privacy policy
what we collect, why, and how to get rid of it
// the short version
we collect the minimum needed to run a radio with a sign-in: your basic profile from the provider you choose, the things you post, some anonymous usage statistics and a few technical signals used to stop abuse. we do not sell data, run ad trackers or profile you for advertising.
// 1. who is responsible
the data controller is noisetrance, operator of crack head beats, united kingdom. contact: noisyboiler@googlemail.com.
// 2. what we collect and why
a) account data (when you sign in) — name, email address and avatar from google, discord, spotify or yahoo, plus a user id we generate. we use this to create your account, show your name next to your uploads, comments and chat messages, and to contact you about your account if we must. legal basis: performance of a contract (providing the service).
b) content you post — tracks you upload, comments on the wall, chat messages, reactions, votes, tags, cracked-tongue suggestions, the display name and pronouns you choose. this is public by design. legal basis: contract / your consent when you post.
c) usage analytics — page views, which sections you scroll to, which pop-ups open, which buttons you press, how long the radio played. collected with google analytics 4 and a copy stored on our own server. we use it to understand what works and what doesn't. ip addresses are anonymised by google analytics. legal basis: legitimate interest (improving the service).
d) abuse-prevention signals — a random client id stored in your browser, your ip address and your browser/operating-system family. these are combined into a rough fingerprint used only to: count return visits for signed-out visitors, apply short time-outs to visitors who never start the radio, rate-limit spam, and enforce mutes. they are never used for advertising. legal basis: legitimate interest (keeping the room usable).
e) payments — if you donate or buy a download, stripe processes the payment. we receive a payment id, the amount and the email you gave stripe, and store these as a receipt. we never see your card details. legal basis: contract / legal obligation (accounting).
f) preferences — things like your chosen cracked tongue, rave/stoned/lights settings, accessibility options. stored in your browser (localStorage) and, if signed in, against your account so they follow you between devices.
// 3. cookies and local storage
session_token— an http-only cookie that keeps you signed in for up to 7 days. essential.nt_client_idand othernt_*keys in localStorage — your anonymous client id and your preferences. essential for the radio to work.- google analytics cookies (
_ga,_ga_*) — analytics, only if your browser accepts them.
signing out deletes our cookies and clears our localStorage keys on that device.
// 4. who else sees your data
- sign-in providers (google, discord, spotify, yahoo) — they know you signed in to us. see their own policies.
- stripe — payments.
- google analytics — usage statistics.
- resend — delivers internal alert emails to the operator; it may process your name and email in that alert.
- fal.ai — generates the radio audio from text prompts; it never receives your personal data.
- hosting — the site and database are hosted on emergent's infrastructure, with a cloudflare edge in front.
we do not sell personal data and we do not share it with advertisers or data brokers.
// 5. how long we keep it
- account data: until you delete your account or ask us to.
- public content: until you or a moderator remove it.
- analytics mirror: 90 days on our server; google analytics per its own retention (14 months).
- abuse signals: visit counters and time-outs expire automatically; ip-based records are kept for at most 30 days.
- payment receipts: 6 years, as required by uk tax law.
// 6. your rights
under uk and eu data protection law you can ask to access, correct, export or delete your personal data, object to processing based on legitimate interest, or withdraw consent. email noisyboiler@googlemail.com from the address attached to your account and we will act within 30 days. you can also complain to the uk information commissioner's office (ico.org.uk).
// 7. children
the site is not intended for anyone under 16. the chat and wall are unmoderated in real time and may contain strong language. if you believe a child has created an account, email us and we will remove it.
// 8. international transfers
some providers listed above process data in the united states under standard contractual clauses or the uk extension to the eu–us data privacy framework.
// 9. changes
if we change this policy in a way that matters, the "last updated" date above moves and we post a note in the chat.