Privacy Policy

1. Data controller

The data controller is the publisher of Tonaliq. For any privacy request, contact privacy@tonaliq.com.

2. Data we collect

• Account data: username, email address, display name and, if you sign in with Google, the identifiers Google shares with us (name, email, profile picture).
• Content data: the tracks, covers, descriptions and comments you submit.
• Usage data: listening history, likes, follows and interactions used to operate the Service and produce statistics. IP addresses are stored in hashed form for security and fraud-prevention purposes.
• Technical data: essential cookies and similar technologies needed to keep you signed in and to run the Service.

3. Purposes and legal bases

• providing and operating the Service — performance of our contract with you;
• security, fraud prevention and abuse detection — our legitimate interest;
• handling reports and complying with legal obligations (DSA, LCEN) — legal obligation;
• improving and understanding use of the Service — our legitimate interest.

4. Service providers

We share data only with providers who help us run the Service, including:

• Contabo GmbH (Germany, EU) — hosting and storage;
• Resend — transactional email delivery;
• Google — optional sign-in, only if you choose Google authentication.

We do not sell your personal data. Where a provider processes data outside the EU, appropriate safeguards (such as Standard Contractual Clauses) apply.

5. Retention

We keep account data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain data to comply with legal obligations or to establish, exercise or defend legal claims.

6. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data;
• object to or restrict certain processing;
• request portability of the data you provided.

To exercise these rights, contact privacy@tonaliq.com. You may also lodge a complaint with the French data-protection authority (CNIL).

7. Cookies

Tonaliq uses only cookies that are strictly necessary to operate the Service (for example, to keep you signed in). We do not use advertising cookies. If we introduce non-essential cookies in the future, we will ask for your consent beforehand.

For audience measurement we use a privacy-friendly, self-hosted analytics tool (Umami) that does not use cookies and does not track individuals across sites. It collects only aggregated, anonymous usage statistics, and the data stays on our own infrastructure.

8. Changes

We may update this Privacy Policy from time to time. Material changes will be notified through the Service.