An email address. Only if you make an account, by email and password or with Google. With Google we receive your email address and nothing else, and we never see a password.

Your profile. A handle, display name, picture, bio and the songs you pin. You choose these and they are public.

Likes, labels and messages. Songs you like and the genres and tags you vote on are part of your public profile. Messages are between you and the person you sent them to; we store them so they can be delivered.

On a computer. With the Windows app installed and watching on, Risocast reads the title, artist and album of whatever your computer is playing, through Windows’ media controls, and logs a play once half the song (or four minutes) has played.

The desktop level meter. The small meter in the Song window reacts to what your computer is playing. The sound is analysed on your computer, a few times a second, into five bar heights. It is never recorded, stored or sent anywhere.

On a phone. With the Android app installed and “Phone listening” turned on, Android asks you to allow notification access, because that is the only permission that lets an app see what other apps are playing. Risocast uses it to read the media session (the title, artist and album your lock screen shows) and nothing else; it does not read the contents of your notifications. Plays are counted on the phone, kept on the phone if you are offline, and sent once you are back online. Videos and TV apps (YouTube videos, Netflix and the like) are not logged. You can turn it off in Android’s settings at any time.

Spotify and Last.fm. Only if you connect them. With Spotify we read what is playing and what you recently played; with Last.fm we import your recent listens by username. You can disconnect either at any time.

Remote control. Your computer and phone can pause and skip each other’s music. The command (play, pause, next, previous, seek) is passed through our database and deleted as soon as the other device picks it up.

That you are online. What you are playing right now, so other listeners (only your buddies, if your profile is private) and your other devices can see it.

Your profile, your play history (top songs, recent plays and listening stats), your likes and your labels are public: other people can see them, and they are how Risocast finds people with similar taste. Song pages show how many people played a song. Your email address is never public.

If you make your profile private (when you set up, or later in Edit profile), only you and the buddies you accept can see it: your plays, likes, labels and what you are playing now. Someone you send a buddy request to sees your profile, but not your listening until you are buddies. Private profiles don’t appear in search or on song pages.

Supabase. Hosts the database and handles sign-in. Everything above is stored there.

Vercel. Runs the website and keeps the usual short-lived request logs, including IP addresses, to serve it and stop abuse.

Google. Only if you sign in with it, to confirm it is you.

Microsoft Clarity. Shows us how Risocast is used so we can fix what's confusing. Clarity records sessions rather than just counting visits: a replay of where you tapped, clicked and scrolled. What you type is masked, and so are your messages and account details. It sees pages and interactions, not your account.

Google Analytics. Counts visits: how many people arrive, roughly where from, and which pages they open. It answers “how many” where Clarity shows one visit, and like Clarity it sees pages, not your account. Your plays, likes and messages are never sent to it.

Spotify, Last.fm, iTunes and Deezer. Where song details, covers and tags come from. We ask them about songs, not about you.

Nothing is sold and nothing goes to advertisers. There are no ads. Clarity and Google Analytics are the only analytics in Risocast.

The one that keeps you signed in, and the ones Microsoft Clarity and Google Analytics set to tell one visit from the next. There are no advertising cookies.

To delete your account and everything attached to it (plays, likes, labels, messages and connected devices), open Me → Edit profile… → Delete my account…. It happens straight away. Download my data, in the same place, saves a copy first. Can’t sign in? Write to privacy@risocast.com from the address on the account. Signing out on a phone unlinks it straight away, so it stops logging to your account.

Risocast is not meant for children under 13, and we do not knowingly keep an account for anyone under 13. If one exists, write to privacy@risocast.com and it will be removed.

If this changes in a way that affects what is collected or who can see it, the date above changes and the change is described here. Questions, corrections and deletion requests: privacy@risocast.com.