ListenFeaturesAboutDiscord

Privacy Policy

Last updated: June 22, 2026 (subject to change at any moment, for any reason, retroactively if we feel like it)

YOUR PRIVACY IS IMPORTANT TO US. OR AT LEAST, IT IS IMPORTANT TO THE REGULATORS WHO WOULD FINE US IF WE DID NOT HAVE A PRIVACY POLICY. THIS DOCUMENT EXPLAINS WHAT DATA WE COLLECT, WHY WE COLLECT IT, HOW WE USE IT, WHO WE SHARE IT WITH, AND THE VARIOUS WAYS IN WHICH YOUR PERSONAL INFORMATION TRAVERSES THE DIGITAL ECOSYSTEM WHEN YOU USE OUR SERVICE. BY USING THE SERVICE, YOU CONSENT TO THE DATA PRACTICES DESCRIBED HEREIN. IF YOU DO NOT AGREE TO THESE PRACTICES, YOU SHOULD NOT USE THE SERVICE, AND PERHAPS ALSO CONSIDER ADOPTING A LIFESTYLE OF COMPLETE DIGITAL ABSTINENCE, WHICH WE HEAR IS VERY PEACEFUL BUT INCONVENIENT FOR LISTENING TO MUSIC.

SECTION 1. SCOPE AND APPLICATION OF THIS PRIVACY POLICY AND ITS APPLICATION TO THE BROADER DIGITAL LANDSCAPE

1.1 What This Policy Covers

This Privacy Policy (the “Policy”) governs the collection, processing, storage, transmission, retention, deletion, disclosure, sharing, sale (if applicable), transfer, and any other handling of personal data, personal information, personally identifiable information, and/or any other data, information, or content that could be used to identify, contact, locate, track, profile, analyze, or otherwise characterize a natural person (a “Data Subject”) by or through the Service. This Policy applies to all Users of the Service and to all individuals whose data is collected, processed, or otherwise handled in connection with the operation of the Service, whether or not such individuals are themselves Users of the Service.

1.2 What This Policy Does Not Cover

This Policy does not cover the data collection, processing, storage, transmission, retention, deletion, disclosure, sharing, sale, transfer, or other handling practices of any third-party services, platforms, websites, applications, integrations, APIs, SDKs, libraries, frameworks, or other technologies that may be embedded in, linked to, integrated with, or otherwise connected to the Service. For information regarding the privacy practices of such third parties, please refer to their respective privacy policies. The Operators expressly disclaim any and all responsibility for the privacy practices of any third party, and you are advised to review the privacy policies of any third-party services you interact with through the Service.

SECTION 2. DATA CONTROLLER AND CONTACT INFORMATION AND THE ENTITY RESPONSIBLE FOR ALL THIS DATA MANAGEMENT

2.1 Identity of the Data Controller

The data controller responsible for the collection, processing, and other handling of your personal data in connection with the Service is the Operators (as defined in the Terms of Service). The Operators may be contacted through the official Discord server, accessible at https://fm.erlc.dev/discord. The Operators may, from time to time and in their sole discretion, designate a Data Protection Officer (DPO), Privacy Officer, or other responsible individual, but are under no obligation to do so and make no representation that such a designation exists at any given time.

2.2 Jurisdictional Considerations

The Operators are based in the Republic of Serbia. The Service is hosted on infrastructure located in various jurisdictions, including but not limited to the United States, the European Union, and other locations as determined by the Operators' hosting providers from time to time. By using the Service, you acknowledge and agree that your personal data may be transferred to, stored, processed, and otherwise handled in jurisdictions outside of your country of residence, including jurisdictions that may have data protection laws that differ from those in your country of residence. The Operators will take reasonable steps to ensure that your data is treated securely and in accordance with this Policy, but make no representation or warranty that the data protection laws of any jurisdiction where your data may be processed provide an adequate level of protection as determined by the laws of your jurisdiction.

