Last updated : 19/08/2026
Data controller
The data controller for personal data collected on groovepick.com can be reached via the contact form.
Collected data
We collect the following data:
- Registration : username, email address, password (hashed with bcrypt)
- Usage : favorite radios, preferences (language, theme)
- Server logs : IP address, browser (standard technical data)
Processing purposes
- User account management
- Experience personalization (favorites, preferences)
- Site security
- Anonymous usage statistics
Legal basis
Processing of your data is based on your consent (at registration) and on the legitimate interest of the site manager for the security and proper functioning of the service.
Data retention period
- User account : until deleted by the user
- CRON logs : 30 days
- Server logs : 12 months maximum
Data sharing
Your personal data is never sold or shared with third parties, except for the necessary technical services:
- o2switch — hosting provider, France
- Radio Browser API — public service, no personal data transmitted
- Awin / Fnac — only via affiliate links (purchase tracking)
- eBay Partner Network — only via vinyl affiliate links
Cookies
This site only uses technical cookies necessary for its operation:
| Cookie | Purpose | Duration |
|---|---|---|
PHPSESSID |
User session (login) | Session |
remember_token |
Auto login | 30 days |
groovepick-theme |
Light/dark theme preference | localStorage |
groovepick-volume |
Player volume preference | localStorage |
cookie_consent |
Cookie consent | 1 year |
Your rights (GDPR)
Under the GDPR, you have the following rights:
- ✅ Access to your data
- ✅ Rectification of your data (via your profile)
- ✅ Deletion of your account (via your profile)
- ✅ Portability of your data
- ✅ Objection to processing
To exercise these rights, use the contact form or delete your account directly from your profile.
Security
We implement appropriate security measures to protect your data:
- Password encryption (bcrypt)
- Secure sessions (HTTPS, httpOnly, SameSite)
- CSRF protection on all forms
- Security headers (HSTS, CSP, X-Content-Type)
DPO Contact
For any questions regarding your personal data, contact us via the contact form or on X (@GroovePick).