Privacy Policy

Last updated · 11 August 2026

This Privacy Policy explains how Cyber Bottega S.r.l. (“we”, “us”) processes personal data when you use EcoRadio (the “Service”). It applies to both Anonymous Sessions and Registered Accounts.

Table of contents

#Data Controller

The data controller for personal data processed through EcoRadio is Cyber Bottega S.r.l., Via Calcatina 6, 03034 Casalvieri (FR), Italy. For any privacy or data-protection request, contact us at hello@cyberbottega.com.

#Data We Collect

Anonymous Sessions. When you use EcoRadio without signing up, we generate an anonymous session identifier stored locally on your device, assign you a rotating alias, keep limited session data locally, and, where applicable, issue secret deletion tokens for the Whispers you publish. We also collect basic technical and security information (see “Technical Data”). No signup is required.

Registered Accounts. If you create a Registered Account we additionally process your email address, a securely hashed password (passwords are never stored in plain text), authentication information, an internal account identifier, and account preferences.

Recovery Email. An Anonymous Session may optionally be linked to a Recovery Email where this function is available, so you can recover your alias if you lose access to your device. The Recovery Email is used only for that purpose.

User Content. We process the voice recordings (Whispers), replies, likes/hearts, follows, reports and optional report descriptions, and any other content you voluntarily submit.

Location Data. Location is used to show nearby Whispers. Precise coordinates are not displayed publicly: the location associated with a Whisper is intentionally fuzzed. The default fuzzing distance is approximately 1 kilometre and the exact distance may vary. You can revoke location permission at any time through your device or browser settings.

Technical Data. IP address, browser type, operating system, device and session identifiers, timestamps, error logs, security logs and basic interaction/diagnostic data. IP addresses and technical data may be used for security, fraud prevention, abuse detection, troubleshooting and protecting the integrity of the Service.

#Legal Bases

We rely on the following legal bases under Article 6 GDPR:

Contract (Art. 6(1)(b)) — to provide the Service, host and deliver Whispers, and enable core features.
Consent (Art. 6(1)(a)) — for microphone access, precise location, push notifications, optional analytics and the optional Recovery Email. You can withdraw consent at any time without affecting the lawfulness of prior processing.
Legitimate interests (Art. 6(1)(f)) — to keep EcoRadio secure, prevent abuse, moderate content, and maintain audit records.
Legal obligation (Art. 6(1)(c)) — where applicable, to comply with Italian and EU law and respond to lawful requests.

#How We Use Personal Data

Operating the Service and authenticating users.
Publishing and playing Whispers and showing nearby content.
Sending replies, hearts and notification alerts you have enabled.
Enabling user controls (edit alias, delete content, manage permissions).
Moderating content, preventing abuse, investigating reports.
Improving reliability and performance of the Service.
Complying with legal obligations.

#Voice Recordings and AI

We do not use voice recordings to train artificial intelligence or machine-learning models without the user’s explicit consent. Voice recordings may be processed only as necessary for storage, playback, delivery, moderation, security, abuse prevention and Service functionality.

#Reporting and Moderation

Any listener may report a Whisper. Reports may include the reason, an optional description, a reporter identifier and the reported Whisper identifier. Reports are reviewed by human moderators. Moderators may hide, delete, restore or otherwise restrict content and may suspend or terminate accounts or Anonymous Sessions. Moderation records may be retained for audit and abuse-prevention purposes.

#Anonymous Deletion Links

An Anonymous Session may receive a secret deletion link for a Whisper it has published. The link contains a random token; where technically applicable only a hash of the token is stored on the server. Anyone with the link may be able to delete that Whisper. Keep the link private — we may not be able to recover a lost deletion link for you.

#Data Retention

Whispers remain available until deleted by the user or a moderator.
Deleted content is removed from the public areas of the Service and the associated audio file is removed from active storage.
A limited technical record may be retained temporarily for security and abuse prevention.
Reports, illegal-content notices, moderation records and complaints/appeals may be retained for up to 12 months.
Analytics data (where you consented) is retained by Amplitude for the retention period configured in our Amplitude account.
Account data is retained while the account remains active.
Account deletion requests should normally be completed within 30 days.
Some data may be retained longer where required by law, needed for security, or necessary to establish, exercise or defend legal claims.
Backups are rotated and overwritten according to the backup lifecycle; we cannot guarantee immediate deletion from every backup snapshot.