SECTION 3. TYPES OF DATA COLLECTED AND THE COMPREHENSIVE INVENTORY OF EVERY SCRAP OF INFORMATION WE MAY ACCIDENTALLY OR INTENTIONALLY GATHER

3.1 Information You Voluntarily Provide

You may voluntarily provide certain information to the Operators when you interact with the Service. This information may include, but is not limited to:

  • Discord Username and Discord ID: When you interact with the Discord bot, submit music requests, participate in community discussions, or otherwise engage with the Service through Discord, we may collect your Discord username, Discord user ID, Discord display name, Discord avatar URL, and any other information you choose to share through the Discord platform. This information is collected through Discord's API and is subject to Discord's own privacy practices and your Discord privacy settings.
  • Music Requests and Voting Data: When you submit a music request or vote on a requested song through any available channel (including but not limited to the Discord bot, the web interface, the API, or any other feature), we collect the details of your request, including the song title, artist name, and any associated metadata, along with the timestamp of your request and any identifier associated with your User account or session.
  • Communications: Any communications you send to the Operators, including but not limited to emails, Discord direct messages, Discord support tickets, forum posts, feedback forms, bug reports, feature requests, or other messages, may be retained by the Operators for the purpose of processing your inquiry, improving the Service, and maintaining records of communications.
  • User Preferences: Any preferences, settings, configurations, or customizations you set within the Service, including but not limited to audio volume levels, mute state, preferred genres, notification preferences, theme selections, and any other configurable options.

3.2 Information Collected Automatically

When you access or use the Service, certain information is collected automatically through various technologies, including but not limited to server logs, analytics services, cookies, web beacons, tracking pixels, device fingerprinting, browser fingerprinting, and other tracking mechanisms. This automatically collected information may include, but is not limited to:

  • IP Address: Your Internet Protocol (IP) address, which may be used to determine your approximate geographic location (at the city, region, or country level), to diagnose technical issues, to prevent abuse, to enforce rate limits, and for server log purposes. IP addresses are typically stored in server logs for a period of time before being aggregated, anonymized, or deleted.
  • Standard Server Log Data: Information automatically collected by the server infrastructure, including but not limited to the date and time of your request, the pages or resources accessed, HTTP status codes, referral URLs, user agent strings (which may indicate your browser type and operating system), and request method.

3.3 Information from Third-Party Sources

The Operators may receive information about you from third-party sources, including but not limited to:

  • Discord: If you are an authorized administrator accessing the admin dashboard, Discord provides your Discord user ID, username, display name, and avatar URL through OAuth2 authentication. For regular Users interacting with the Discord bot, the Operators receive your Discord user ID, username, and the content of your commands and messages as necessary for the bot to function.
  • Google/YouTube: The Service uses the YouTube Data API v3 and YouTube Embedded Player. When the Service searches for songs or plays YouTube videos, certain information is exchanged with Google/YouTube in accordance with their privacy policies. The Operators do not control what information Google/YouTube collects and recommend that you review the Google Privacy Policy for more information.
  • Groq: The Service utilizes Groq's AI API (powered by the Llama language model) to generate song suggestions and to check whether songs are family-friendly. Song titles, artist names, and moderation prompts are sent to Groq for processing. Groq does not receive any personal information about Users.
  • LrcLib: The Service fetches song lyrics from LrcLib.net by sending the current song title and artist name. No personal information is transmitted to LrcLib.

SECTION 4. PURPOSES OF DATA PROCESSING AND THE MULTITUDE OF REASONS WHY WE NEED YOUR INFORMATION TO KEEP THE MUSIC PLAYING

4.1 Primary Processing Purposes

The Operators collect, process, store, and otherwise handle your personal data for the following purposes, each of which constitutes a legitimate interest, contractual necessity, legal obligation, and/or basis for processing under applicable data protection laws:

  • Service Provision and Operation: To provide, operate, maintain, deliver, and improve the Service, including but not limited to streaming audio content, processing music requests, managing the playlist queue, operating the Discord bot, maintaining the web interface, and ensuring the technical functionality and performance of all features and components of the Service.
  • Technical Support and Maintenance: To provide technical support, troubleshooting, bug fixes, maintenance, updates, upgrades, and other technical services necessary to keep the Service operational, secure, and functional.
  • Analytics and Improvement: To analyze usage patterns, listening trends, user behavior, and other aggregated or anonymized data for the purpose of improving the Service, optimizing the AutoDJ algorithm, enhancing the user experience, developing new features, and making data-driven decisions about the direction and evolution of the Service.
  • Personalization: To personalize your experience on the Service, including but not limited to recommending music based on your listening history, remembering your preferences and settings, and tailoring the content and features of the Service to your interests and usage patterns.
  • Communication: To communicate with you regarding the Service, including but not limited to responding to your inquiries, sending service announcements, providing technical notices, updating you about changes to the Service or these policies, and sending administrative messages.
  • Security and Abuse Prevention: To detect, prevent, investigate, mitigate, and address security threats, fraudulent activity, abusive behavior, policy violations, terms of service violations, illegal activity, and any other conduct that may harm the Service, the Operators, other Users, or third parties.
  • Legal Compliance: To comply with applicable legal obligations, regulatory requirements, court orders, subpoenas, law enforcement requests, and other legal processes, and to establish, exercise, or defend legal claims.

