A versão polonesa deste documento é vinculativa. Este texto em inglês é uma tradução.
1. Data controller
The controller of personal data is Radosław Skórzak-Kaźmierczak, a natural person providing the TuneOn service at https://tuneon.online (the “Controller”, “we”).
Privacy contact: radekaz@gmail.com. We have not appointed a data protection officer.
2. Scope of the service
TuneOn is free internet radio: you search stations in the open radio-browser.info directory (including in natural language) and play their streams. We do not run user accounts, take payments, or keep a profile database.
This policy covers the TuneOn website and app (web, iOS, and Android). It is not legal advice.
3. What data we process
Depending on how you use the service, we may process:
• search query text (up to 200 characters) and UI language code — sent to our /api/interpret endpoint;
• the query in the page URL as ?q= when you search on the web — this can appear in browser history, Referer headers, and host logs;
• IP address — only in server process memory, to rate-limit requests (10 per minute per IP); we do not store it in a database;
• language preference in the first-party cookie airadio-lang (1 year, Path=/, SameSite=Lax);
• on your device: favourite stations, search and playback history, theme and language settings, player state (localStorage / app storage);
• on play: the station UUID sent to radio-browser.info to count the play;
• hosting logs (IP, approximate time, URL, User-Agent) at Vercel;
• after your consent on the website: Google Analytics 4 events (page views and search_executed / search_refined — without the query text) and Google AdSense advertising data;
• IP address when the website loads typefaces from Google Fonts;
• a direct connection from your browser or app to the radio stream host and station favicon URL — those parties receive the request; we do not keep a copy in our database.
4. Purposes and legal bases
We process data for:
• providing search and playback (GDPR Art. 6(1)(b) — performance of the electronic-service contract, or Art. 6(1)(f) legitimate interest in delivering the feature you asked for);
• interpreting the query with Google Gemini or an on-device dictionary parser (same basis; the AI layer is part of the service);
• keeping UI language and player state on the device (strictly necessary);
• API abuse prevention and security (Art. 6(1)(f));
• hosting, logs, and continuity (Art. 6(1)(f));
• reporting plays to radio-browser.info so catalogue popularity rankings stay useful (Art. 6(1)(f));
• audience measurement (Google Analytics 4) — only with consent, Art. 6(1)(a) and device-storage consent (ePrivacy);
• showing ads (Google AdSense) — only with consent, Art. 6(1)(a) and advertising-cookie consent;
• loading typefaces from Google Fonts (Art. 6(1)(f) — consistent presentation of the service).
5. Recipients
Recipients may include:
• Vercel Inc. — website and server hosting;
• Google Ireland Limited / Google LLC — Gemini (query interpretation when an API key is configured), Google Analytics 4 and Google AdSense (after consent), Google Fonts;
• radio-browser.info operators — station metadata and play pings;
• radio broadcasters and their stream/favicon hosts — when you play a station or load its icon;
• bodies we must disclose data to by law.
6. Transfers outside the EEA
Google and Vercel may process data in the United States or other third countries. For Google, transfers rely on EU-approved mechanisms (including, where applicable, the Data Privacy Framework and standard contractual clauses).
Station broadcasters may be outside the EEA; connecting to their stream is necessary for the service to work.
7. Retention
We do not keep an account database. Queries and rate-limit IPs exist only in server process memory.
Language cookie: 12 months or until you delete it. Device storage: until you clear site/app data or uninstall.
Host logs: according to Vercel’s practice. Data at Google, radio-browser, and broadcasters: according to their policies.
8. Cookies and similar technologies
Necessary: the airadio-lang cookie (language) and local player, favourites, history, and settings storage. The service does not work properly without them. They do not require consent.
Analytics and advertising (website only, only after consent): Google Analytics 4 (measurement ID G-EKRRCXP4PP) and Google AdSense (client ca-pub-9348905875461268). Until you consent, the ads script is not loaded and Google Consent Mode v2 sets analytics and ad storage to “denied”.
You can withdraw or change consent at any time in Settings (Manage cookies) or by clearing site data. Withdrawal does not affect the lawfulness of processing before withdrawal.
TuneOn’s banner implements Consent Mode v2 and gates AdSense. In the EEA Google may also require a certified IAB TCF CMP (for example Privacy & messaging / Funding Choices in the AdSense console). Our banner does not replace a certified TCF CMP.
9. Profiling and ads
We do not build our own marketing profiles and we do not sell data. After advertising consent, Google may personalise ads using cookies and identifiers under Google’s policies.
We do not take automated decisions with legal effects. AI interpretation is used only to match stations.
10. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent. You may also lodge a complaint with a supervisory authority.
In Poland the authority is the Prezes Urzędu Ochrony Danych Osobowych (President of the Personal Data Protection Office), ul. Stawki 2, 00-193 Warszawa (https://uodo.gov.pl).
We have no account database, so there is no server-side “download my data” file. Device data is removed by clearing the browser or app. Requests about data held by Google or radio-browser should also go to those organisations. For anything else, email radekaz@gmail.com.
11. Children
The service is not directed at anyone under 16. We do not knowingly collect children’s data. Station content comes from third parties and is not age-filtered by us.
12. Security
We use HTTPS, keep the Gemini key on the server, rate-limit /api/interpret, and do not run a persistent user database. No measure is perfectly secure on the internet.
13. Changes
We may update this policy when the service or the law changes. The new version applies from the date it is published on this page. We will flag material changes in the interface where practical.
14. Contact
For privacy matters: radekaz@gmail.com.