Skip to content
Sink

Privacy Policy

Last updated: October 1, 2026

1. Who We Are

SINK (‘we’, ‘us’, ‘our’) operates a curated internet radio service. This policy explains what personal data we collect, why we use it, how long we keep it, and how you can exercise your rights.

2. Information We Collect

We collect the following categories of data:

  • Account data — email address, display name, timezone, password hash, sign-in provider identifiers, account timestamps, and avatar references.
  • Listening history — stations you've listened to and the first and most recent listening times, so you can find them again and resume your last station across devices.
  • Media data — avatar metadata and storage keys for user-owned images.
  • Session data — session records, client category, device label, and lifecycle timestamps. We do not store raw IP addresses or user-agent strings in session records.
  • Signed-out browse data — local player and interface state stored in your browser before sign-in.
  • Subscription data — internal access plan, subscription status, relevant trial or period timestamps, and, when you buy a paid plan, purchase identifiers received from our payment providers (for example an app user ID and transaction identifier) linked to your account. We never store your full card details.
  • Security records — a log of changes to your account's security (password, email, linked Google or Apple sign-in, sign-outs, data export and deletion) and when they happened. No IP addresses or device details.
  • Operational data — route paths, timestamps, request metadata, diagnostic logs, and performance metrics needed to secure and operate the Service.

3. How We Use Your Data

  • To provide authentication, profiles, player continuity, station playback, and account settings.
  • To allow signed-out browsing and keep player preferences on this device.
  • To secure accounts, detect abuse, investigate incidents, and retain evidence of sensitive actions.
  • To track your plan and subscription status.
  • To operate, debug, and improve reliability using logs and performance monitoring.
  • To meet legal obligations and respond to data-subject requests.

We don't send marketing or product-update email.

4. Legal Bases

We process account, authentication, playback, and subscription data to provide the Service you request. We process security, audit, and operational data based on our legitimate interests in protecting the Service and its users.

5. Payments

When you buy a paid plan, SINK never receives or stores your full card details. In the iOS app, purchases go through Apple in-app purchase, mediated by RevenueCat, which manages your subscription and reports its status and purchase identifiers back to us. On the web, checkout and subscription billing are handled by Creem as merchant of record. We link a purchase to your account with an internal account identifier, not your payment details.

6. Data Sharing and Processors

We do not sell your personal data. We share data only with:

  • Scaleway (France) — hosting, database, object storage, logs, and infrastructure monitoring, all in the EU.
  • Bunny.net — content delivery, DNS, and the web application firewall in front of the Service; it sees the network requests your browser makes to us.
  • Google and Apple — OAuth sign-in when you select one of them.
  • Lettermint (Netherlands) — EU-hosted transactional email: password, account, and security messages.
  • RevenueCat — mediates Apple in-app purchases in the iOS app: it manages your subscription and shares its status and purchase identifiers (such as an app user ID linked to your account and the transaction identifier) with us.
  • Creem (Armitage Labs OÜ, Estonia) — merchant of record for web checkout and subscription billing: it processes your payment and the name, email and billing details you enter at checkout, and shares subscription status back to us.
  • Authorities or legal advisers — when required by law or needed to protect legal rights, users, or the Service.

Radio stations are not our processors. When you choose to play a station, SINK instructs your device to connect directly to that station's server. This discloses your IP address and the technical details of the request to the station and the providers it uses to deliver the stream. SINK determines that playback connection; after the station receives the request, it acts independently, and its further use of the data is governed by its own privacy practices. Separately, our servers occasionally contact a stream to check that it still works and to read now-playing information. Those requests come from SINK, not from your device.

7. Data Retention

  • Account, profile, player, session, subscription, and avatar records are kept while your account is active.
  • Deleting your account revokes sessions and deletes user-owned media, the account, and related account-owned records.
  • Audit events retain compact security evidence for 12 months and are then deleted; direct user references are redacted as soon as an account is deleted, well before that.
  • Operational logs and monitoring data are retained only for bounded security, reliability, and incident-response needs.
  • Signed-out browser state remains on this device until browser storage is cleared.
  • Subscription and payment records held by SINK last while your account is active; purchase identifiers received from payment providers are deleted or redacted with the account, and SINK never stores full card details. Separately, our web merchant of record (Creem) keeps its own billing and invoice records under Estonian accounting law for up to 7 years. That retention is a statutory obligation of Creem's, applies to records it holds rather than records we hold, and is not shortened by deleting your SINK account.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing. Signed-in users can export or request deletion from Settings; deletion requires recent password verification.

You can also contact us at hello@sink.fm.

9. Cookies and Browser Storage

We use necessary cookies for sessions and OAuth authentication, not advertising cookies. The app uses browser storage for player state, metadata cache, theme, preferences, signed-out browsing, and short-lived interface state. Account deletion clears user-owned browser storage.

10. Security

We use encrypted connections, access controls, token rotation, rate limits, audit events, and monitoring. We do not intentionally log passwords, raw tokens, authorization headers, cookies, request bodies, signed storage URLs, or full stream URLs with query strings. No system is completely secure.

11. International Transfers

We may process data where our infrastructure and providers operate. International transfers use appropriate contractual, technical, and organizational safeguards.

12. Changes to This Policy

We may update this policy. We will notify you of material changes by email or in the Service. Continued use after changes constitutes acceptance.

13. Contact

Questions or requests about this policy should be sent to hello@sink.fm.