4.2 Secondary and Ancillary Processing Purposes

In addition to the primary purposes described above, the Operators may process your personal data for the following secondary and ancillary purposes:

  • Aggregate Data Analysis: The Operators may aggregate, anonymize, de-identify, or otherwise strip personal data of identifying characteristics for the purpose of generating statistical analyses, trend reports, market research, benchmarking data, and other analytical products that do not identify individual Data Subjects. Such aggregated and anonymized data may be used for any purpose permitted by applicable law, including but not limited to sharing with third parties, publishing research, and improving industry-wide practices.
  • Backup and Disaster Recovery: The Operators may create backup copies of data, including personal data, for the purpose of ensuring business continuity, disaster recovery, data restoration, and system resilience. Backup data may be retained for longer periods than active data and may be stored in different locations and on different media than primary data.
  • Archival and Record-Keeping: The Operators may retain certain data for archival, historical, record-keeping, evidentiary, and audit purposes in accordance with applicable legal requirements and the Operators' internal data retention policies.

SECTION 5. LEGAL BASES FOR PROCESSING AND THE COMPLICATED FRAMEWORK THAT MAKES ALL THIS DATA COLLECTION TECHNICALLY LEGAL

5.1 Legal Bases Under Applicable Law

The Operators process your personal data on the following legal bases, to the extent required by applicable data protection laws (including but not limited to the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA), and other similar laws):

  • Contractual Necessity: Processing is necessary for the performance of a contract with you (the Terms of Service) or to take steps at your request prior to entering into such a contract. This includes processing necessary to provide the Service, process your requests, and manage your account.
  • Legitimate Interests: Processing is necessary for the legitimate interests of the Operators or third parties, except where such interests are overridden by your interests or fundamental rights and freedoms. The Operators' legitimate interests include: operating and improving the Service; ensuring the security and integrity of the Service; analyzing and understanding usage patterns; preventing fraud and abuse; and exercising and defending legal rights.
  • Consent: Where required by applicable law, the Operators will obtain your consent prior to processing your personal data for certain purposes, including but not limited to the placement of non-essential cookies and the processing of sensitive personal data. You have the right to withdraw your consent at any time, although such withdrawal will not affect the lawfulness of processing based on consent prior to its withdrawal.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which the Operators are subject, including but not limited to obligations under applicable data protection laws, tax laws, record-keeping laws, and law enforcement requests.

SECTION 6. DATA SHARING, DISCLOSURE, TRANSFER, AND THE WEB OF THIRD-PARTY RELATIONSHIPS THAT YOUR DATA NAVIGATES

6.1 Data Sharing with Service Providers

The Operators may share your personal data with third-party service providers, vendors, contractors, consultants, and other partners who perform services on behalf of the Operators (collectively, “Service Providers”). These Service Providers may include, but are not limited to:

  • Cloud Hosting and Infrastructure Providers: Including but not limited to Render, which hosts the Service, stores data, and provides computing resources, networking, and related technical services.
  • Database Providers: Including but not limited to MongoDB and MongoDB Atlas, which store and manage persistent data for the Service.
  • File Storage Providers: Including but not limited to Supabase, which provides file storage and hosting for uploaded assets.
  • AI/ML Service Providers: Including but not limited to Groq, which processes song suggestions and content moderation prompts through the Llama language model.
  • Communication Platforms: Including but not limited to Discord, which facilitates community interaction, support, and communication between Users and the Operators.
  • Content Delivery Networks (CDNs): Including but not limited to services that distribute static assets and resources to Users around the world to improve performance and reduce latency.

The Operators require all Service Providers to implement appropriate technical and organizational measures to protect your personal data and to process such data only in accordance with the Operators' instructions and for the specific purposes described in this Policy. However, the Operators make no representation or warranty regarding the data practices of any Service Provider and recommend that you review the privacy policies of any Service Provider that you interact with directly.

