Privacy Policy

The short version

We store what's needed to learn your taste and find you music. One login cookie, no trackers, no ads, no selling data, ever. Your data lives on our own private servers in the EU. Delete your account and your data goes with it.

What we store

· Your account: email, password (only as a salted hash, we can't read it), display name, bio, link, and any profile pictures you upload.

· Your taste: songs you add as seeds, including audio files you upload or that we fetch from YouTube or SoundCloud for you, the parts you mark, and your notes about them.

· Audio fingerprints (embeddings) computed from those songs.

· Suggestions we found for you, and your verdicts on them (thumbs up, down, later).

· Listening events: when you press play, seek, or finish a song. They tell us which moments you reach for.

· Your Liked songs and playlists.

· Friends: your friend list and requests, plus a small feed of songs you add (not shared when your profile is set to private).

· Chat: your conversation with the built-in AI.

· Spotify, only if you ever connect it: access tokens and the track metadata you import.

Why we store it

To run the service you signed up for: learn your taste, find music for you, and later generate music in your taste. That is our contract with you (GDPR article 6(1)(b)). Optional extras, like connecting Spotify, run on your consent (article 6(1)(a)), which you can withdraw whenever you like.

Where it lives

On our own private servers in the European Union: a rented relay server in the EU and our own machines in Slovenia. No cloud analytics, no third-party data platforms. The one exception is chat, which travels to Anthropic; see below.

Who else touches data

· Deezer: we search their catalog and play their 30 second previews, so those requests reach Deezer's servers.

· YouTube and SoundCloud: when you paste a link or ask for a full track, we fetch it from them.

· Anthropic: messages you type in chat are sent to Anthropic's Claude to generate the reply.

· Spotify: only if you connect it, and only what the connection needs.

No advertising or analytics companies. None.

Cookies

Exactly one: the login cookie that keeps you signed in. It is strictly necessary, so there is no consent banner circus. No analytics cookies, no ad cookies, nothing cross-site.

How long

As long as your account exists. Delete your account in Settings and we erase your data from the live system immediately; it disappears from backups as they rotate out.

Your rights

You can see, download, correct, and delete your data:

· Download: Settings, "download my data" gives you a zip of everything.

· Delete: Settings, "delete my account" erases it all.

· Anything else, or if something feels wrong: darko@grator.com. We reply within a month. You can also complain to your data protection authority (in Slovenia: Informacijski pooblaščenec).

Music honesty

Your audio teaches your taste, for you alone. We never use anyone's audio to train public models, and audio from third-party catalogs is never redistributed. Anything Dihur will ever publish is generated from scratch.