Forever-Radio privacy notice

Last updated: October 27, 2026

Forever-Radio provides music listening, saved preferences, and song requests. Contact the operator about privacy or your account at [email protected].

Google sign-in and account information

You can listen as a guest. If you choose Google sign-in, Google supplies basic identity information, including your email address and profile information, to WorkOS, the service we use to authenticate accounts. The requested Google permissions are limited to basic sign-in information; they do not grant access to your Gmail messages, Google Drive files, calendar, or contacts.

We use this information to verify your identity and associate you with your Forever-Radio account. The radio application stores the WorkOS account identifier, account status, sign-in session records, your verified sign-in email for private account lookup by the operator, and your acceptance of the account terms. The admin interface normally shows only an email hint. Your email is not used as your public display name. Google and WorkOS also process sign-in information under their respective privacy policies.

Information used to provide the radio

Your chosen display name is intended for your profile and future social features. Names may repeat; each full name tag is unique. You can change your display name in your account. Existing private nicknames remain private. We store your saved likes and dislikes, listening preferences, optional private nickname, chosen display name and unique name tag, song requests, credit activity, and messages you send through account help. Playback information and browser identifiers help avoid repeats, operate the station, and understand listening activity. Playback can be recorded while audio plays in the background; it is not a measurement of your attention.

Guest listening history is tied to this browser and kept separately from account listening history. It can remain when you sign in or sign out. “Forget this browser” clears this browser’s guest listening history and identifier; it does not delete your account, account listening history, credit balance or saved song drafts. The guest cookie expires after 30 days. Guest summaries expire after 90 days without recorded listening.

When longer sign-ins are enabled, new sign-ins can stay active for up to 30 days without account activity and no more than 90 days from signing in. Background radio requests count as activity. WorkOS expiry or revocation can end a session sooner. We store encrypted sign-in credentials on the server to renew those sessions; your browser receives a secure, HTTP-only session cookie. Sign out on shared devices. Turning longer sign-ins off can require signing in again.

Cookies support sign-in and guest sessions. Browser storage remembers settings and may retain unfinished song drafts and introduction text on your device. Use the available clear-draft controls or clear the site's browser data on a shared device.

Saved favorites and temporary device audio

Favorites save recording identifiers, titles, station and save time to your account, separately from likes, listening history and device audio. You can remove individual favorites. Optional one-time capacity purchases retain verified transaction and entitlement records; Stripe handles payment. Refunds and disputes can reduce capacity without deleting saved titles.

While the radio page is active, it automatically stores up to 64 MiB of eligible favorites audio in this browser for in-app playback. Older bytes can be evicted and browser storage can disappear. Use Capacity & device storage to disable caching or clear device audio; those actions do not remove your saved titles. Signing out or changing accounts clears app-managed cached audio when browser storage is accessible, and tells other open radio tabs to stop favorites playback and clear their cache. Clear site data on shared devices if browser storage controls prevent app-managed clearing. Playback still requires an online account and availability check before cached audio is used. This feature does not provide audio export, indefinite background downloading or guaranteed offline listening.

Service providers and public content

Cloudflare delivers and protects the site and processes connection information. WorkOS handles authentication, and Google handles Google sign-in. Submitted text can be processed by OpenRouter and the configured AI providers for moderation, writing assistance, or spoken introductions when those features are used. For a new song commission, your short brief and style choices are processed for moderation and automatic lyric writing, then the generated song instructions are sent to the operator-controlled music worker. Spoken introductions use the configured speech provider. Existing-recording dedications use your message for speech rather than new music. We keep the original brief private; generated songs, lyrics, titles and the agreed on-air name can be public. Historical song submissions remain in retained request records. Do not put passwords, private addresses, or other sensitive information into submissions.

Songs, lyrics, titles, and introductions approved for the public station may be heard or viewed by other listeners and shared through song links. Your private account help messages and individual dislikes are not displayed publicly. Operators can review support requests and moderation evidence to operate the service and handle appeals.

Retention and your choices

Detailed listening receipts are retained for up to 30 days. Account song-listening summaries remain until cleared; guest summaries expire after 90 days of inactivity. Original commission story briefs and their writing-input copies are removed after 90 days following the final attempt, except while the request is held or unresolved. Generated lyrics, execution receipts and separately retained moderation evidence follow their own retention purposes. The operator reviews deletion requests through Account Help. Non-sensitive component identifiers, output hashes, usage grants and necessary transaction records are retained separately for provenance and fulfillment. Other account, support and moderation records remain until removed through the applicable operational process. Clearing listening history does not delete those separate records or automatically remove published recordings.

You can clear listening history and saved preferences using the account controls. For account deletion or other privacy requests, use Account → Help or email [email protected]. Account deletion currently requires operator review and is not an instant automated action. Identity verification may be needed before account information is changed or removed.

You may also remove Forever-Radio's Google authorization through your Google Account settings. Removing that authorization does not itself delete your Forever-Radio account or its stored records.

Changes

This page will be updated when the service's data practices change. Check the date above for the latest version.

Back to the radio · Account terms

Welcome allowance

When the welcome offer is enabled, we use a persistent browser cookie and keyed hashes of your verified email and network address to limit repeat claims. These records contain no raw email or network address and are retained while we enforce the one-time offer. Shared networks can reach temporary limits; use Account → Help if your first account cannot claim the offer. These limits do not prevent free listening or sign-in.

Optional private announcement previews

When enabled and chosen, a longer announcement adds 5 flexible credits and uses OpenRouter for script assistance and moderation, and the xAI Grok Sal voice for speech. Review the current account terms before choosing it. Other listeners cannot access an unaccepted audition through the app; the text and spoken words still leave our service for provider processing. No provider zero-retention or deletion guarantee has been established. Keep sensitive information out of messages and pronunciation hints.

Closing the page keeps a reserved draft. Cancel releases its customer credit hold and revokes app playback access; an already submitted provider request may finish or incur a cost. Unaccepted drafts expire after 30 minutes. Normal unaccepted audio expires after 24 hours; eligible local audio and receipt copies are removed by bounded periodic cleanup after at least 24 hours. Resolved private draft text is eligible for redaction after at least 90 days from final resolution. Uncertain billing or provider outcomes, accepted work awaiting delivery and retryable failures may require longer retention. Ownership, consent, quota, hashes and cost evidence remain. Encrypted backups and service/provider records may retain earlier copies; cancellation does not promise complete deletion on a fixed date. Browser draft storage remains until cleared on that device. Contact Account Help for a privacy request.