6.2 Data Sharing with Law Enforcement and Regulatory Authorities

The Operators may disclose your personal data to law enforcement agencies, regulatory authorities, government agencies, courts, tribunals, or other authorized bodies if the Operators believe in good faith that such disclosure is: (a) required by applicable law, regulation, legal process, or governmental request; (b) necessary to establish, exercise, or defend legal claims; (c) necessary to protect the rights, property, or safety of the Operators, Users, or third parties; (d) necessary to investigate, prevent, or take action regarding suspected illegal activity, fraud, security incidents, or Terms of Service violations; or (e) otherwise permitted or required by law. The Operators may, but are not obligated to, notify you of such disclosure unless prohibited by law or court order.

6.3 No Sale of Personal Data

THE OPERATORS DO NOT SELL YOUR PERSONAL DATA TO THIRD PARTIES.The Operators do not engage in the exchange of personal data for monetary consideration, barter, trade, or any other form of commercial transfer that would constitute a “sale” under applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA). The Operators may, however, share anonymized, aggregated, or de-identified data that does not constitute personal data with third parties for any purpose permitted by applicable law.

6.4 Data Sharing in Connection with Business Transfers

In the event of a merger, acquisition, reorganization, restructuring, sale of assets, bankruptcy, insolvency, dissolution, or other business transaction involving the Operators or the Service, your personal data may be transferred, sold, assigned, or otherwise conveyed to the acquiring or surviving entity as part of such transaction. The Operators will use reasonable efforts to ensure that the acquiring or surviving entity honors the commitments made in this Policy, but make no representation or warranty regarding the privacy practices of any such entity. You will be notified via the Service or through other appropriate channels of any such transfer and any changes to this Policy that may result therefrom.

SECTION 7. DATA RETENTION AND THE INEVITABLE PASSAGE OF TIME THAT EVENTUALLY CONSUMES ALL DATA, MUCH LIKE ALL THINGS

7.1 Retention Periods

The Operators retain your personal data for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. The specific retention periods for different categories of data are determined based on the following criteria:

  • Account Data: Data associated with your account or identifier is retained for the duration of your active use of the Service and for a reasonable period thereafter, not to exceed twelve (12) months from your last interaction with the Service, unless you request earlier deletion.
  • Server Logs: Server log data, including IP addresses, is typically retained for a period of thirty (30) to ninety (90) days before being aggregated, anonymized, or deleted, unless required to be retained longer for security investigations or legal proceedings.
  • Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely for historical and statistical purposes.
  • Communication Records: Records of communications with the Operators may be retained for the duration of the relevant matter and for a reasonable period thereafter, not to exceed thirty-six (36) months.
  • Backup Data: Data stored in backup systems may be retained for the operational life of the backup medium plus a reasonable transition period, not to exceed twenty-four (24) months from the date of backup creation.

7.2 Data Deletion

Upon the expiration of the applicable retention period, or upon your valid request for deletion (subject to the limitations described in Section 8), the Operators will delete, destroy, anonymize, or otherwise render your personal data unreadable, unrecoverable, and unprocessable, to the extent technically feasible and in accordance with industry-standard data sanitization practices. The Operators acknowledge that complete deletion of data from all systems, including backup systems, may not be technically feasible and that residual copies of data may remain in backup media, server logs, and other archival systems for a reasonable transition period.

SECTION 8. YOUR RIGHTS AND THE VARIOUS LEGAL ENTITLEMENTS YOU MAY POSSESS DEPENDING ON WHERE YOU LIVE AND HOW AGGRESSIVE YOUR LOCAL DATA PROTECTION AUTHORITY IS

8.1 General Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data under applicable data protection laws. These rights may include, but are not limited to:

