Privacy policy

Last updated 12 November 2026

Taste Explorer learns your music taste from the songs you rate, to suggest new ones. This page says exactly what that involves. In short: no passwords, no email address, no ads, no trackers, and nothing is sold or shared.

Who is responsible

Taste Explorer, contact: CONTACT_EMAIL. Write to this address for anything about your data.

Without an account

Your ratings and taste profile stay in your browser (its local storage) and never reach our server. Clearing your browser's data deletes them.

With an account: what we store

• Your account: the username you chose, the public part of your passkey (it can't sign in by itself), a scrambled (hashed) copy of your recovery code, and when the account was created.
• Your taste profile: the songs you rated and the reasons you gave, your liked songs and playlists, your settings, and anything you chose to import (for example your Music library file).
• Sessions: a scrambled copy of each device's sign-in token, and when it expires.

We never store a password: passkeys don't use one. We don't ask for your email address or real name.

Why, and on what basis

• To provide the service you asked for: keeping your taste and recommending songs (contract, GDPR art. 6(1)(b)).
• To keep the service safe: we count sign-in attempts and catalog requests per network address for one minute, in memory only, to stop abuse (legitimate interest, art. 6(1)(f)). These counts are never written to disk.

Who else is involved

• Apple: your browser fetches song previews, covers and catalog searches directly from Apple, which sees your network address as with any website. See Apple's privacy policy.
• MusicBrainz and ListenBrainz (MetaBrainz Foundation): our server asks them which artists are similar, sending only artist names, never anything about you.
• Hosting: Contabo GmbH, servers in Germany. Our hosting provider stores the data on our behalf and nobody else's.

No analytics, advertising or tracking services are used, and fonts are served by us, not by Google.

How long

• Your account and profile: until you delete them.
• Sign-in sessions: 180 days, or until you sign out.
• Backups: deleted data disappears from backups within 30 days.
• Server access logs (address, page, time), for security: 14 days.

Your rights

• Get a copy of your data: Account → Export profile.
• Correct it: History lets you change or remove any rating.
• Delete everything: Account → Delete my account. It's immediate.
• You can also object, ask for restriction, or write to us at the address above. If you're unhappy with our answer, you can complain to your data protection authority (in France, the CNIL).

Cookies and browser storage

One cookie, te_session, keeps you signed in. It is necessary for the account to work, so it needs no consent. Your browser's local storage keeps your guest profile and small preferences. Nothing is used for tracking.

Age

Taste Explorer is meant for people aged 16 or over.

Changes

If this policy changes, the date above changes and important changes are shown in the app.