Privacy Policy
What we collect, why we use it and how to exercise your rights.
Last updated:
Our company
Radiakias is operated by EMVADON LTD, a software company incorporated in the Republic of Cyprus. We are the controller of the personal data described in our Radiakias Privacy Policy.
Companies Register: Cyprus Department of Registrar of Companies · Registration number: HE 479085. Registered office: Dodekanisou 15B, 8028, Paphos, Cyprus.
Data we process
Accounts: email address, password hash, username, optional profile city, verification status, account timestamps and verification or password-reset tokens. We store a password hash rather than your plain-text password.
Listening and usage: station identifiers, favourites, recent listening, listening statistics, session identifiers and duration, playback/presence events, search and interface interactions, language changes and performance measurements. Supported saved data synchronises to your account when you sign in.
Network and support: requests to our service expose an IP address and browser/device information to our hosting provider. We use request information for security and rate limiting, and receive approximate city/country information for live listening activity. We also process messages you send for support, rights enquiries or advertising. We do not request precise GPS location for radio listening.
Purposes and legal bases
We process data needed to provide your requested account, saved preferences and transactional email on the basis of performing our contract with you. Security, abuse prevention, operational diagnostics and proportionate service improvement rely on legitimate interests, subject to the GDPR balancing requirement and your right to object. Legal obligations and the establishment, exercise or defence of legal claims may require us to retain or disclose specific information.
Consent is required where applicable for optional cookies, similar technologies or other processing that requires it. This policy is information, not a request for blanket consent. Contacting us about an advertisement does not subscribe you to marketing emails.
Public listening activity
While you listen, the service sends presence events and its public live-activity response can include your username (or a guest alias), station, approximate city/country and last-seen time. A profile city can take precedence over the approximate network city. Your email address is not included in that activity response.
This information may be accessible even when the activity feed is not displayed on the home page. A recent-activity window is not a deletion period for stored events. Do not put sensitive information in your username or city. Contact us to object to this processing; the app currently has no dedicated switch for hiding live presence.
Cookies and browser storage
A session cookie keeps you signed in and normally expires after 30 days. Local browser storage remembers settings such as language, theme, favourites, listening history and player preferences. Signing out clears the session cookie; clearing site data in your browser removes local saved settings and may sign you out. It does not delete server-side account records.
Usage and playback events are sent to Radiakias’s own analytics endpoint. There is currently no in-app analytics opt-out control; you can contact us to exercise applicable objection or restriction rights.
Where enabled, Cloudflare Web Analytics also measures page visits and loading performance. Cloudflare states that this service does not use cookies or local storage for analytics. This is separate from Radiakias’s own listening events. Where personal data is processed for service measurement, the legitimate-interest and applicable consent rules described above apply; a cookie-free service is not automatically exempt from privacy law.
Providers and external streams
Cloudflare provides hosting, network delivery, database and image storage. Mailgun’s EU API delivers verification and password-reset emails. These providers process information needed to supply their services. We may also share necessary information with professional advisers or authorities where law or the protection of legal rights requires it.
Playing radio connects your browser directly to the broadcaster or stream host. Loading third-party logos, artwork or linked sites may also contact external providers. They receive normal connection information, including your IP address, and apply their own policies. Broadcasters may include their own advertisements in streams; we do not control those advertisements or their data practices.
Providers can operate internationally. An EU API endpoint does not mean every operation or all data remains in the EEA. Where a restricted international transfer takes place, the GDPR requires an applicable adequacy decision, appropriate safeguards such as standard contractual clauses, or another lawful transfer mechanism. Contact us for information about the safeguards applicable to your data.
Retention
We assess retention by the purpose of the data: operating an active account, keeping your requested saved data, troubleshooting and protecting the service, resolving support requests, and meeting legal obligations or defending claims. You can request deletion; legal or security reasons may justify retaining a limited record.
Stored listening events currently have no automatic expiry. Expiry of a session or the short live-activity window does not automatically erase underlying account or analytics records. This page does not promise a deletion schedule that the service has not implemented.
Your rights and complaints
Under the GDPR and applicable Cyprus law, including Law 125(I)/2018, you may request access, correction, erasure, restriction and portability where the legal conditions apply, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.
Send requests to info@emvadon.com with “Radiakias privacy” in the subject. We respond within the period required by law, normally one month, with lawful extensions where applicable. We may need to verify your identity. You may complain directly to the Cyprus Commissioner for Personal Data Protection or your local supervisory authority; contacting us first is not required.
Children and changes
Children should use Radiakias with a parent or guardian’s guidance. Do not create an account unless you can lawfully agree to the Terms, with your guardian’s involvement where required. If you believe a child’s data has been provided improperly, contact us. We do not promise that broadcaster content is suitable for children.
We may update this policy as the service changes. The updated date identifies this version. Where the law requires additional information or consent for a change, posting an updated page alone does not replace that requirement.