

[email protected]

Phone

+420 739 421 310