Privacy Policy
Last updated · July 2026
Data controller
The data controller for personal data processed through EcoRadio is Cyber Bottega SRL, a company incorporated in Italy. You can contact us at privacy@ecoradio.app for any privacy or data-protection request.
What we collect
EcoRadio supports two ways to use the service. In anonymous mode we create an anonymous session on your device — no signup required — and assign you a rotating alias. If you create an EcoRadio account, we additionally collect your email address and a hashed password so you can sign back in from any device. In both modes we collect the voice recordings you choose to share, the approximate location you grant us for those recordings, and basic device/technical data (browser, OS, IP address, timestamps) needed to deliver the service and prevent abuse. We never ask for your real name and we do not collect your contacts.
Legal bases (GDPR Art. 6)
We process your data on the following legal bases: performance of the contract to provide the EcoRadio service (Art. 6(1)(b)); your consent for microphone, precise location, push notifications, optional analytics, and the optional recovery email (Art. 6(1)(a)); and our legitimate interest in keeping EcoRadio safe, secure, and free from abuse (Art. 6(1)(f)). You can withdraw consent at any time without affecting prior processing.
How we use it
Audio you record is published to your local feed so nearby listeners can hear it. Your fuzzed location is used only to match you with nearby whispers. Aggregate, anonymized signals help us improve the experience. You can delete any whisper you've posted at any time from Settings.
Reporting and moderation
Any listener can report a whisper. Reports include the reason, an optional short description, the reporter's user or session identifier, and the reported whisper's ID. Reports are reviewed by human moderators employed by or acting on behalf of Cyber Bottega SRL and may lead to a whisper being hidden, deleted, or an account being suspended. We keep report metadata and moderation actions for the retention period configured in the app (typically 12 months) for audit and abuse-prevention purposes, in reliance on our legitimate interest (Art. 6(1)(f)).
Deletion links
When you post a whisper anonymously the app can generate a secret deletion link stored locally on your device. That link contains a random token whose hash — not the token itself — is stored on our servers. Anyone with the link can delete that specific whisper without signing in. We recommend saving the link somewhere safe; we cannot recover it for you.
Retention
Your whispers and their replies are kept until you or an EcoRadio moderator delete them — you can remove any single whisper, or all of your whispers at once, from Settings. Deleted whispers are removed from the feed, map, profile, search, nearby results, and public links immediately, and the underlying audio file is removed from storage. A tombstone row may be retained for a short period to prevent re-uploads of the same abusive content. Your account (anonymous or email-based) is kept while it is active; if you delete your account, associated whispers, replies, hearts, and follows are removed. Report and moderation records are kept for up to 12 months. Backups are rotated regularly and eventually overwritten.
Sharing and international transfers
We share data only with infrastructure processors strictly necessary to operate EcoRadio — currently Supabase (database, authentication, storage) and Cloudflare (hosting, CDN). Where data is transferred outside the EEA we rely on Standard Contractual Clauses and supplementary safeguards. We do not sell your data and we do not share it with advertisers.
Optional recovery email
If you use EcoRadio anonymously you can optionally link an email from Settings to recover your alias if you lose your device. If you sign up with email and password, that email is your account identifier and is used for authentication, password reset, and important service notices. Emails are never displayed publicly, never attached to your whispers, and never used for marketing. You can change or remove your email at any time.
Cookies and analytics
We use strictly necessary browser storage (cookies and localStorage) to keep you signed in, remember your preferences, and store your local deletion tokens. With your consent we may enable privacy-respecting, aggregate analytics that do not identify you. See our Cookie Policy for details.
Microphone, location, and notifications
Microphone access is only used while you are actively recording a whisper. Location is requested to show nearby whispers and is fuzzed to roughly 1 km by default. Push notifications are opt-in and used only for replies, hearts, and nearby-whisper proximity alerts you've enabled. You can revoke any of these from your device settings at any time.
What we never do
We never sell your data, build advertising profiles, or expose your precise location. Voice softening is on by default to make voiceprint identification harder.
Your GDPR rights
Under EU GDPR Articles 15–22 you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw any consent you have given. You also have the right to lodge a complaint with your local supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it). To exercise any right, email privacy@ecoradio.app and we will respond within one month.
Your in-app controls
From Settings you can reroll your alias, delete any single whisper or every whisper you've ever made, unlink your recovery email, delete your account entirely, revoke microphone or location at any time, and request a full export of your data.
Contact
Questions about privacy? Reach Cyber Bottega SRL — the data controller behind EcoRadio — at privacy@ecoradio.app.
This is a placeholder for legal review. Replace with your final approved copy before public launch.