Privacy Policy

This policy explains what canto.fm collects, why, and what your rights are. The short version: we collect what the service needs to work, we run our own analytics rather than handing your behaviour to third parties, we don't sell data, and there are no advertising trackers here.

Who we are

The data controller is CANTO FM LIMITED, registered in England and Wales, company number 17178992. For anything in this policy, write to hello@canto.fm.

What we collect

Account data: your email address, a display name if you set one, and a hashed form of your password (we never store the password itself).

Listening state: which cantos you've played and where you left off, so playback can resume across devices.

Newsletter data: your email address, if you subscribe.

Usage data: first-party analytics events (pages viewed, player interactions) collected by our own self-hosted analytics service, associated with a randomly generated profile identifier stored in your browser — not with advertising identity. Standard technical logs (IP address, browser type) are kept for security and debugging.

How we use it

To provide the service (accounts, playback, resume points) — on the legal basis of performing our contract with you. To understand and improve how canto.fm is used — on the basis of our legitimate interest in building a working product. To send the newsletter you asked for — on the basis of your consent, withdrawable any time via the unsubscribe link.

We don't sell personal data, we don't run third-party advertising, and we don't profile you beyond the product analytics described above.

Cookies and local storage

We use a session cookie to keep you signed in — strictly necessary for the service. Your browser's local storage holds interface preferences (theme, the headphones notice acknowledgement) and the analytics profile identifier described above. There are no third-party cookies and no cross-site tracking.

Who we share it with

Infrastructure providers who host the service process data on our behalf under contract (for example, our web hosting provider). We share data with no one else, unless the law requires it.

Retention and deletion

Account and listening data are kept while your account exists. Deleting your account from the account page permanently removes your account, resume points, and recorded transactions; it cannot be undone. Newsletter addresses are kept until you unsubscribe. Technical logs rotate on a short cycle.

Your rights

Under UK data protection law you can ask for access to your data, correction, deletion, portability, or restriction of processing, and you can object to processing based on legitimate interests. Email hello@canto.fm and we'll respond within a month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Children

Canto.fm is not directed at children under 13, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll remove it.

Changes to this policy

When this policy changes, the date at the top changes with it; significant changes will be flagged on the site or by email.

Privacy Policy · canto.fm