Privacy & Cookie Policy

Last updated: 9 June 2026

GDPR-aware template to be reviewed by a legal professional. Replace the [bracketed] placeholders.

1. Data controller

The data controller is [Operator / company], [address]. For any question about your data: [contact email] (or your DPO: [DPO email]).

2. Data we collect

• Account: email address, display name, password (hashed, never in clear text).
• Facebook login (optional): id, name, email and profile picture, if you use it.
• Your content: ceremony title, message, chosen tracks, notes and moments.
• Spotify (optional): a refresh token, if you connect your account.
• Technical: IP address and server logs, for security purposes.

3. Purposes and legal bases

• Providing the Service and managing your account — performance of the contract.
• Facebook / Spotify connection — your consent, withdrawable at any time.
• Security, fraud and abuse prevention — legitimate interest.

4. Recipients

Your data is processed by our host [host]. Some features call third-party services: Apple (iTunes API, for music search and artwork), Meta/Facebook (login) and Spotify (import/export). These third parties may be located outside the EU; transfers are framed by appropriate safeguards (standard contractual clauses). We never sell your data.

5. Retention

Your data is kept while your account is active. On account deletion it is erased (technical logs are kept for at most 12 months).

6. Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability. Exercise them by writing to [contact email]. You may also lodge a complaint with your data-protection authority (e.g. the CNIL in France).

7. Security

Passwords are hashed (PBKDF2-SHA256). Communications are encrypted over HTTPS in production. Security headers (CSP, etc.), CSRF protection and login rate limiting are in place.

8. Cookies

Farewell.fm uses only strictly necessary cookies and one language-preference cookie. We use no analytics, advertising or tracking cookies. Accordingly, under the ePrivacy Directive and regulators' guidance, these cookies are exempt from prior consent; an informational banner is nonetheless shown for transparency. The language cookie is set only when you actively choose a language.

Dismissal of the information banner is stored in your browser's local storage (localStorage), not in a cookie. You can delete cookies at any time from your browser settings.

9. Contact

For any question: [contact email].