Privacy Policy

1. Information We Collect

We collect the following types of information:

• Authentication Data: Last.fm authentication tokens (encrypted)
• Usage Data: Basic logs for security and debugging purposes
• Session Data: Temporary session information while you use the service
• Technical Data: IP addresses for rate limiting and security

2. How We Use Your Information

We use your information to:

• Authenticate you with Last.fm's services
• Provide scrobbling and music tracking functionality
• Prevent abuse and ensure fair usage
• Improve the service and fix bugs
• Comply with legal requirements

3. Data Storage and Security

We implement several security measures:

• Encryption: All authentication tokens are encrypted using industry-standard encryption
• File Permissions: Token files have restrictive permissions (read/write for owner only)
• Minimal Storage: We only store data necessary for the service to function
• Session Security: Session data is temporary and cleared on logout

4. Data Sharing and Third Parties

We do not sell, trade, or otherwise transfer your information to third parties, except:

• Last.fm: We communicate with Last.fm's API on your behalf
• Legal Requirements: If required by law or to protect our rights
• Service Providers: Hosting providers that help us operate the service

5. Cookies and Tracking

We use minimal tracking:

• Session Cookies: To maintain your login state
• No Third-Party Tracking: We don't use analytics or advertising cookies
• Local Storage: Browser may cache some data for performance

6. Your Rights and Choices

You have the right to:

• Access: Request information about data we store about you
• Deletion: Request deletion of your data (logout removes most data)
• Correction: Request correction of inaccurate information
• Portability: Request your data in a readable format
• Opt-out: Stop using the service at any time

7. Data Retention

We retain data for the following periods:

• Authentication Tokens: Until you logout or revoke access
• Session Data: Until session expires or logout
• Logs: Up to 30 days for security purposes
• Cached Data: Automatically cleaned up periodically

8. Children's Privacy

This service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during such transfers.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date.

12. Last.fm's Privacy Policy

Since this service connects to Last.fm, you should also review Last.fm's Privacy Policy to understand how they handle your data.