  • Right of Access: The right to request confirmation of whether the Operators process your personal data and, if so, to request access to such data, including a copy of the data being processed and information about the purposes of processing, the categories of data involved, the recipients of the data, the retention period, and your other rights.
  • Right to Rectification: The right to request the correction of inaccurate or incomplete personal data that the Operators hold about you.
  • Right to Erasure (Right to be Forgotten): The right to request the deletion of your personal data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw your consent and there is no other legal basis for processing; (c) you object to processing and there are no overriding legitimate grounds; (d) the data has been unlawfully processed; (e) the data must be deleted to comply with a legal obligation; or (f) the data was collected in relation to the offer of information society services to a child.
  • Right to Restriction of Processing: The right to request the restriction of processing of your personal data where: (a) you contest the accuracy of the data; (b) the processing is unlawful and you oppose deletion; (c) the Operators no longer need the data but you require it for legal claims; or (d) you have objected to processing pending verification of whether the Operators' legitimate grounds override your rights.
  • Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit such data to another controller, where: (a) the processing is based on consent or contract; and (b) the processing is carried out by automated means.
  • Right to Object: The right to object, on grounds relating to your particular situation, to processing of your personal data based on legitimate interests or for direct marketing purposes. The Operators will cease processing unless they demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
  • Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw such consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
  • Right to Lodge a Complaint: The right to lodge a complaint with a competent data protection authority if you believe that the processing of your personal data violates applicable data protection laws.

8.2 How to Exercise Your Rights

To exercise any of the rights described in this Section, please contact the Operators through the official Discord server. The Operators will respond to your request within the timeframe required by applicable law, typically thirty (30) days, unless a longer or shorter period is specified by applicable law or the Operators determine that additional time is necessary due to the complexity or volume of the request. The Operators may require you to verify your identity before processing your request and may request additional information reasonably necessary to locate the specific data you are requesting. The Operators reserve the right to charge a reasonable fee for excessive, repetitive, or manifestly unfounded requests, or to refuse to act on such requests, to the extent permitted by applicable law.

8.3 Limitations on Rights

The rights described in this Section are not absolute and may be subject to limitations, exceptions, and exemptions under applicable data protection laws. The Operators may decline to act on a request where: (a) the request is manifestly unfounded or excessive; (b) compliance would adversely affect the rights and freedoms of other individuals; (c) compliance would require the disclosure of confidential or proprietary information; (d) the data cannot be attributed to you with reasonable certainty; (e) the data is subject to legal privilege or professional secrecy obligations; (f) the data is retained for the establishment, exercise, or defense of legal claims; (g) the request relates to data that has been anonymized or aggregated such that you can no longer be identified; or (h) other limitations or exemptions under applicable law apply.

SECTION 9. DATA SECURITY AND THE TECHNICAL AND ORGANIZATIONAL MEASURES THAT WE HOPE ARE SUFFICIENT TO PREVENT A DATA BREACH

9.1 Security Measures

The Operators implement reasonable and appropriate technical and organizational security measures designed to protect your personal data against accidental, unauthorized, or unlawful destruction, loss, alteration, disclosure, access, acquisition, or processing. These measures include, but are not limited to:

  • Encryption of data in transit using TLS/SSL protocols;
  • Encryption of data at rest where technically feasible and appropriate;
  • Access controls, authentication mechanisms, and authorization procedures for personnel and systems that access personal data;
  • Regular security assessments, vulnerability scans, and penetration testing;
  • Incident response plans and procedures for addressing security breaches and data incidents;
  • Data minimization practices, including collecting only the data necessary for the purposes described in this Policy;
  • Employee training on data protection and security best practices;
  • Physical security measures for data centers and infrastructure hosting the Service;
  • Regular review and update of security measures in response to evolving threats and industry standards.

9.2 No Guarantee of Security

NOTWITHSTANDING THE FOREGOING SECURITY MEASURES, THE OPERATORS CANNOT AND DO NOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR PERSONAL DATA. NO SECURITY MEASURES ARE IMPENETRABLE, AND THE OPERATORS CANNOT GUARANTEE THAT YOUR DATA WILL NOT BE ACCESSED, DISCLOSED, ALTERED, DESTROYED, OR LOST AS A RESULT OF A SECURITY BREACH, CYBERATTACK, INSIDER THREAT, HUMAN ERROR, TECHNICAL FAILURE, OR OTHER EVENT. YOU PROVIDE YOUR PERSONAL DATA AT YOUR OWN RISK, AND THE OPERATORS SHALL HAVE NO LIABILITY WHATSOEVER ARISING FROM OR RELATED TO ANY UNAUTHORIZED ACCESS TO OR USE OF YOUR PERSONAL DATA, EXCEPT AS REQUIRED BY APPLICABLE LAW.

