Privacy Policy
Esta es una traducción. En caso de diferencia, prevalece la versión en inglés.
Last updated: October 1, 2026
The short version
We collect as little as we can. We don't run ads, we don't sell or share your personal information, and we don't track you across other websites. Google Analytics only runs if you say yes. Card details go straight to Stripe, and we never see them. Songs you keep with the heart button stay in your own browser.
Who we are
Flow Smooth Jazz ("we," "us") is an independent internet radio station based in San Diego, California, USA. This policy covers flowsmoothjazz.com, including the Spanish version of the site. Questions or requests: [email protected].
What we collect and why
1. Anonymous visit counts (always on)
When a page loads, our server records the page address, whether the page was in English or Spanish, and a daily total of visits and of distinct visitors. To count someone once per page per day, it also stores a short hash of the IP address, the browser, and the date, and deletes those hashes after a few days. This uses no cookies, we don't store your IP address, and the data can't be used to identify you. We use it to understand which pages are useful. For visitors in the EU and UK, our legal basis is our legitimate interest in running and improving the site.
2. Google Analytics (only if you accept)
If you click Accept on the cookie banner, we use Google Analytics 4 to understand how many people visit, which pages they view, and which listening platforms they choose. Google Analytics 4 does not log or store IP addresses. We have turned off Google signals and advertising features, so this data is not used for ads. If you decline, or your browser sends a Global Privacy Control signal, Google Analytics never loads. Legal basis (EU/UK): your consent, which you can withdraw at any time.
3. Songs you keep
When you tap the heart on a song, the list of songs you keep is saved only in your browser. Separately, our server records the artist, the song, the time, and whether you turned the heart on or off, together with the same kind of short daily hash, so one person is not counted twice for that song in a day. We do not store your IP address with it. Those records are how we see which music listeners keep.
4. Approximate location for concerts
To show concerts near you, we use the approximate city that our hosting provider (Cloudflare) derives from your internet connection. We use it only to choose which concerts to show, and we don't store that city. If you type a city into the concerts search, we cache that place so the search can be reused. The cache is the place name, not a record of who searched. We never ask for or collect your precise location.
5. Donations
When you donate, you enter your card details into a secure form provided by Stripe, our payment processor. Card numbers go directly to Stripe, and we never see or store them. We receive the amount, the date, the email address you enter, and the limited payment details Stripe shares with merchants (such as card type and last four digits). Stripe emails your receipt. Stripe's own privacy policy applies to the data it processes.
Legal basis (EU/UK): processing your donation, and our legal obligation to keep financial records.
6. Messages you send us
If you email us, we use your email address and message only to reply.
What we don't do
We don't run ads on this website. We don't sell your personal information or share it for cross-context behavioral advertising. We don't build profiles of you. There are no user accounts.
Cookies and browser storage
- Your cookie choice: browser storage (fsj-consent). Remembers Accept or Decline for 12 months.
- Songs you keep: browser storage (fsj_loved). Stays until you clear it.
- Language: not stored. English or Spanish follows the address you open. Spanish pages are under /es. We don't keep this in a cookie or in browser storage.
- Player preferences: browser storage for volume (fsj_vol), for Pacific time or your time zone (fsj_timemode), and whether the keep-song hint has been shown (fsj_keep_hint). Stays until you clear it.
- Google Analytics (_ga, _ga_51MRYR9H0F): cookies, only after you click Accept. They expire after up to 2 years, or when you change your choice.
- Stripe (for example __stripe_mid, __stripe_sid): set only on the donate page, to process payments securely and prevent fraud. These are strictly necessary for donating.
Services we rely on
- Cloudflare hosts the site and protects it from attacks. Like any web host, it processes your IP address to deliver pages.
- Live365 provides the audio stream and album art. When you press play, your device connects directly to Live365's servers, which receive your IP address. Live365's privacy policy applies.
- Google Analytics (only with your consent) and Stripe (only when you donate), as described above.
- Concert listings come from Ticketmaster and Bandsintown. Clicking a ticket link takes you to their sites, and their policies apply.
- Links to Mixcloud, Twitch, Kick, TuneIn, Amazon, and social networks take you to services with their own privacy policies.
Affiliate links
As an Amazon Associate we earn from qualifying purchases. Some ticket links may earn the station a small commission at no extra cost to you. These links help pay for music licensing.
How long we keep data
- Visit counts: kept as daily totals. The short hashes used to count a visitor once are deleted after a few days.
- Song hearts: the song, the time, and the daily hash are kept.
- Google Analytics data: 14 months.
- Donation records: as long as tax and accounting laws require.
- Emails: as long as needed to answer you.
Your choices and rights
- Change your analytics choice at any time with "Cookie settings" at the bottom of every page.
- We treat a Global Privacy Control signal from your browser as a choice to decline analytics.
- Anyone can ask us to access, correct, or delete personal information we hold about them by emailing [email protected]. We'll verify the request through the email address on file and respond within 30 days. Records we're legally required to keep, such as donation records, may be kept even after a deletion request, but we'll stop using them for anything else.
- California residents: under the CCPA/CPRA, you have the right to know, delete, and correct your personal information, and to not be discriminated against for using these rights. We don't sell or share personal information and don't use sensitive personal information, so there is nothing to opt out of. You may use an authorized agent to make a request.
- EU, EEA, and UK residents: you have the rights to access, correct, erase, restrict, and port your data, to object to processing, to withdraw consent, and to complain to your local data protection authority.
- Mexico residents: you may exercise your ARCO rights (access, rectification, cancellation, opposition) by emailing us.
International transfers
We are based in the United States, and our service providers process data in the US and elsewhere. Where the law requires it, they rely on safeguards such as the EU Standard Contractual Clauses.
Security
The site is served only over HTTPS, payments are handled by Stripe, and access to our systems is limited. No method of transmission or storage is perfectly secure, but we work to protect the little data we have.
Children
This site is not directed at children under 13 (under 16 in the EU and UK), and we don't knowingly collect their personal information. If you believe a child has sent us personal information, email us and we will delete it.
Changes to this policy
We'll post changes here with a new "Last updated" date. If a change materially affects how we use donors' information, we'll email donors before it takes effect.
Contact
[email protected] · Flow Smooth Jazz, San Diego, California, USA