1. Introduction

This Privacy Policy explains how Bouncepad collects, uses, and protects your personal information when you use our service.

2. Information We Collect

2.1 Account Information

Email Registration:

• Name
• Email address
• Password (stored in hashed form)
• Email verification status

Google Authentication:

• Google ID
• Name
• Email address
• Profile picture URL

X (Twitter) Authentication:

• Twitter ID
• Name
• Username/handle
• Email address (if provided)
• Profile picture URL

2.2 Optional Profile Information

You may optionally provide:

• Payment addresses (Lightning, Monero, Bitcoin, fiat)
• User preferences and settings for your account

2.3 Usage Data

We collect information about how you use our service, including:

• Listening history (podcasts listened to, duration, background vs. foreground)
• Page views and navigation patterns
• QR code interactions
• Session information (IP address, browser user agent)
• Device information including operating system

3. Analytics and Tracking

3.1 PostHog Analytics

We use PostHog to analyze user behavior and improve our service. PostHog is hosted on EU servers and is used for:

• Recording Page View Data
• Registration and authentication events
• Audio playback events (play, pause, session start/end)
• Background listening time
• QR code scans (type, user agent, referrer)

3.2 Listening History Tracker

Our listening history tracker collects:

• Podcast and live item IDs
• Session start time
• Total listening minutes
• Background vs. foreground listening time
• Periodic updates every 15 seconds while listening

4. Push Notifications

We use OneSignal to deliver push notifications. OneSignal collects:

• User notification ID
• Browser and device information
• Information related to notification content (podcast titles, live item titles, scheduled times)

5. How We Use Your Information

• To provide and maintain our service
• To authenticate your identity
• To track listening history and provide personalized recommendations
• To send notifications about live events
• To analyze usage patterns and improve our service
• To communicate with you about your account
• To detect and prevent fraud or abuse

6. Cookies and Local Storage

We use cookies and local storage for:

• Authentication and session management
• Remembering your preferences
• Analytics tracking

7. Third-Party Services

We use third-party services that may collect additional data:

• PostHog for analytics (hosted on EU servers)
• OneSignal for push notifications
• Google and X authentication services

These services have their own privacy policies that govern their use of your data.

8. Data Storage and Security

Our website is hosted in Germany. We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.

9. Your Rights Under GDPR

As our service is based in Germany, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision making and profiling

To exercise these rights, please contact us at [email protected].

10. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected.

11. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].

Last Updated: 15 May 2025