Privacy policy

This policy explains what LIMINAL FM (“we”, “us”) collects when you use liminalfm.tech, why, who helps us process it, and the choices you have. Questions go to hello@liminalfm.tech.

What we collect

• Waitlist: your email address, an optional Spotify email (so we can add you to the pilot), where you came from if you used a tagged link (for example Instagram or a friend’s link), and the date you joined.
• Account: if you save your account, your email address and a one-time sign-in code that we store only as a hash and that expires after 10 minutes.
• Spotify, if you connect it: your Spotify user ID, access tokens (encrypted), and read-only listening signals: your top artists and recently played tracks. We ask for no permissions to control playback, edit playlists or post anything.
• Your ritual: the songs in your weekly set, what you kept or skipped, your weekly pick, optional dedications, trades, and the taste choices you make during onboarding.
• Product events: simple, anonymous counts such as “receipt saved” or “listen clicked”, tied to a drop, so we know what works.
• Technical data: your IP address is used briefly to stop spam and abuse and is not stored with your profile. We use Vercel Web Analytics, which counts page visits without cookies and without building a profile of you.

Why we use it

• To build your weekly set, remember your picks and trades, and make your receipts.
• To send the emails you asked for: waitlist confirmation, sign-in codes, account and drop emails. We don’t send marketing email you didn’t sign up for; reply to any email to stop getting them.
• To keep the service secure and working, and to understand in aggregate how it’s used.

We do not sell or rent your personal data, share it for advertising, or use it to train AI models. We don’t run ads.

Cookies

We use only the cookies we need: one to keep you signed in (lfm_sid), one to finish connecting Spotify, and a clock setting for the demo. There are no advertising or cross-site tracking cookies, so there’s no cookie banner.

Who helps us

We use a small set of providers, each only for its job: Vercel (hosting and privacy-friendly analytics), Neon (database), Resend (email) and Spotify (music data and listening, under Spotify’s own privacy policy). Your data may be processed in the United States.

How long we keep it

We keep your data while your account or waitlist spot is active. Sign-in codes expire in 10 minutes. When you delete your data, it’s removed from our database right away; backups roll off within 30 days.

Your choices and rights

• Delete everything: use “Delete my data” at the bottom of the app, or email us.
• Disconnect Spotify at any time from the app or from your Spotify account settings. Your picks stay.
• Leave the waitlist, get a copy of your data, or correct it: email hello@liminalfm.tech. We reply within 30 days.

Depending on where you live (for example under the GDPR, UK GDPR or California’s CCPA/CPRA), you may have the right to access, correct, delete or port your data, and to object to or restrict processing. We honor these requests for everyone, wherever you live, and we’ll never treat you differently for using them. You can also complain to your local data protection authority.

California residents

LIMINAL FM is based in San Diego, California. Under California law, including the CCPA as amended by the CPRA, you can ask what personal information we collect, use and disclose; ask us to delete or correct it; and limit how sensitive information is used. We do not sell or “share” personal information for cross-context behavioral advertising, and we don’t use sensitive personal information to infer anything about you, so there is nothing to opt out of. We still honor Global Privacy Control signals. The categories we collect are listed above under “What we collect”: identifiers (email address, Spotify ID), internet activity within LIMINAL FM, and the music preferences you give us. We share them only with the providers listed below, to run the service. To make a request, email us from the address on your account; we may ask you to confirm it’s you. You can also ask someone to make a request for you with your written permission.

Children

LIMINAL FM is for people 13 and older (16 and older in the EU and UK, unless a parent consents). We don’t knowingly collect data from younger children. If you think we have, email us and we’ll delete it.

Changes

If we change this policy in a meaningful way, we’ll update the date above and tell you by email or in the app before the change takes effect.