RADAR / Back to App

Privacy Policy

PHASE: RADAR

Effective Date: January 7, 2026

PHASE ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use the RADAR service.

1. DATA CONTROLLER

  • PHASE – David Pinheiro
  • SIRET: 908 588 783 00039
  • Paris, France
  • Email: phase.newsletter.berlin@gmail.com

2. DATA COLLECTED

We collect the following data:

Account Data:

  • • Name and email address (from Google OAuth or registration)
  • • Profile picture (from Google OAuth, optional)
  • • Authentication tokens

Usage Data:

  • • Uploaded tracklist images (temporarily processed, then deleted)
  • • Scan history and identified tracks (for registered users)
  • • Subscription status and payment history

Technical Data:

  • • IP address
  • • Browser type and version
  • • Device information
  • • Usage logs and analytics

YOUTUBE API SERVICES

This application uses YouTube API Services to allow users to export identified tracklists to YouTube playlists.

  • • User data accessed via YouTube API is used solely for the purpose of creating playlists as requested by the user.
  • • No Data Storage: We do not store any personal data obtained from Google beyond what is strictly necessary for authentication (JSON Web Token). Your YouTube account credentials are never stored on our servers. The only YouTube API operation performed is creating playlists in your account. We do not access, read, modify, or store any other YouTube data.
  • • Please refer to the Google Privacy Policy for information on how Google handles user data.
  • • Revocation: You can revoke PHASE: RADAR's access to your data at any time via the Google security settings page.

PUBLIC TRACK & ARTIST PAGES

PHASE: RADAR builds public pages (e.g. phase-radar.app/track/... and phase-radar.app/artist/...) for tracks and artists that have been identified frequently enough across scans. These pages are indexable by search engines.

  • • What is published: only the extracted track metadata (artist name, track title). Your uploaded screenshot is never published — it is processed and then deleted (see "Usage Data" above).
  • • How a track becomes public: automatically, once it has been identified enough times across all users' scans. There is no manual review or per-user approval step.
  • • Anonymous scans: this applies whether or not you were logged in when you scanned an image.
  • • You can request that a specific track or artist entry be removed by contacting us (see "Your Rights" below).

3. PURPOSE OF DATA PROCESSING

We process your data for the following purposes:

  • • Providing and operating the Service
  • • Managing your account and authentication
  • • Processing subscriptions and payments
  • • Storing your scan history (Pro users)
  • • Improving our Service and user experience
  • • Communicating with you about your account
  • • Complying with legal obligations

4. LEGAL BASIS

Our data processing is based on:

  • • Contract performance (providing the Service)
  • • Legitimate interests (improving the Service, security)
  • • Legal obligations (tax, accounting)
  • • Your consent (where applicable)

5. DATA RETENTION

  • • Account data: Retained until account deletion
  • • Scan history: Retained until account deletion or upon request
  • • Uploaded images: Deleted immediately after processing
  • • Payment data: Retained as required by law (10 years for accounting)
  • • Analytics data: Anonymized after 26 months

6. DATA SHARING

We share your data with:

  • • Google (authentication via OAuth)
  • • YouTube (playlist creation, with your authorization)
  • • Creem (payment processing)
  • • Vercel and Render (hosting)
  • • Google Analytics (anonymized usage data)

We do not sell your personal data to third parties.

7. INTERNATIONAL TRANSFERS

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (hosting providers). These transfers are protected by Standard Contractual Clauses approved by the European Commission.

8. DATA SECURITY

We implement appropriate technical and organizational measures to protect your data, including:

  • • HTTPS encryption for all communications
  • • Secure, HTTP-only cookies for authentication
  • • Regular security updates
  • • Limited access to personal data

9. YOUR RIGHTS

Under the GDPR, you have the right to:

  • • Access your personal data
  • • Rectify inaccurate data
  • • Delete your data ("right to be forgotten")
  • • Restrict processing
  • • Data portability
  • • Object to processing
  • • Withdraw consent

To exercise these rights, contact us at: phase.newsletter.berlin@gmail.com

We will respond within 30 days.

10. COOKIES

We use cookies for:

  • • Authentication (essential)
  • • Analytics (Google Analytics)

You can manage cookie preferences through your browser settings.

11. CHILDREN'S PRIVACY

The Service is not intended for children under 16. We do not knowingly collect data from children under 16.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or site notification.

13. CONTACT

For any questions about this Privacy Policy:

Email: phase.newsletter.berlin@gmail.com

14. SUPERVISORY AUTHORITY

If you believe your data protection rights have been violated, you may lodge a complaint with:

CNIL (Commission Nationale de l'Informatique et des Libertés)

3 Place de Fontenoy – TSA 80715

75334 Paris Cedex 07

https://www.cnil.fr

PHASE – RADAR

Last updated: January 7, 2026