#Analytics (Amplitude)

With your consent, EcoRadio uses Amplitude for product analytics, to understand how EcoRadio is used, measure engagement, understand feature usage, identify technical and performance issues, and improve the Service.

Where enabled, the following categories may be processed:

screens and features used;
in-app interactions and events;
session information and timestamps;
device, browser and operating-system information;
approximate geographic information derived by the provider;
analytics identifiers (device identifier and, for signed-in users, the internal account identifier — never your email);
diagnostic and performance information.

We do not send Amplitude your voice recordings, audio files or audio URLs, Whisper or reply content, report descriptions, email addresses, Recovery Email, passwords, authentication tokens, deletion tokens or precise coordinates. Session Replay is not enabled.

The Amplitude SDK is not loaded and no analytics data is sent until you accept analytics. You can withdraw consent at any time in Settings → Privacy & analytics, without losing access to any part of the Service. We do not use analytics for advertising and we do not sell personal data.

#What “Anonymous” Means

\u201CAnonymous\u201D means your identity is not publicly displayed to other users. It does not necessarily mean that all information processed by EcoRadio is anonymous data under applicable data-protection law: we still process technical information such as IP addresses, device and session identifiers and security logs. Public Whispers never expose your email address, IP address, device identifier, authentication information or exact coordinates \u2014 the location attached to a Whisper is always fuzzed.

#International Transfers

Some providers (including Amplitude, and depending on configuration Supabase and Cloudflare) may process data outside the European Economic Area. Where that happens we rely on appropriate safeguards under Chapter V of the GDPR, such as European Commission adequacy decisions, Standard Contractual Clauses or another valid transfer mechanism agreed with the relevant provider. For details of the mechanism applying to a specific provider, contact us at hello@cyberbottega.com.

#Cookies and Similar Technologies

We may use strictly necessary cookies, local storage, session identifiers, authentication data, preference storage and local deletion tokens. Optional analytics are used only with valid consent, if implemented. See our Cookie Policy for details.

#Microphone, Location and Notifications

Microphone access is used only while you are actively recording. Location is used to provide nearby content. Notifications are optional. You can revoke any of these permissions at any time via your device or browser settings.

#Security

We apply reasonable technical and organisational measures to protect personal data, including access controls, authentication, encryption in transit, restricted administrative access, monitoring and logging, secure infrastructure providers, and moderation controls. No online service can guarantee absolute security.

#Children

EcoRadio is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16 and will take reasonable steps to remove such data if identified.

#Your Rights

Under Articles 15–22 GDPR you have the right to access, rectify, erase, restrict, port, object to processing, and withdraw any consent you have given. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

To exercise any right, email hello@cyberbottega.com. Valid requests will normally be answered within one month.

#Automated Decision-Making

EcoRadio does not make decisions producing legal or similarly significant effects based solely on automated processing.

#Legal Disclosure

We may disclose personal data where required by law, regulation, court order or a valid request from a competent authority, or where necessary to establish, exercise or defend legal claims.

#Data Protection Officer

Cyber Bottega S.r.l. has not appointed a Data Protection Officer because it is not currently required to do so under Article 37 GDPR. You may still contact us for any privacy matter at hello@cyberbottega.com.

#Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated in-app and take effect on the “Last updated” date above.

#Applicable Law

This Privacy Policy is governed by Italian law and Regulation (EU) 2016/679 (GDPR), together with other applicable data-protection laws.

#Contact

Cyber Bottega S.r.l. — Via Calcatina 6, 03034 Casalvieri (FR), Italy — hello@cyberbottega.com.

EcoRadio is a product of Cyber Bottega S.r.l., Via Calcatina 6, 03034 Casalvieri (FR), Italy. Contact: hello@cyberbottega.com.