Privacy Policy
Last updated: 30 September 2026
67fm has no accounts and no tracking. Listening is anonymous. If you pay to put a song on air, we keep what is needed to play it and to keep the payment records the law asks for. This page explains exactly what, why, and what you can ask us to do.
1. Who is responsible
ZOOMERS NETWORK LGTM S.R.L. (CUI 51548084) is the controller of your personal data on 67fm. Write to contact@67fm.app for any question or request about your data. Our full details are on the company details page. We have not appointed a data protection officer; we are not required to.
2. If you just listen
- Listener count: your browser makes up a random code each time you open the page and sends it to us every 3 seconds, so we can show how many people are listening. It is not stored in a cookie, it changes every time you reload, and we keep it in memory for about 12 seconds after your last visit. It is not linked to you in any other way.
- Server logs: like every website, our hosting providers Cloudflare and FastAPI Cloud receive your IP address and browser details with each request, and keep standard logs for security and troubleshooting.
- YouTube: YouTube's player loads only when you tap Tune in, in YouTube's privacy-enhanced mode. From then on your browser connects to Google, which receives your IP address and may set its own cookies or storage. Before you tune in, nothing on the page loads from Google: our fonts are hosted by us and video thumbnails come through our own domain. See section 5 and our cookie page.
We use no analytics, no advertising and no tracking of our own, and we do not sell anything about anyone.
3. If you pay to put a song on air
- At Stripe: Stripe's checkout page collects your email address, your card or other payment details, and your billing country. Your card details go straight to Stripe; we never see them. We can see in Stripe the email address, the amount, the payment status and the country, as needed to handle the payment and any refund.
- In our database: the YouTube video you chose (its ID and title), your bid, the display name you typed, when you paid and when it aired, and a reference that links the song to its Stripe checkout.
- Your display name is public. It is shown to everyone on air and in the queue. It is optional; leave it empty and we show "anon". Please do not type your full name or contact details if you do not want them seen.
4. Why we use it, and on what legal basis
| What we do | Data | Legal basis (GDPR) |
|---|---|---|
| Queue and play your song, show your display name, confirm payment, refund when a song does not air | Song, bid, display name, times, Stripe reference and payment details | Contract, Art. 6(1)(b) |
| Keep payment and accounting records | Amount, date, Stripe reference, billing country, email on the receipt | Legal obligation, Art. 6(1)(c), Romanian accounting and tax law |
| Count listeners | The random code, for about 12 seconds | Legitimate interest in showing a live listener count, Art. 6(1)(f) |
| Keep the site running and safe, stop abuse and payment fraud | IP address, browser details, request logs; Stripe's fraud checks | Legitimate interest in security, Art. 6(1)(f) |
| Answer your emails and handle reports, disputes and legal claims | What you write to us and your email address | Legitimate interest, Art. 6(1)(f); contract where it is about your payment |
Nothing on 67fm makes automated decisions about you, and we do not build profiles.
5. Who else receives data
These companies help us run 67fm and handle data only on our instructions, under data processing terms:
- Cloudflare serves the website, runs our domain and forwards email sent to contact@67fm.app.
- FastAPI Cloud runs our server.
- Supabase hosts our database, in the European Union (Ireland).
- Zoho hosts the mailbox our email is forwarded to, in the European Union.
These companies act for their own purposes too, as separate controllers, under their own privacy policies:
- Stripe processes your payment, and uses payment data for fraud prevention and its own legal duties: Stripe Privacy Policy.
- Google / YouTube runs the embedded player (loaded only when you tune in), supplies the video thumbnails (fetched through our own domain, so Google does not see your IP for them) and the YouTube API Services we use to look up songs. When you use the player, YouTube's own terms apply: YouTube Terms of Service and Google Privacy Policy. We send the YouTube API only the video ID, never anything about you.
The full list, with what each receives and where, is on the sub-processors page. We may also share data with authorities when the law requires it.
6. Data outside the European Union
Some of these companies are based in, or can access data from, the United States. Where that happens, the transfer is protected by the EU-US Data Privacy Framework for companies certified under it, or by the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards at contact@67fm.app.
7. How long we keep it
- Listener code: about 12 seconds, in memory only.
- Display name: 30 days after your song airs, then it is replaced with "anon".
- Song, bid, times and Stripe reference: as part of the payment record, for as long as Romanian accounting law requires (up to 10 years).
- A checkout you started but did not pay for: deleted within 24 hours.
- Stripe's records: kept by Stripe for the periods it sets and the law requires.
- Server logs: our hosting providers' standard period.
- Emails to us: as long as needed to deal with them, then deleted within 2 years, unless needed for a legal claim.
8. What you can ask for
You can ask to see the data we hold about you, get a copy, correct it, delete it, or limit how we use it. You can also object to anything we do based on legitimate interest. Because there are no accounts, we find your data through your payment: write to contact@67fm.app from the email address you used at Stripe checkout, and tell us roughly when you paid and which song it was. We reply within one month.
Some things we cannot delete while the law requires us to keep them, such as payment records; we will tell you when that applies. Listeners who did not pay: we hold nothing that could identify you, beyond the providers' short-lived server logs.
If you are unhappy with how we handled your data, you can complain to the Romanian data protection authority, ANSPDCP, at dataprotection.ro, or to the authority in the EU country where you live or work.
9. Keeping it safe
Everything travels over HTTPS, card details never reach us, and our database is only reachable by our own server. If you spot a security problem, please tell us at contact@67fm.app.
10. Children
Anyone can listen. Paying is for people 18 or older, or with a parent's permission. We do not knowingly collect data about children beyond what the payment itself needs.
11. Changes to this page
If we change how we use your data, we update this page first and change the date at the top.