9.3 Data Breach Notification

In the event of a data breach that affects your personal data, the Operators will comply with all applicable data breach notification laws and regulations. Without limiting the generality of the foregoing, the Operators will: (a) promptly investigate the breach and take reasonable measures to mitigate its effects; (b) notify the relevant data protection authorities as required by applicable law; (c) notify affected Data Subjects as required by applicable law, unless the breach is unlikely to result in a risk to your rights and freedoms or other exceptions under applicable law apply; and (d) cooperate with investigations by data protection authorities and law enforcement agencies. Notification to affected Data Subjects will include, to the extent reasonably available, a description of the nature of the breach, the categories and approximate number of Data Subjects affected, the contact information of the Operators' representative from whom more information can be obtained, a description of the likely consequences of the breach, and a description of the measures taken or proposed to be taken to address the breach.

SECTION 10. COOKIES AND TRACKING TECHNOLOGIES AND THE SURPRISING LACK THEREOF ON THIS PARTICULAR SERVICE

10.1 Use of Cookies and Similar Technologies

The Service itself does not set any first-party cookies, use web storage, employ tracking pixels, perform device fingerprinting, or utilize any other form of client-side tracking technology. The Operators believe in minimal data collection and have designed the Service to function without the need for persistent client-side storage. However, the Service embeds third-party content that may set their own cookies. For detailed information about the third-party cookies that may be set when you use the Service, please refer to the Cookie Policy available at /legal/cookies, which is incorporated into this Policy by reference.

SECTION 11. CHILDREN'S PRIVACY AND THE SPECIAL PROTECTIONS AFFORDED TO MINORS IN THE DIGITAL REALM

11.1 Age Restrictions

The Service is not directed to, targeted at, or intended for use by children under the age of thirteen (13). The Operators do not knowingly collect, solicit, process, store, or otherwise handle personal data from children under the age of thirteen (13). If the Operators become aware that a child under the age of thirteen (13) has provided personal data to the Service without verifiable parental consent, the Operators will take reasonable steps to delete such data from their systems and terminate the child's access to the Service. If you believe that a child under the age of thirteen (13) has provided personal data to the Service, please contact the Operators immediately through the Discord server.

11.2 Parental Consent

If you are between the ages of thirteen (13) and eighteen (18) (or the applicable age of majority in your jurisdiction), you represent and warrant that you have obtained the consent of your parent or legal guardian to use the Service and to have your personal data processed in accordance with this Policy. Parents and legal guardians are encouraged to monitor their children's internet usage and to help enforce this Policy by instructing their children never to provide personal data through the Service without parental permission.

SECTION 12. INTERNATIONAL DATA TRANSFERS AND THE JOURNEY OF YOUR DATA ACROSS BORDERS, OCEANS, AND CONTINENTS

12.1 Cross-Border Data Transfers

Your personal data may be transferred to, stored, processed, and otherwise handled in countries other than your country of residence, including but not limited to the Republic of Serbia, the United States, the European Union, and other jurisdictions where the Operators, their Service Providers, or their infrastructure are located. These countries may have data protection laws that differ from those in your country of residence, and in some cases may provide a lower level of data protection than your country of residence.

12.2 Appropriate Safeguards

Where required by applicable law, the Operators will implement appropriate safeguards to ensure that your personal data receives an adequate level of protection when transferred across borders. These safeguards may include, but are not limited to: (a) transferring data to countries that have been deemed to provide an adequate level of data protection by the European Commission or other competent authority; (b) entering into Standard Contractual Clauses (SCCs) approved by the European Commission or other competent authority with the receiving entity; (c) implementing Binding Corporate Rules (BCRs) approved by competent data protection authorities; (d) relying on approved codes of conduct or certification mechanisms; or (e) obtaining your explicit consent to the transfer after being informed of the potential risks.

SECTION 13. CHANGES TO THIS PRIVACY POLICY AND THE INEVITABILITY OF LEGAL EVOLUTION IN AN EVER-CHANGING REGULATORY ENVIRONMENT

13.1 Policy Modifications

The Operators reserve the right to modify, amend, supplement, restate, recast, revise, replace, supersede, update, change, alter, edit, correct, clarify, or otherwise change this Policy at any time, in whole or in part, for any reason or no reason, with or without notice, in the Operators' sole and absolute discretion. Such modifications shall be effective immediately upon posting the modified Policy on the Service or upon such other date as may be specified by the Operators. The Operators may, but are not obligated to, provide notice of material modifications to this Policy through the Service, via email, via the Discord server, or through other communication channels.

