Data controller
The service operator controls account and service-operation data. Photos and videos are never uploaded or stored on our servers. Only playlist metadata—display names, folder/file names, playback order and settings—is saved to your account for restoration. Inquiries and administrator replies are stored privately for you and administrators. Paddle processes sales and payment information under its own privacy notice.
Data, purposes and legal bases
Email, user identifiers and authentication information (including the email and name Google provides when you use Google sign-in) support signup, login and security (contract performance and legitimate security interests). A protected device fingerprint derived from browser and device characteristics (screen, language, time zone, graphics rendering, etc.) and trial-start records enforce one trial per device (contract performance and legitimate anti-abuse interests). Subscription status, billing identifiers and paid periods support eligibility and subscription administration. IP addresses, request/error records and device/browser information may support connectivity, language selection, diagnostics and security. Inquiry details are used to respond.
Sharing and international processing
Necessary data may be shared with hosting, authentication, diagnostics and support providers. Paddle receives information needed for product sales, subscription management, payments, tax compliance and invoicing. Information may be shared with legal/accounting advisers or authorities where required by law. Processing may take place outside your country; where applicable, transfer safeguards such as adequacy decisions or standard contractual clauses are used.
Retention and security
Account information is retained while needed to provide the service. A protected device fingerprint and trial-start record, rather than raw device characteristics, are retained after account deletion while the trial program operates to prevent repeat trials. Subscription and transaction records may be kept for applicable tax/accounting retention periods or disputes. Other records are retained only as necessary, then deleted or anonymized. Encrypted transport and access controls are used, but absolute security cannot be guaranteed.
Your rights
Depending on your local law, you may request access, correction, deletion, restriction, portability, objection and withdrawal of consent. Requests are handled subject to identity verification and legal exceptions; withdrawal does not affect prior lawful processing. Korean users may complain to their relevant privacy authority; UK/EEA users may complain to their supervisory authority. Applicable GDPR requests are normally answered within one month, with notice of any legally permitted extension.
Cookies and browser storage
Essential browser storage supports authentication; cookies and local storage retain automatic or selected language preferences. The language cookie lasts up to one year. Change preferences with the language selector or clear cookies/storage in your browser; blocking them may affect login or preference persistence. The service itself does not set optional advertising or analytics cookies. Paddle checkout has its own cookie and privacy notices; external font providers may process your IP address when fonts are requested.