Privacy policy
This describes exactly what Norsolia does with data. If the service changes, this page changes with it.
Who runs this
Norsolia, an independent studio project, not yet incorporated. The only contact channel is the contact form.
What we store, and why
- Account: your email, display name and a hashed password (scrypt). Needed to sign you in and own your shows.
- Your content: the shows, episodes, metadata and audio files you upload. This is the service.
- Sessions and tokens: a session identifier per sign-in and a hash of each API token you create.
- Play counts: per episode and per day, a number. We also keep a salted hash of the User-Agent string for up to seven days, only to avoid counting the same player twice within five minutes. We do not store IP addresses; the gateway in front of the app does not pass them to us.
- Messages: anything you send through the contact form or a waitlist, with the email you gave.
What we do not store
- No IP addresses, no advertising or analytics identifiers, no third-party cookies.
- No payment data: there are no payments.
- No listener identity. A play count is a floor, not a list of people.
Cookies
One strictly necessary session cookie after you sign in. Your theme choice is stored in your browser, not sent to us. See the cookie policy.
Norsolia sends no email. There is no newsletter and no email verification. We reply to the contact form from a mailbox a person reads.
Sharing
We do not sell data and do not share it with advertisers. Your public feed and show pages are, of course, public once you make a show public. Hosting runs on servers we operate in the region you chose.
How long we keep it
Account and content data stay until you delete them. Expired sessions and the short-lived User-Agent hashes are cleared automatically. Contact messages are kept while we need them to answer you.
Your choices
- Export: download a ZIP of everything from the dashboard at any time.
- Delete: delete a show, or the whole account and every file, from the dashboard after confirming your password.
- Access or correction: most of it you can see and edit in the dashboard; for anything else, ask through the form.
Regions
Each region is a separate instance. Your data lives in the region where you registered and is not copied to the others.