Privacy

Privacy Policy

malt.fm
Last Updated: February 27, 2025

1. Introduction

This Privacy Policy explains how malt.fm ("we," "our," or "Service"), a non-profit hobby project, handles your information. We aim to protect your privacy and be transparent.

2. Data Controllers

The malt.fm team, individuals based in Ireland and Finland, runs the Service. It’s hosted in Germany under EU regulations.

3. Information We Collect

3.1. From Spotify Authentication:

  • User ID
  • Basic profile information
  • Premium status
  • Playback permissions

3.2. User Preferences:

  • Selected city for weather display (optional)
  • Custom background image
  • Language preference
  • Basic authentication data

3.3. We DO NOT collect:

  • Spotify listening history
  • Music preferences
  • Playlist or library content
  • Extra Spotify account data

4. Legal Basis for Processing (GDPR)

We process data under:

  • Contractual necessity (GDPR Article 6(1)(b)) – to provide the Service per the End User Agreement
  • Your consent (GDPR Article 6(1)(a)) – for optional features like weather display

5. How We Use Your Information

We use it only to:

  • Provide and maintain the Service
  • Store your preferences
  • Authenticate access
  • Operate technically

We do NOT:

  • Sell your data
  • Share with advertisers
  • Use for marketing

6. Data Storage and Security

6.1. Data is stored on secure servers in Germany.

6.2. We use reasonable measures to protect it.

6.3. Data is kept only while your account is active or as needed for the Service, then deleted unless legally required otherwise.

7. Your Rights Under GDPR

You can:

  • Access your data
  • Correct inaccuracies
  • Delete your data ("right to be forgotten")
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent anytime

Contact us at contact@malt.fm to exercise these rights.

8. Third-Party Services

8.1. Spotify Integration:

  • Authentication goes through Spotify
  • Subject to Spotify’s privacy policy
  • We request only minimal permissions

8.2. Weather Service:

  • City info is used only for weather display
  • No personal data is shared with providers

9. Data Retention

9.1. We keep your data only as long as:

  • You use the Service
  • Needed to provide it
  • Required by law

10. International Data Transfers

The Service operates in the EU, and any transfers comply with GDPR.

11. Children’s Privacy

The Service isn’t for kids under 16, and we don’t knowingly collect their data.

12. Changes to Privacy Policy

We may update this policy. Big changes will be announced via the Service.

13. Contact Information

For questions or GDPR rights, contact: contact@malt.fm