13.2 Your Responsibility to Review

YOU ARE SOLELY AND ENTIRELY RESPONSIBLE FOR REGULARLY REVIEWING THIS POLICY TO STAY INFORMED OF ANY MODIFICATIONS, CHANGES, UPDATES, REVISIONS, AMENDMENTS, OR ALTERATIONS. YOUR CONTINUED USE OF THE SERVICE FOLLOWING THE POSTING OF ANY MODIFIED POLICY CONSTITUTES YOUR ACCEPTANCE OF AND AGREEMENT TO BE BOUND BY SUCH MODIFIED POLICY. IF YOU DO NOT AGREE TO ANY MODIFIED POLICY, YOU MUST IMMEDIATELY DISCONTINUE ALL ACCESS TO AND USE OF THE SERVICE.

SECTION 14. COMPLIANCE WITH SPECIFIC LAWS AND THE PATCHWORK OF REGULATIONS THAT GOVERN DATA PRIVACY AROUND THE WORLD

14.1 General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the rights described in Section 8 of this Policy under the General Data Protection Regulation (GDPR) and applicable implementing laws. The Operators' legal bases for processing your personal data are described in Section 5 of this Policy. If you have any concerns about the Operators' data processing practices, you have the right to lodge a complaint with your local data protection authority. The Operators' representative in the EEA for data protection purposes can be contacted through the Discord server.

14.2 California Consumer Privacy Act (CCPA)

If you are a resident of the State of California, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights include: (a) the right to know what personal information the Operators collect about you; (b) the right to request disclosure of the categories and specific pieces of personal information collected, the sources of such information, the purposes for which it is collected, and the categories of third parties with whom it is shared; (c) the right to request deletion of your personal information; (d) the right to opt out of the sale of your personal information (the Operators do not sell personal information); and (e) the right to non-discrimination for exercising your CCPA rights. To exercise your CCPA rights, please contact the Operators through the Discord server.

14.3 Virginia Consumer Data Protection Act (VCDPA)

If you are a resident of the Commonwealth of Virginia, you have certain rights under the Virginia Consumer Data Protection Act (VCDPA), including the rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise your VCDPA rights, please contact the Operators through the Discord server.

14.4 Other Applicable Laws

If you are a resident of Colorado, Connecticut, Utah, or any other jurisdiction with applicable data protection laws, you may have additional rights under such laws. The Operators will comply with all applicable data protection laws to the extent required and will honor valid requests made under such laws. The Operators make no representation that this Policy complies with the laws of any particular jurisdiction and recommend that you consult with legal counsel if you have questions about your rights under applicable law.

SECTION 15. CONTACT INFORMATION AND THE DETAILED INSTRUCTIONS FOR REACHING THE PERSON WHO MAY OR MAY NOT BE ABLE TO HELP YOU WITH YOUR PRIVACY CONCERNS

15.1 How to Contact Us

If you have any questions, concerns, comments, requests, complaints, grievances, or other communications regarding this Privacy Policy, the Operators' data practices, your personal data, or your rights under applicable data protection laws, please contact the Operators through the official Discord server, accessible at https://fm.erlc.dev/discord. The Operators will make reasonable efforts to respond to your inquiry within a reasonable timeframe, but make no commitment to respond within any particular period or at all.

15.2 Response Timeframe

The Operators aim to respond to privacy-related inquiries within thirty (30) days of receipt. For complex or high-volume requests, the Operators may extend this period by an additional sixty (60) days upon notifying you of the extension and the reasons therefor. The Operators may require you to verify your identity before processing your request and may request additional information reasonably necessary to locate or identify the specific data or issue you are inquiring about. The Operators reserve the right to charge a reasonable fee for excessive, repetitive, or manifestly unfounded requests, or to refuse to act on such requests, to the extent permitted by applicable law.

This Privacy Policy was written with the understanding that privacy is important, but also with the understanding that nobody actually reads these things, so we tried to make it as comprehensive and boring as possible while still technically complying with the various data protection laws that apply to a small community radio station that just wants to play music for people who like emergency vehicle simulators. If you actually read this entire document, congratulations. You are in the top 0.1% of users. Treat yourself to a cookie. Not a tracking cookie, an actual edible one.